Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/ebb8fc75-ca27-3b94-bd6b-86af4accbe4d.roa
File:                     ebb8fc75-ca27-3b94-bd6b-86af4accbe4d.roa (raw, json)
Hash identifier:          kNmulRjduInUvleqEqclMSZzmARk6ZQtzC0eFpj3KBo=
Subject key identifier:   05:AC:B2:DB:36:14:D0:3E:D1:30:4C:5A:B6:37:A7:82:5B:E6:B7:30
Certificate issuer:       /CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
Certificate serial:       010D0C9F4328584D4A8FB932F1380BA495570500
Authority key identifier: 44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/ebb8fc75-ca27-3b94-bd6b-86af4accbe4d.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     16580
IP address blocks:        131.232.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:b9:32:f1:38:0b:a4:95:57:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7e64b66-84df-4665-a4fb-eb3b8add365e
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=8fd31b67-f873-46d5-96f6-82dbdc45b9b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2e:72:a8:8f:1d:55:f4:49:b2:10:55:3c:5d:
                    d6:de:1f:8b:79:12:2a:d3:f1:10:02:bc:f4:da:1a:
                    58:eb:24:1f:bd:be:37:7c:e4:bb:9b:cc:37:81:87:
                    b2:be:71:7d:3b:03:1d:fe:d6:8b:02:64:74:fe:b2:
                    9c:6b:51:db:c6:70:15:cc:a7:3c:df:ab:0d:5d:e7:
                    e8:0a:8f:f2:1c:70:1b:60:9d:57:8b:ec:4e:ff:69:
                    a0:c9:7b:38:81:72:89:6b:c0:fb:23:ff:6f:df:56:
                    ce:ba:8a:85:bf:89:af:da:42:f7:00:c3:ba:c2:77:
                    18:26:e6:12:2f:ff:c3:b8:2a:b7:33:e3:29:f0:5b:
                    1e:6c:88:54:31:f3:12:f3:4d:01:60:f4:1f:f7:1c:
                    81:b6:bd:df:f8:45:15:ca:93:f5:17:19:c7:73:58:
                    ed:cf:a8:fe:3e:8b:fd:4d:6f:5f:95:25:9c:8f:c1:
                    01:77:4f:80:91:61:11:77:5b:36:7a:11:19:73:cc:
                    a4:a0:49:05:17:da:04:1b:a3:88:8e:b2:4f:d0:b4:
                    4b:4c:c3:11:ab:6b:92:d5:2e:95:b9:e7:1b:4b:b6:
                    ba:7d:98:8e:5a:0d:d7:6a:ed:1b:93:ec:4b:6d:e2:
                    35:fa:25:4e:69:3d:e4:35:ab:cc:89:ea:0b:6c:d8:
                    03:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AC:B2:DB:36:14:D0:3E:D1:30:4C:5A:B6:37:A7:82:5B:E6:B7:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/ebb8fc75-ca27-3b94-bd6b-86af4accbe4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl

            X509v3 Authority Key Identifier:
                keyid:44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.232.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:8c:7a:01:7c:f1:3a:cb:71:4e:6d:ae:a0:4d:21:9e:6a:eb:
         4e:5a:8c:66:af:2c:d0:31:10:d9:da:ee:0c:e8:12:f8:90:cd:
         af:5e:ad:cc:c8:d5:64:1f:43:37:b6:83:a4:62:3d:ee:6b:74:
         f8:da:c5:95:28:34:d5:68:1b:6e:c5:14:d4:32:88:15:3c:57:
         51:17:29:39:e8:59:ac:36:fc:a5:05:0a:4a:03:f7:e7:24:a8:
         d0:b6:ca:05:d1:37:96:61:40:dd:67:e4:bb:21:5c:a0:b2:79:
         d8:d2:f6:f6:f9:41:b9:f8:fe:70:c8:04:a9:06:45:53:3c:81:
         d3:af:eb:7e:68:1b:d8:e8:78:2c:74:67:d6:e3:05:3c:62:79:
         6d:6a:67:4b:74:f4:77:63:aa:42:23:a1:d3:e5:00:28:25:66:
         69:00:19:a1:25:2d:72:73:a4:c0:62:5e:c6:46:8b:35:d9:22:
         6f:21:61:d8:33:48:d0:ad:3c:a2:62:1f:fa:06:3d:6f:60:0b:
         f4:aa:58:1b:6f:c7:c6:d2:e5:fb:64:ba:d3:5d:92:2f:29:34:
         aa:ef:d1:55:45:91:68:f7:ff:79:49:32:82:d8:c3:6f:87:ad:
         e8:6b:59:4f:4f:ee:20:fa:40:90:04:c5:25:d4:76:70:ab:60:
         75:9a:70:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:44:09 2026 by rpki-client