Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/25321a7d-2fbd-33c6-808b-c8cb73fc33da.roa
File:                     25321a7d-2fbd-33c6-808b-c8cb73fc33da.roa (raw, json)
Hash identifier:          D3awNtEyK5wUfXlWhejwSpQQwpIuqomKPJFowADw+Lg=
Subject key identifier:   9F:34:66:72:72:D3:7B:A2:82:41:13:7E:65:24:85:E4:30:FA:5F:4D
Certificate issuer:       /CN=8c1e504b-f881-4524-a98f-2a623e4a476d
Certificate serial:       010D0C9F4328584E1B798A2A1A5AA9D4C96F8780
Authority key identifier: B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/25321a7d-2fbd-33c6-808b-c8cb73fc33da.roa
Signing time:             Mon 08 Jun 2026 21:00:12 +0000
ROA not before:           Mon 08 Jun 2026 21:00:12 +0000
ROA not after:            Sun 06 Sep 2026 21:00:12 +0000
asID:                     396952
IP address blocks:        142.248.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:79:8a:2a:1a:5a:a9:d4:c9:6f:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c1e504b-f881-4524-a98f-2a623e4a476d
        Validity
            Not Before: Jun  8 21:00:12 2026 GMT
            Not After : Sep  6 21:00:12 2026 GMT
        Subject: CN=833a8656-a291-4ce9-84b0-3f9a23a180eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ba:cb:85:64:32:5c:09:c0:12:16:79:7b:1d:
                    8f:3d:7e:27:51:68:36:f1:4a:dc:8d:10:32:d5:15:
                    f4:14:e9:12:0d:73:de:46:e0:a2:28:09:21:75:09:
                    8e:23:ea:03:3a:c1:8b:8d:5c:81:c9:81:56:3b:4b:
                    dc:eb:f7:46:77:04:f1:3f:7d:cf:b4:74:2e:81:6d:
                    f4:52:18:76:60:52:8c:92:19:50:0d:38:b4:e2:54:
                    83:2d:59:45:62:cf:67:32:a3:c8:6e:3a:cd:39:25:
                    ef:f7:45:39:a1:90:3f:74:74:c5:3c:38:db:a3:8d:
                    8d:de:d8:68:2b:d0:84:c3:bb:20:c0:68:7a:a2:27:
                    df:53:df:d1:7a:20:9b:57:86:4f:d1:f0:12:62:c3:
                    da:24:b7:af:09:b9:0b:1a:70:41:1e:c6:65:ea:2b:
                    b6:cc:7c:03:f4:d9:37:a5:2e:9c:fc:5c:ab:1b:e1:
                    86:e6:38:68:16:15:af:3c:5a:50:fb:46:2c:8e:65:
                    9b:f7:7e:02:93:67:98:b4:2c:1a:b9:97:7d:6c:f6:
                    e1:4b:76:1c:05:1c:af:dd:68:12:90:89:f0:48:0c:
                    87:c0:d1:fd:bb:22:e7:dc:c3:ef:40:62:f6:16:a0:
                    1b:aa:21:93:94:bd:ca:77:cc:56:07:2e:b2:bd:ae:
                    ec:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:34:66:72:72:D3:7B:A2:82:41:13:7E:65:24:85:E4:30:FA:5F:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/25321a7d-2fbd-33c6-808b-c8cb73fc33da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl

            X509v3 Authority Key Identifier:
                keyid:B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:91:25:ad:63:00:05:2d:da:86:c3:1c:82:20:0d:bb:7d:fe:
         43:ef:f8:63:f0:74:da:76:4b:2f:4c:55:f3:a0:0c:f8:c9:dd:
         64:27:9a:e3:02:b5:19:2f:3a:ba:b2:5a:3a:6c:78:f7:da:ad:
         37:1b:df:0e:aa:64:c8:c1:97:b2:a2:45:5e:8c:36:74:4f:5f:
         43:05:24:44:37:df:5d:a6:61:b3:e1:c8:e7:7b:3c:8a:e4:59:
         8b:fd:e8:f4:88:dc:56:56:41:19:1e:19:d2:5f:ba:58:2d:05:
         b3:d8:66:57:2f:06:c8:9b:58:13:93:2a:fd:1d:71:e8:51:e0:
         96:ab:62:09:79:07:67:57:4e:f3:69:9d:65:d8:6b:61:cf:13:
         e2:f6:26:9c:84:cf:e9:7d:50:ce:ec:71:69:a2:86:66:63:90:
         9e:af:77:c7:2f:66:2f:d9:14:0e:47:0d:ee:23:c3:1c:77:62:
         31:e1:f5:27:33:b8:4e:00:e2:51:39:8b:2a:9b:0e:6f:3b:cc:
         80:15:e8:7b:51:be:9b:c9:3f:8a:71:ac:b4:4f:74:25:da:fc:
         68:b5:4a:b1:02:4f:cc:72:56:4f:25:ff:13:54:c4:38:6c:11:
         b9:a4:e0:f2:77:8b:92:12:86:54:40:dc:9f:e7:1a:9d:6d:d7:
         c0:27:92:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:30:56 2026 by rpki-client