Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/f6c76142-02cd-3ed3-a140-82219f8d5d9a.roa
File:                     f6c76142-02cd-3ed3-a140-82219f8d5d9a.roa (raw, json)
Hash identifier:          u1829vF2MbT4b+nHV16c2sflI27JhXgkcxkQzmL+dzE=
Subject key identifier:   60:52:62:DE:A0:D3:16:4E:F4:69:A7:16:E6:91:F5:65:E7:BA:D0:C0
Certificate issuer:       /CN=7981ca6b-952a-4908-a513-7b300be24271
Certificate serial:       010D0C9F4328584CC611EA70FA2340AC16789600
Authority key identifier: 89:36:30:76:DB:B9:65:1A:6F:C1:5F:84:DD:9D:29:7C:7A:0D:D4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/f6c76142-02cd-3ed3-a140-82219f8d5d9a.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     0
IP address blocks:        149.112.32.0/24 maxlen: 24
                          2001:504:118::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/7981ca6b-952a-4908-a513-7b300be24271.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/7981ca6b-952a-4908-a513-7b300be24271.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:11:ea:70:fa:23:40:ac:16:78:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7981ca6b-952a-4908-a513-7b300be24271
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=48fb270d-4ba9-467e-8f4c-bcbeeed74a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5c:db:d8:74:de:29:04:cd:20:0d:5c:9e:37:
                    8e:f4:e1:6e:41:0b:b4:48:cd:8d:c1:54:db:56:4e:
                    38:75:7e:b2:ac:7a:4d:ba:32:b8:90:34:5c:04:01:
                    ad:5e:22:77:8b:6d:44:cc:71:66:37:ae:61:d1:60:
                    ad:fa:ae:ec:f7:d3:cd:81:80:cf:f5:6c:57:98:2e:
                    fa:c5:65:2f:f5:53:e8:63:13:f9:67:b6:b4:e2:9e:
                    5d:a3:72:29:ce:20:5d:87:e5:12:74:1b:5d:c1:ba:
                    56:35:d8:06:5f:6f:be:5c:ad:a2:3c:10:44:37:34:
                    eb:eb:f9:19:27:fd:28:6c:d7:4f:b4:d1:b7:0d:91:
                    6a:a2:2b:95:d5:8c:de:a2:8c:44:c0:86:0b:fd:9f:
                    2a:03:cf:6e:65:82:59:26:8a:38:9a:7d:ea:d5:7e:
                    f9:82:08:39:0a:99:07:1b:36:b8:5e:7c:b2:40:99:
                    c3:ac:aa:a8:46:57:bb:94:bd:64:16:ae:c7:73:f5:
                    a4:87:f5:08:97:6b:c2:4b:69:d0:a2:b8:80:5f:bb:
                    32:55:1c:41:73:d8:c6:88:e2:28:d2:7a:d6:cb:02:
                    9f:9a:f0:33:13:c4:60:2a:98:fd:0d:8f:71:89:bf:
                    87:da:3c:84:67:dc:fe:46:ca:cc:31:f6:11:b7:76:
                    da:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:52:62:DE:A0:D3:16:4E:F4:69:A7:16:E6:91:F5:65:E7:BA:D0:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/f6c76142-02cd-3ed3-a140-82219f8d5d9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271/7981ca6b-952a-4908-a513-7b300be24271.crl

            X509v3 Authority Key Identifier:
                keyid:89:36:30:76:DB:B9:65:1A:6F:C1:5F:84:DD:9D:29:7C:7A:0D:D4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7981ca6b-952a-4908-a513-7b300be24271.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.32.0/24
                IPv6:
                  2001:504:118::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:20:da:1b:eb:76:f1:76:64:6b:9f:f2:d0:7b:fc:d5:3d:fd:
         74:77:5a:44:00:70:93:d9:ba:3d:1f:1d:f0:b7:57:bd:88:b3:
         46:01:e2:a3:9d:a1:ae:2e:7f:78:28:26:97:2e:db:c7:3f:2c:
         a8:6c:5e:95:da:aa:f8:42:4c:20:3a:a2:45:5b:b4:2a:53:ca:
         f5:69:7e:7a:ee:41:1f:e3:db:01:71:32:af:44:95:be:d5:97:
         57:97:f8:b4:d4:0e:fd:4e:5d:55:6b:55:0c:f5:8b:97:2d:db:
         8d:ec:f1:46:50:a4:85:49:c2:5f:79:74:2b:e3:63:76:d7:4a:
         10:71:69:63:33:58:8d:88:29:f2:70:e4:c5:33:fb:57:6d:b0:
         b9:b7:80:ae:f3:e7:6e:53:4e:47:00:1a:74:e5:2c:eb:dc:5d:
         77:b1:7a:cd:82:fd:46:74:ae:bb:d7:a0:e0:2a:dd:ee:99:8d:
         ef:09:f1:7e:ff:fe:97:72:46:5b:72:cb:39:90:28:08:9b:de:
         08:e9:9b:94:e4:c3:c2:ff:47:ff:9e:7c:19:7f:d0:a1:d7:aa:
         20:f6:8d:63:5b:b1:30:e4:49:89:1c:55:ee:9d:25:28:52:7f:
         5f:51:af:3c:80:5b:28:1f:04:c7:0b:f4:18:47:fb:7a:75:03:
         d3:ca:d5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:27:55 2026 by rpki-client