Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/725bd4d7-7e00-3c31-9cbc-7ff51a0ba4f3.roa
File:                     725bd4d7-7e00-3c31-9cbc-7ff51a0ba4f3.roa (raw, json)
Hash identifier:          bBgREhQcr7wqcu/Rin4nJcDraeb/DAPkMDyn1ynQu00=
Subject key identifier:   C7:A5:EF:5F:5E:D2:41:AA:C3:85:76:3B:57:8A:4C:D7:3A:BF:6A:61
Certificate issuer:       /CN=6038e2ed-90e4-4896-8a5b-2db43376a32c
Certificate serial:       010D0C9F4328584E1FA9AABA9972493587C3B500
Authority key identifier: 29:05:D2:15:CB:91:AC:24:E4:54:D1:74:57:DB:F2:07:75:73:4D:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/725bd4d7-7e00-3c31-9cbc-7ff51a0ba4f3.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     21724
IP address blocks:        142.54.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:aa:ba:99:72:49:35:87:c3:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6038e2ed-90e4-4896-8a5b-2db43376a32c
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=fc3d5204-6333-4001-a6c6-f097cddcb97e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:08:c8:24:16:19:12:03:07:ae:9c:db:0f:3d:
                    ef:21:63:2d:29:14:8b:10:be:b5:13:69:8e:c2:46:
                    d3:ec:4b:0f:1e:e1:4a:67:03:17:47:a3:3d:ee:44:
                    d1:47:c9:d2:5c:c9:e3:0d:89:38:0a:09:c4:95:bb:
                    d4:01:60:dd:08:c0:b8:4c:b3:f5:a9:c3:6e:cd:5f:
                    c4:c2:4f:5e:cb:25:75:b0:a3:fa:80:ea:0d:44:d8:
                    91:85:44:8d:eb:b2:51:c3:95:cc:9b:05:fa:e5:a6:
                    f0:72:aa:5d:88:9c:31:b8:dc:72:4f:ec:02:da:1e:
                    17:2b:d1:d1:c7:5f:fc:f6:3a:e4:81:52:f9:2e:4a:
                    34:13:81:a3:e6:7c:e3:a9:cd:ea:98:e7:0d:a9:4e:
                    18:f3:12:3e:ba:87:60:ab:a5:8c:97:9f:0c:2b:20:
                    d7:5d:c4:78:13:d7:e2:1f:0b:87:cc:66:2f:4e:1b:
                    55:43:0a:bd:b7:ec:42:15:d2:8f:56:81:7a:16:d1:
                    9d:68:d7:db:8a:67:47:9a:86:f0:5b:a9:29:86:3a:
                    42:38:bf:b7:2e:12:80:82:64:24:67:c7:a8:d5:0a:
                    e6:b5:3c:ae:80:d7:f9:30:09:87:05:21:96:d6:10:
                    2d:6a:14:f8:60:48:d7:15:44:43:cc:51:36:4e:a3:
                    d9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A5:EF:5F:5E:D2:41:AA:C3:85:76:3B:57:8A:4C:D7:3A:BF:6A:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/725bd4d7-7e00-3c31-9cbc-7ff51a0ba4f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c/6038e2ed-90e4-4896-8a5b-2db43376a32c.crl

            X509v3 Authority Key Identifier:
                keyid:29:05:D2:15:CB:91:AC:24:E4:54:D1:74:57:DB:F2:07:75:73:4D:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6038e2ed-90e4-4896-8a5b-2db43376a32c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:99:79:c5:94:3b:99:10:37:e8:25:ee:fe:92:33:a7:64:e8:
         67:ef:5f:cf:29:69:ed:50:47:35:86:1b:b5:1c:9e:a3:bd:0d:
         5d:e9:52:47:3c:d4:d0:86:4f:c9:f8:66:a6:76:83:fe:9f:ca:
         7b:1f:b4:55:da:4e:d5:f4:d1:d8:36:53:69:e8:93:54:2c:ea:
         91:2a:fc:0e:5a:e1:e2:8c:5f:b4:8d:70:c6:a8:25:50:05:57:
         fc:22:de:41:b7:0e:39:42:ec:a8:a9:82:75:9b:c8:bd:16:cc:
         93:88:6b:0c:fc:35:bd:e9:7e:bc:27:f5:f3:83:cd:e8:81:e2:
         1e:8f:f7:8b:5f:d7:f2:51:f7:3b:ad:df:0d:10:70:e7:08:7d:
         78:82:56:41:88:4c:9f:a5:4f:c4:e5:ba:b9:86:5e:e9:78:66:
         93:fa:ff:35:f1:7c:ba:87:50:0b:a4:83:58:22:37:7f:88:68:
         c9:65:cf:0e:24:16:97:5f:60:b3:a7:65:8e:78:9b:40:71:35:
         6a:91:2a:e6:f3:55:81:8f:44:2d:3f:07:9a:52:50:34:83:e1:
         4c:51:3e:40:17:eb:13:79:28:8a:5c:05:3f:1a:ba:b9:7a:b9:
         ab:83:7b:e1:0e:0d:0d:16:da:b7:a3:09:56:a8:26:2c:fb:c6:
         21:34:11:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:36:41 2026 by rpki-client