Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/44fb2b1a-efc5-3180-a363-f8181513eadf.roa
File:                     44fb2b1a-efc5-3180-a363-f8181513eadf.roa (raw, json)
Hash identifier:          B068MSx8g5SBUxwdWxcBxvzKTLaOkcbpxNhbasEOE94=
Subject key identifier:   AD:CD:C6:E1:53:43:B8:79:BA:84:11:F5:4A:29:2A:C7:8A:4A:0F:F5
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D8EF98AE4072B2B45F8291E80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/44fb2b1a-efc5-3180-a363-f8181513eadf.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        130.61.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f9:8a:e4:07:2b:2b:45:f8:29:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=f9db3882-e0d5-4b1f-902b-e38eb443d5bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:99:e1:fb:3b:70:d6:e6:33:db:a1:33:31:6a:
                    51:d8:0a:a4:cf:3f:29:14:87:5a:b2:b9:23:c4:65:
                    f9:07:fc:3e:48:cb:eb:83:30:d6:de:03:c3:bc:25:
                    d2:8c:d6:57:20:89:97:02:9d:14:94:f6:b2:9e:76:
                    06:2e:b0:43:86:f4:d3:29:73:42:42:e9:68:eb:14:
                    20:93:db:3c:49:b5:50:e2:45:87:05:08:94:f1:13:
                    de:46:a2:ae:77:10:08:53:2c:73:f5:d3:61:3b:30:
                    fd:0e:6d:94:0d:3e:7e:d1:27:13:a6:56:35:52:cc:
                    e6:46:4e:02:91:61:3b:ca:24:5e:ee:15:d5:46:08:
                    09:aa:fb:3e:98:71:f8:1b:56:28:78:28:3a:ec:87:
                    5b:5e:59:c8:77:d2:49:4d:fd:2f:98:34:28:6a:41:
                    44:f2:d5:35:6f:be:83:46:b1:2a:e2:0e:4f:81:0e:
                    b8:08:ed:2c:e8:c1:e8:03:a4:46:c1:33:7f:98:d1:
                    38:3a:59:8c:c8:7f:ff:c0:b7:53:18:d8:c3:02:32:
                    3d:ef:40:fa:8a:fd:ef:f1:ce:08:d7:6c:22:2c:bb:
                    f2:4b:dd:7f:0a:c0:c3:81:f8:18:c5:fc:9a:cc:c1:
                    38:d3:0b:d8:b0:a6:90:fc:68:8b:27:ce:86:d1:8a:
                    84:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CD:C6:E1:53:43:B8:79:BA:84:11:F5:4A:29:2A:C7:8A:4A:0F:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/44fb2b1a-efc5-3180-a363-f8181513eadf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.61.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:d5:b0:de:ba:d9:9a:d3:6d:4a:11:9f:1e:8b:83:bd:b4:98:
         5e:ed:4a:cf:2e:6e:28:bb:e5:27:1e:1c:7e:a4:e1:c5:26:48:
         bf:30:61:d7:57:87:8e:60:b3:73:5c:23:a3:5d:db:b0:d2:7a:
         16:18:f1:49:8a:77:f7:53:be:72:3d:29:99:ee:6f:4a:bf:9b:
         90:2c:85:6a:94:b1:9f:8c:7d:e1:b8:4c:70:36:83:3b:6b:55:
         4c:dd:f4:9d:69:42:a6:b3:fe:50:b2:7d:21:ee:b6:21:0f:c0:
         a8:30:b3:84:fb:40:ae:82:35:dd:18:11:a1:b2:b0:22:09:ca:
         a5:b5:32:64:d6:e3:72:cc:3f:d4:b4:c6:9a:fb:e4:8f:ab:1d:
         92:6e:2e:6a:3b:ed:c9:12:fd:92:18:d2:1a:a0:94:58:fd:99:
         39:a4:40:00:64:96:da:6f:05:4f:99:26:5b:cf:07:5c:94:45:
         bd:dc:2c:93:81:14:0e:11:bc:7b:b6:fc:58:55:ca:d9:fa:d7:
         26:6e:da:2a:98:b6:54:c3:7a:10:a5:4b:12:9d:a1:c4:a4:35:
         99:d4:cb:96:fe:fa:2b:c6:ef:c2:c4:83:92:5b:b6:44:72:57:
         44:3a:67:33:14:aa:d6:11:23:e9:71:fd:99:7b:8c:e8:1e:65:
         90:e4:89:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:08:58 2026 by rpki-client