Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/913eb957-ee4b-4400-b9e4-67fc5e9e2a6e/949b93ef-e8b3-3e7d-b686-c207f798b4f2.roa
File:                     949b93ef-e8b3-3e7d-b686-c207f798b4f2.roa (raw, json)
Hash identifier:          ZemGUc1JxQsZHuWliWramtK2xoiQ3xrR/Q8SCENN4BI=
Subject key identifier:   60:47:42:0F:29:03:00:01:1F:44:37:88:F8:0E:4D:CB:08:17:60:B1
Certificate issuer:       /CN=913eb957-ee4b-4400-b9e4-67fc5e9e2a6e
Certificate serial:       010D0C9F4328584F3E4804D7C94BDFD763B00C00
Authority key identifier: 2F:7D:82:BF:12:DE:FC:8F:8E:1B:5A:BC:FD:EE:F3:28:26:7E:7A:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/913eb957-ee4b-4400-b9e4-67fc5e9e2a6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/913eb957-ee4b-4400-b9e4-67fc5e9e2a6e/949b93ef-e8b3-3e7d-b686-c207f798b4f2.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     397423
IP address blocks:        130.12.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/913eb957-ee4b-4400-b9e4-67fc5e9e2a6e/913eb957-ee4b-4400-b9e4-67fc5e9e2a6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/913eb957-ee4b-4400-b9e4-67fc5e9e2a6e/913eb957-ee4b-4400-b9e4-67fc5e9e2a6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/913eb957-ee4b-4400-b9e4-67fc5e9e2a6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:48:04:d7:c9:4b:df:d7:63:b0:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913eb957-ee4b-4400-b9e4-67fc5e9e2a6e
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=9bbca95e-49f3-4e6b-8261-303d8e40aa5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c5:c0:10:54:de:e6:47:2e:4e:c3:38:14:00:
                    1f:42:db:df:53:da:33:b0:62:35:ba:62:9e:02:9f:
                    19:49:21:50:8c:bd:9c:d1:ad:55:5c:d5:3b:59:bf:
                    81:4c:2b:a8:1d:ba:d4:93:72:30:6d:a4:e8:17:85:
                    3c:e5:21:00:1c:95:a1:53:06:d4:b8:40:a8:64:21:
                    bf:00:2f:d9:0b:6c:88:f1:28:ef:2b:28:10:3c:aa:
                    4e:c3:a2:1e:f2:8f:39:77:fb:fd:f0:40:62:b9:8c:
                    73:d4:8d:3b:3e:9a:94:f4:85:ed:4c:ef:0c:74:63:
                    8c:8b:78:f3:1c:d1:7c:a5:b0:c0:14:b8:79:7a:9b:
                    fe:f1:ab:e1:c8:a0:66:2d:07:fd:49:f7:83:c7:bb:
                    ad:73:f1:15:1d:c1:48:82:d0:b7:5e:39:d8:7c:fb:
                    e4:4b:2b:77:03:a5:6e:09:09:e2:0e:7e:f7:6e:f9:
                    3e:54:71:ed:11:8b:d2:57:4c:17:dc:5c:af:f9:9b:
                    21:72:d1:6f:c0:39:80:4c:cb:55:e9:25:d4:75:c0:
                    14:bd:9a:e1:28:55:69:6a:27:f1:cf:34:98:35:f1:
                    d7:0e:ea:ee:e4:7a:e1:d9:c5:ce:77:78:59:99:72:
                    66:73:71:32:61:9e:52:d4:47:b6:31:e9:46:2f:e7:
                    12:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:47:42:0F:29:03:00:01:1F:44:37:88:F8:0E:4D:CB:08:17:60:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/913eb957-ee4b-4400-b9e4-67fc5e9e2a6e/949b93ef-e8b3-3e7d-b686-c207f798b4f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/913eb957-ee4b-4400-b9e4-67fc5e9e2a6e/913eb957-ee4b-4400-b9e4-67fc5e9e2a6e.crl

            X509v3 Authority Key Identifier:
                keyid:2F:7D:82:BF:12:DE:FC:8F:8E:1B:5A:BC:FD:EE:F3:28:26:7E:7A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/913eb957-ee4b-4400-b9e4-67fc5e9e2a6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:02:fb:cb:4b:34:f0:89:18:53:29:76:3a:9d:6e:c4:1b:11:
         5d:56:a9:ea:12:8f:b0:ec:36:fb:21:e2:16:ad:be:69:7f:32:
         27:5a:45:82:02:6d:2e:f7:a6:0d:c1:f6:4d:b7:a7:cb:da:bb:
         4c:70:e6:e1:b5:5e:6f:d2:d6:65:21:56:17:23:e0:9d:02:03:
         45:2f:1a:ef:14:f6:65:6a:9a:06:8c:1d:53:ea:47:63:cb:ad:
         b4:93:39:23:bd:2d:60:e0:9b:6b:36:b1:ea:ee:ca:b5:58:7c:
         0a:48:9b:75:90:90:fa:34:36:fc:37:d9:12:74:fa:9e:66:79:
         5d:ee:5f:8f:80:ec:06:55:34:22:e5:4f:1c:a2:9c:ef:fa:e4:
         bf:0c:3f:e6:ea:a9:05:d1:2f:9b:78:8e:87:bd:e0:4c:e2:48:
         02:43:0e:3d:df:18:40:eb:af:21:3f:17:2a:1a:fc:62:3a:0d:
         fd:c9:1f:0e:8b:b2:58:67:22:0b:83:a6:40:a1:5a:73:f1:7a:
         01:cb:a0:6a:27:db:dc:18:e8:0c:cd:6a:23:56:71:56:7c:d5:
         30:b2:57:15:5a:e8:6e:c4:ac:8e:dd:33:44:c0:68:31:1e:08:
         30:f6:7a:57:f0:dc:07:88:6d:93:a6:ef:5a:9d:a2:85:75:76:
         76:1d:c9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:12:17 2026 by rpki-client