Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/bbafee31-46f6-3ca6-abab-6d00e2297780.roa
File:                     bbafee31-46f6-3ca6-abab-6d00e2297780.roa (raw, json)
Hash identifier:          RHjOAjQkUNab2Rzns+Ar047Yds1EeE20vDmowNea00g=
Subject key identifier:   FB:8B:84:2D:11:7A:D4:D8:4F:E2:49:53:20:44:62:A7:44:8F:6E:4A
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584E736A33A1D4843D84D22F00E0
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/bbafee31-46f6-3ca6-abab-6d00e2297780.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     6079
IP address blocks:        131.106.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:33:a1:d4:84:3d:84:d2:2f:00:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=2e0ed319-af7a-4a41-b043-edb65cdffb40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:92:2c:a4:2b:70:49:56:b5:48:77:e0:14:d0:
                    77:4d:05:25:c3:ab:85:9e:e7:cb:12:2f:4f:5a:d3:
                    81:28:5d:60:cc:09:7f:24:13:83:58:c3:82:7b:59:
                    ad:2e:4a:bb:ba:1d:78:3b:47:eb:42:3e:d8:cd:5d:
                    1c:08:c4:1d:bf:e5:21:40:90:92:95:a0:e3:13:c2:
                    83:e2:46:b4:50:26:d9:e2:ac:b8:cf:4d:a9:8e:24:
                    3b:8c:df:c1:c9:fb:0f:1c:b6:dc:75:8c:57:98:3c:
                    a6:ee:3e:2f:e9:2a:48:09:fe:1f:10:d1:3f:ba:44:
                    5e:d3:b9:48:e7:f7:db:6b:85:0e:1f:b3:b0:37:a3:
                    d9:93:76:7f:72:44:6c:ce:b1:aa:d7:b5:b9:67:45:
                    c3:be:3a:c4:d3:47:9f:c3:96:30:50:17:bd:82:90:
                    f9:50:30:92:6b:c1:00:d0:68:2e:d5:12:d7:5a:bc:
                    10:bf:bd:6f:79:03:cf:f4:72:a8:3e:9d:35:8d:97:
                    e4:a3:a5:70:f1:f6:4b:2d:5d:c7:95:c1:8d:02:a2:
                    c4:51:9a:60:cd:23:21:b8:9e:6c:a0:87:51:86:b7:
                    d2:36:d0:a0:5e:16:e3:1c:c9:bc:82:e3:5f:ee:b1:
                    fd:4c:2e:77:dc:3d:91:36:ad:fb:60:90:75:53:c6:
                    31:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8B:84:2D:11:7A:D4:D8:4F:E2:49:53:20:44:62:A7:44:8F:6E:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/bbafee31-46f6-3ca6-abab-6d00e2297780.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.106.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:e6:c1:26:64:6b:83:3e:3a:31:2f:74:b7:35:c2:0a:c8:95:
         97:ca:23:d3:51:9e:f6:c1:8a:fd:33:e7:f0:ab:cd:57:e8:ab:
         8d:66:38:3f:ed:fe:67:95:d4:2f:14:a9:6b:61:d0:af:30:63:
         66:fc:14:f0:dc:83:34:86:5f:d5:89:98:20:f1:95:cd:a0:cf:
         4a:c4:57:2b:3d:a5:6e:3c:5b:4f:d0:be:31:f9:21:bd:5b:09:
         5f:be:03:84:f3:fa:c4:73:e7:e1:02:00:ca:78:c1:0b:b3:d5:
         90:6c:fb:f2:f6:5f:d8:cc:36:3c:15:d4:5d:7b:a2:1b:b1:bb:
         7e:57:25:20:dc:29:76:19:23:b6:ee:0d:5e:7f:49:3d:1a:1b:
         d1:4e:c8:88:33:b6:71:f8:d1:aa:9a:d6:52:e7:69:f3:69:33:
         87:38:40:8e:f0:0a:a0:ab:aa:54:86:c4:53:6c:08:ec:e3:be:
         6a:fa:6b:6b:3e:47:2f:bc:ed:39:81:68:c8:f7:b0:75:86:ff:
         90:81:0a:0f:18:be:75:98:ed:dc:c5:99:9e:09:47:32:b4:22:
         5a:b8:c2:b8:e2:24:12:15:fe:a3:5a:37:e1:43:ca:27:3d:4a:
         f6:37:31:11:7c:52:16:5d:2b:6a:5e:9c:fd:00:b9:46:9b:30:
         6b:7f:fc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:04:26 2026 by rpki-client