Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3637cdba-96e1-38aa-afdb-de8c7431886b.roa
File:                     3637cdba-96e1-38aa-afdb-de8c7431886b.roa (raw, json)
Hash identifier:          1xJ4IuxyTPoaXCRraXBf2GZQqcxHqkFWWqBQakzY7Q0=
Subject key identifier:   9E:3F:F1:9E:77:A8:36:E7:56:9D:7E:B6:84:81:7F:72:01:97:35:24
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DBD05A4CDA7E02BD78D022800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3637cdba-96e1-38aa-afdb-de8c7431886b.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     701
IP address blocks:        141.151.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:a4:cd:a7:e0:2b:d7:8d:02:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=ccc6c7f3-cd99-4363-b270-d2518fa1eb47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:aa:59:d6:91:90:4c:7c:53:7d:07:4b:78:4f:
                    c6:78:69:e4:2a:21:13:32:e8:7f:64:0c:9c:f4:00:
                    11:5f:03:1e:ad:94:f5:84:2e:ce:4e:30:8b:48:50:
                    1c:52:f0:f6:1b:7a:d2:b4:7e:b1:3b:8b:65:e0:2b:
                    20:ce:30:c0:98:73:28:c0:39:ac:fa:b4:26:27:dd:
                    dc:6b:5a:dd:bb:00:9b:64:08:83:26:37:de:9b:72:
                    04:70:0d:43:af:0c:a4:b9:a7:b4:ad:28:44:17:3c:
                    0c:88:ec:dd:4e:3d:c6:04:be:1b:d0:51:75:ef:78:
                    4f:dd:31:6c:f2:a3:07:c5:82:07:b9:8f:f1:87:18:
                    f5:6b:04:9a:53:fe:5e:01:a2:50:80:07:10:83:3e:
                    36:f8:48:8a:55:1a:48:09:5e:6e:9a:c4:fd:d8:a7:
                    35:43:35:83:0e:9e:25:30:2b:0c:1d:df:3f:46:33:
                    4a:a3:6a:77:9f:79:ad:aa:6d:08:2f:13:78:bc:3b:
                    68:a5:a4:6a:61:74:58:9a:3c:06:8f:73:92:94:a7:
                    52:04:ea:46:ea:01:f0:ef:96:d9:3d:52:75:8c:31:
                    7d:af:cd:4e:76:f4:e4:a0:a2:bb:63:4c:a7:e8:40:
                    5b:9c:1d:b2:81:77:a2:bc:a8:65:e1:0c:a1:5d:1b:
                    e4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3F:F1:9E:77:A8:36:E7:56:9D:7E:B6:84:81:7F:72:01:97:35:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3637cdba-96e1-38aa-afdb-de8c7431886b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.151.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:c2:bc:dc:97:44:21:33:65:38:d7:1e:ba:b0:11:17:42:15:
         7e:cb:eb:87:2a:76:d3:ba:5a:bf:63:01:0d:04:87:8d:e9:6c:
         34:ad:ea:f3:5a:11:f8:d9:67:bf:55:5e:56:81:7e:1c:8b:a9:
         5c:c7:7d:38:59:a4:51:da:2e:bc:d8:a1:43:88:c9:b1:2f:b2:
         cb:1a:46:5d:14:5d:1f:25:27:ee:b3:f6:b7:30:c0:e2:d3:7b:
         99:4f:8a:db:d5:10:65:85:30:6d:8e:a2:d4:cc:e2:75:26:40:
         a0:d4:8d:70:f3:57:2a:9b:ec:d2:c2:67:f5:51:fe:fa:e5:69:
         03:c3:4a:97:36:7f:dd:4a:11:85:d8:5e:59:5f:ea:d5:81:34:
         79:12:51:5c:e9:1c:3c:13:03:64:61:05:e4:a4:f8:55:d9:6c:
         23:3b:51:e6:85:99:13:d2:ad:57:48:ef:81:8e:fc:f7:1a:ad:
         4e:3b:ac:93:b4:39:4b:4a:1c:b6:29:53:ca:69:bc:da:a7:0f:
         bb:7f:78:84:0e:5b:de:dd:ab:9a:54:96:89:91:17:85:0a:13:
         b8:70:b7:a8:f6:33:d4:18:4a:b3:38:f7:6f:12:e6:5b:6a:47:
         94:65:c1:9c:4f:6e:b4:8e:f4:d4:f4:fc:c5:3c:5a:13:b8:0a:
         eb:a1:64:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:52:25 2026 by rpki-client