Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/041f0cd1-0423-3f1a-a6c6-42f6b75a0091.roa
File:                     041f0cd1-0423-3f1a-a6c6-42f6b75a0091.roa (raw, json)
Hash identifier:          zT9PPZZEUuRaK5pib+N+lypCceoMS6tL/gzc/msUX1I=
Subject key identifier:   DC:4C:0C:75:6D:94:16:05:CA:3E:05:4F:EF:BB:1F:D1:74:C3:44:EC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D75D54A247FA1AE8639A27680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/041f0cd1-0423-3f1a-a6c6-42f6b75a0091.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     7342
IP address blocks:        209.131.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:4a:24:7f:a1:ae:86:39:a2:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=c50ed582-5109-47ef-ad2e-aac8fefcadfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0c:1f:db:4b:c9:18:2f:6e:a1:1d:84:4d:62:
                    fc:a5:17:f4:2c:d3:c1:9e:ad:ea:65:81:29:ea:39:
                    16:77:05:df:4d:76:70:58:f9:8b:42:97:cf:7c:fa:
                    0e:ab:db:9b:69:72:61:c8:31:f9:13:61:5c:ee:52:
                    ae:5b:51:ab:a2:94:0c:c3:2a:45:74:67:3c:87:2d:
                    cc:3c:89:7c:84:00:7c:06:94:ce:b3:a7:e0:b3:35:
                    1d:0f:ae:0e:42:8c:be:67:eb:6f:6f:7a:9d:b2:3f:
                    0a:31:5c:8b:db:32:f2:15:8f:1a:58:fd:0c:9a:e4:
                    c8:d6:35:ac:48:27:ee:e6:5d:28:53:cc:d7:0a:67:
                    9f:2a:9f:c1:cd:d2:a0:bb:05:e4:fc:81:b0:a8:e1:
                    83:d0:82:ef:ef:b3:81:b9:23:9c:ff:52:1d:b6:a6:
                    90:ea:68:07:bc:f4:2d:41:1b:e4:71:8a:3c:57:2e:
                    6b:85:38:f8:4d:81:cd:15:16:ca:3a:3f:e0:98:17:
                    51:46:73:36:5f:7c:93:c9:32:ad:c6:5e:d0:3a:15:
                    50:65:28:01:a5:cb:9b:0c:e7:54:47:6d:15:8e:77:
                    18:a8:9a:d5:7c:d1:6a:3b:0d:f9:86:31:59:e6:23:
                    6a:3b:62:69:2b:79:92:38:44:80:b2:29:3f:86:57:
                    36:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:4C:0C:75:6D:94:16:05:CA:3E:05:4F:EF:BB:1F:D1:74:C3:44:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/041f0cd1-0423-3f1a-a6c6-42f6b75a0091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.131.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:1c:49:7e:46:31:1e:e5:b2:84:da:d6:23:3a:f9:95:79:16:
         a1:86:04:72:25:cc:c4:4a:d8:63:a4:82:2d:6f:55:58:75:a2:
         65:fe:ce:07:20:85:b4:32:7f:ad:b1:a2:34:58:97:82:e8:87:
         1b:25:28:2e:b3:98:05:3c:7e:9c:df:17:61:f0:dd:6c:70:4d:
         99:23:7a:74:34:e8:56:d9:1c:92:3e:27:d9:2a:98:b0:b6:51:
         c5:61:91:97:e1:8a:bb:ad:f9:c9:6a:78:ae:9f:c3:2f:b0:6e:
         04:33:fe:97:ae:46:13:fc:ca:55:f4:6c:4d:54:5a:3d:bf:0c:
         05:bf:3a:1f:a2:66:4f:c0:d7:11:17:42:24:db:61:ba:54:b1:
         e7:d7:7b:fd:66:69:dd:c3:5f:6a:8e:6f:0e:d7:67:96:9d:d0:
         99:f9:ed:f8:90:aa:8c:98:19:91:51:0c:83:19:25:d2:86:89:
         1b:39:2b:78:cd:e4:ae:5f:4b:14:e8:32:da:d9:44:a4:af:30:
         b4:b1:ef:58:d7:1d:b5:4c:b9:13:0b:63:6b:f5:95:01:ec:c4:
         d2:5c:7f:5a:4c:26:05:45:35:d1:bc:35:d8:6a:df:b6:a6:7b:
         0c:ed:fb:f5:61:04:ee:9f:56:d9:4e:5a:6e:50:60:e3:e2:40:
         86:b6:3d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:47:00 2026 by rpki-client