Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e528276f-2a51-359b-9930-15059a3eeb28.roa
File:                     e528276f-2a51-359b-9930-15059a3eeb28.roa (raw, json)
Hash identifier:          IsBx9SqGsqQ+TPMzHTASIJ12mpgwyGi15PrCyM30Zc8=
Subject key identifier:   44:AF:54:B5:3B:40:43:0F:96:73:B1:A8:F7:58:53:39:CD:A6:88:9F
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584F4C3D770868136FBE46C28280
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e528276f-2a51-359b-9930-15059a3eeb28.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     8075
IP address blocks:        131.145.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:77:08:68:13:6f:be:46:c2:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=b3f479f8-630d-4d96-834d-0296359455b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:40:74:3d:7c:47:04:46:ca:eb:ea:bb:a3:77:
                    d8:10:44:d0:93:57:31:43:b3:84:8d:1f:25:50:a7:
                    0e:7b:c3:b8:20:00:15:07:02:07:08:25:db:c3:50:
                    f8:49:32:59:82:e7:72:02:16:2e:3c:7f:1b:93:49:
                    92:4a:31:5d:00:9a:7f:51:80:ea:10:9a:fd:da:da:
                    44:26:c4:60:66:25:df:b6:62:e4:8f:48:5f:ea:4f:
                    4f:81:d0:42:41:f4:46:f1:da:92:f3:74:fd:c6:fc:
                    44:37:cd:6e:fb:45:2b:48:25:7f:dd:f7:32:e6:17:
                    31:9f:c5:a4:57:ed:02:97:c3:60:d2:a6:4c:b4:83:
                    78:06:cc:eb:15:b1:2f:a3:41:ed:5e:a3:a8:93:8f:
                    2e:66:ca:d9:b9:67:88:5f:0a:e9:20:e8:18:bc:ec:
                    5a:0d:80:1d:b3:02:48:6b:1a:2b:db:81:31:1f:7b:
                    b0:9e:77:93:02:ff:77:3f:07:f2:98:a9:42:fc:25:
                    a0:0a:0d:46:66:37:f1:54:4b:a3:2f:97:68:8b:e1:
                    31:34:f2:65:c9:e2:72:fb:57:c0:dd:14:dc:45:3b:
                    15:9d:32:52:c2:92:34:e1:f3:5b:15:22:16:2a:24:
                    9e:6f:9d:87:4d:e0:f0:21:4a:fa:5d:92:72:38:c2:
                    25:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AF:54:B5:3B:40:43:0F:96:73:B1:A8:F7:58:53:39:CD:A6:88:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/e528276f-2a51-359b-9930-15059a3eeb28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.145.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:21:7a:1b:6d:8a:e7:ee:da:a8:6b:2f:3a:97:fe:99:6f:e0:
         53:70:62:bf:75:ba:14:e1:fb:be:91:ee:4d:1b:b7:61:53:98:
         97:3a:d6:86:97:95:c8:29:1c:10:ac:82:bb:79:31:fa:20:29:
         fa:c6:8a:ff:b5:75:01:d3:15:14:8e:8e:9a:07:c3:08:26:78:
         25:43:78:69:81:dc:a1:d2:28:06:dc:00:a1:da:50:e5:07:11:
         8d:4a:2f:9c:99:44:0c:82:c4:f5:6b:1a:5e:81:33:96:4c:ff:
         ee:b0:ff:b2:d4:6b:d1:d1:bf:c1:1b:36:43:59:4c:8d:e7:97:
         0a:0d:39:bf:e2:fa:aa:f3:c8:05:98:67:bf:25:cc:ec:7d:ae:
         ec:fd:3d:74:93:94:73:85:fa:39:0c:41:07:5e:5a:be:ea:6b:
         59:88:29:48:0c:9e:9a:b4:15:53:7b:75:fb:8d:1d:c2:36:5c:
         90:6d:70:9d:1a:ed:78:a2:cb:ef:93:3d:66:41:84:c6:a2:78:
         e0:35:3d:a9:90:a6:d7:b3:65:5f:bc:06:84:90:a3:10:d3:17:
         19:f7:b4:53:50:a0:cd:e1:95:f0:ef:11:26:e3:1b:37:30:d4:
         da:31:2d:1e:f8:7e:d9:e7:e3:ef:25:19:7c:68:a8:58:0a:86:
         16:f2:d1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:38:37 2026 by rpki-client