Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/b71ae3d3-3211-3340-98c1-ef88fc51ee9f.roa
File:                     b71ae3d3-3211-3340-98c1-ef88fc51ee9f.roa (raw, json)
Hash identifier:          K9PnZ//pnelKrixuY3/dAzyUuF3aY+RBtS0zRbkCGQU=
Subject key identifier:   E2:1B:BD:EB:B2:11:4C:11:67:D2:64:A7:37:51:E0:44:30:D3:BB:61
Certificate issuer:       /CN=0f950b17-8345-41e7-bf75-5481729a0012
Certificate serial:       010D0C9F4328584C9ACC5DE3C0807795DED77980
Authority key identifier: 56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/b71ae3d3-3211-3340-98c1-ef88fc51ee9f.roa
Signing time:             Thu 22 Jan 2026 02:00:31 +0000
ROA not before:           Thu 22 Jan 2026 02:00:31 +0000
ROA not after:            Wed 22 Apr 2026 01:00:31 +0000
asID:                     32723
IP address blocks:        216.6.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:9a:cc:5d:e3:c0:80:77:95:de:d7:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f950b17-8345-41e7-bf75-5481729a0012
        Validity
            Not Before: Jan 22 02:00:31 2026 GMT
            Not After : Apr 22 01:00:31 2026 GMT
        Subject: CN=ea6d4161-0927-4ee4-a7ae-8c4e655c37a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:91:9b:a0:04:50:b8:cb:02:44:22:a5:2d:9e:
                    61:de:68:06:9b:ec:36:69:3d:3e:64:ff:86:91:9d:
                    5c:88:df:3c:a1:34:67:6b:59:66:bd:e0:f0:ed:46:
                    32:74:c6:34:0c:06:a5:ee:4a:89:d7:2f:ed:75:64:
                    38:9d:65:be:80:81:81:d3:46:12:0a:a3:0d:29:72:
                    22:0d:21:46:25:f8:fc:da:9d:8a:d0:fa:f1:32:1f:
                    e9:ad:7f:0f:f0:f4:da:c0:03:e4:4f:69:25:53:35:
                    cb:a8:87:69:e4:1e:e7:39:f8:f6:6a:ec:aa:33:82:
                    e9:3b:a8:4d:75:40:59:58:53:aa:77:5d:77:a3:bb:
                    25:13:3a:7f:49:21:4a:35:ed:a2:f0:11:a0:9c:f4:
                    14:a5:33:69:ea:65:ed:05:ef:af:76:08:b5:78:f1:
                    dc:94:f8:bb:a0:70:17:fa:7e:cb:ef:80:d7:8a:67:
                    15:d8:ca:5d:ea:b3:de:c4:45:98:6f:26:5c:eb:a2:
                    82:0e:c5:b5:1e:99:9c:fe:09:e0:9b:52:93:44:44:
                    05:b2:22:01:43:fa:d1:ff:0b:5a:16:7a:ff:6d:15:
                    a3:54:d8:81:c6:f6:e7:9a:02:1e:4a:35:8c:25:68:
                    a6:99:4b:ca:3b:b3:70:26:c2:82:e2:00:e9:0a:9a:
                    ea:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1B:BD:EB:B2:11:4C:11:67:D2:64:A7:37:51:E0:44:30:D3:BB:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/b71ae3d3-3211-3340-98c1-ef88fc51ee9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl

            X509v3 Authority Key Identifier:
                keyid:56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.6.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:20:1c:2c:3b:75:61:61:68:bb:e2:55:5a:c0:67:ad:97:ca:
         f9:7a:55:22:30:4c:71:9d:e6:7d:4f:8a:29:7b:2b:73:6f:82:
         97:46:e1:2e:71:dc:f8:25:41:64:7e:e1:b8:b8:46:6d:46:03:
         8a:6d:c9:6b:85:40:ff:9b:3a:13:5a:f5:fc:c3:c6:b6:fb:4e:
         13:e6:c1:b9:d0:0d:f0:95:33:df:e4:40:9d:01:21:01:12:2e:
         49:e1:33:21:3e:ff:ea:e7:ff:8d:fa:f4:bb:f7:82:b1:96:26:
         39:21:f2:40:ea:72:ea:a4:ac:0f:8d:31:f5:b2:97:6a:19:58:
         31:13:71:b7:41:cf:5f:a5:38:88:c5:e9:e8:51:cc:4b:3a:e8:
         10:29:0c:5f:f6:a4:fe:5e:83:be:78:2d:bb:1b:78:c4:9c:c4:
         28:a9:f6:b7:e2:82:07:45:3d:00:75:3a:9b:9d:0a:e7:c2:05:
         95:3d:2f:bb:45:e1:b9:ca:19:90:72:79:c0:71:21:17:fd:2c:
         40:49:9d:b4:09:f0:aa:40:02:23:7e:ac:93:a9:ff:3a:ca:b7:
         2c:ea:28:50:02:70:a6:73:95:65:20:dc:94:20:fa:a0:10:42:
         8e:5a:e9:f7:86:2a:60:bb:9f:94:88:3c:27:d5:08:c7:fe:85:
         bd:ad:1c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:35:04 2026 by rpki-client