Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/437979a4-892a-3127-ac09-38348c8212e6.roa
File:                     437979a4-892a-3127-ac09-38348c8212e6.roa (raw, json)
Hash identifier:          e6sBQsFzzGHCBi+JbbIFLXXIMw04KMgrNnomwXqbXik=
Subject key identifier:   A6:68:EB:22:8A:8E:28:F8:03:7B:A6:4D:8F:4A:62:F8:CA:9F:13:1A
Certificate issuer:       /CN=d39fc6b6-445d-497a-8eb1-4a04472d7335
Certificate serial:       010D0C9F4328584E18AEDEA65C948B86E0454040
Authority key identifier: 00:B7:E9:FA:72:8B:1E:9B:86:EA:98:EF:07:FB:7B:B0:7F:F8:CE:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/437979a4-892a-3127-ac09-38348c8212e6.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     929
IP address blocks:        142.249.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/d39fc6b6-445d-497a-8eb1-4a04472d7335.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/d39fc6b6-445d-497a-8eb1-4a04472d7335.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:de:a6:5c:94:8b:86:e0:45:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d39fc6b6-445d-497a-8eb1-4a04472d7335
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=451df579-d381-4ff2-8bb2-c5735f9c9d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:84:c0:1f:e3:b4:ef:62:26:e5:c5:b5:38:f0:
                    e8:18:13:e0:7e:dc:00:af:e7:72:fa:f0:f4:13:a5:
                    b7:c3:93:ac:9b:16:59:38:18:a1:19:b8:a3:c9:51:
                    ed:31:1e:8f:4b:ec:3a:0f:4b:77:f1:79:33:fd:0d:
                    8c:a0:7d:93:db:70:36:c5:0a:0a:ca:51:88:2a:dd:
                    7c:31:e3:81:96:e8:88:3d:81:b9:61:d4:51:62:81:
                    38:c6:67:70:8d:e6:08:fd:47:89:a0:7a:c1:43:96:
                    d1:22:bc:0e:3f:97:69:e9:d6:ea:4a:be:71:05:e4:
                    2c:08:4a:fe:22:f1:a9:c1:11:67:0d:5d:60:d8:bb:
                    b2:12:f3:69:c6:46:33:14:8e:a9:9e:4c:08:de:7c:
                    87:4c:5f:01:50:83:45:9e:c5:f2:31:51:b2:17:98:
                    73:d4:f6:8d:d0:7b:3f:66:29:ba:b7:c7:83:34:e5:
                    45:e3:58:52:79:49:a7:43:90:58:1f:29:74:4e:b0:
                    15:cb:a6:dc:27:cf:47:90:67:2d:16:9d:45:86:1c:
                    9f:62:ed:e4:16:e6:79:b1:db:c5:be:69:48:76:92:
                    db:7a:6c:08:b9:5e:47:d1:d6:5c:c6:29:79:e8:a5:
                    46:8c:06:c2:91:cf:c3:4e:1c:f4:7c:c4:85:6e:3b:
                    bb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:68:EB:22:8A:8E:28:F8:03:7B:A6:4D:8F:4A:62:F8:CA:9F:13:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/437979a4-892a-3127-ac09-38348c8212e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/d39fc6b6-445d-497a-8eb1-4a04472d7335.crl

            X509v3 Authority Key Identifier:
                keyid:00:B7:E9:FA:72:8B:1E:9B:86:EA:98:EF:07:FB:7B:B0:7F:F8:CE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:e9:6e:98:74:de:fe:f4:1e:63:34:08:eb:f2:0a:af:c8:5c:
         79:56:89:73:96:79:d0:f6:09:49:b2:1b:ec:bd:82:00:d0:79:
         7c:c4:ba:bc:13:4b:03:e6:c8:94:04:d9:4b:44:1c:64:24:c2:
         11:d4:05:62:41:aa:60:0c:5c:96:51:a9:74:56:d7:90:6b:3d:
         33:d2:08:5f:6e:fb:27:12:7e:69:1e:b7:42:b3:f8:c8:77:a6:
         9a:94:a0:61:27:55:0d:dc:3d:9c:f1:1a:fb:d1:1f:0b:f9:00:
         74:10:a8:d6:6b:a9:bc:27:51:ff:0b:2c:d7:d9:6c:39:be:8c:
         d3:94:b4:bf:30:39:7b:4d:6e:dd:43:a8:98:89:f0:35:68:80:
         00:a7:1b:d5:7a:d1:c1:a2:9e:57:25:ac:37:57:f1:dc:34:28:
         63:b3:da:40:19:8f:f5:95:a8:0b:37:0f:2f:d1:12:8e:6e:a4:
         8a:bb:60:39:b4:5d:3c:c9:13:20:3e:0f:11:a7:64:d1:9f:d6:
         ad:48:e1:ab:f2:d2:a5:9d:ab:e8:ec:ac:dd:cd:64:f7:97:53:
         69:7a:d6:8f:47:93:f4:83:a7:13:c0:cf:c5:4f:15:a3:ad:cb:
         59:a9:8f:61:d9:f9:77:a2:2a:5c:b8:79:7e:21:9e:ea:c7:6b:
         aa:63:c6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:58:27 2026 by rpki-client