Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa
File:                     2c899756-ad1f-3734-977c-65eaef2bba02.roa (raw, json)
Hash identifier:          GO6xlm7bBDIE8h2/IhfwsRflIaj5sxD4j0z0aiQxe6g=
Subject key identifier:   37:8C:BF:65:B6:99:F8:AD:E5:A5:4C:26:12:05:7F:2E:D2:FC:E3:AB
Certificate issuer:       /CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
Certificate serial:       010D0C9F4328584D60E4F417DA64F15F73A71500
Authority key identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        143.220.144.0/23 maxlen: 23
                          143.220.146.0/23 maxlen: 23
                          143.220.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e4:f4:17:da:64:f1:5f:73:a7:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=8da4e88c-d157-4b6b-8623-e66d4c82cc9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:76:21:f8:a5:74:75:3b:32:21:c8:2c:be:94:
                    31:9f:bc:39:aa:56:aa:92:bc:2b:35:53:3f:3b:3c:
                    f2:a4:4d:51:6b:e4:0a:ad:68:a0:a6:94:27:3e:af:
                    1d:77:f4:e3:96:f7:71:2e:00:e0:41:92:b5:88:b0:
                    09:f1:d0:6a:2a:20:03:e2:d3:f3:d5:58:02:d4:19:
                    8f:b1:9e:22:02:32:f2:da:c9:75:19:3d:02:13:df:
                    c8:ad:e0:86:49:66:43:36:c8:1c:6b:0d:d9:5e:98:
                    05:91:34:29:b3:77:6d:2b:dd:41:37:90:a6:0b:05:
                    25:a6:39:fc:e3:6f:53:37:aa:1e:aa:49:64:ae:e4:
                    c7:5e:7d:c0:e6:f5:c6:46:2d:90:bd:da:f3:c1:8a:
                    33:f6:55:06:42:d0:91:cd:51:65:7a:49:35:9d:04:
                    52:f4:3c:20:61:c3:f4:24:52:fe:78:bc:5a:b8:53:
                    a8:ee:df:52:a0:3e:7a:47:11:10:a0:1b:ab:f6:28:
                    8d:bc:41:c4:e3:c6:e1:9a:b6:9b:bb:4a:79:44:1f:
                    84:2e:c6:ba:3d:83:25:1e:9c:1c:fd:49:c6:bc:56:
                    46:5b:22:8f:84:28:53:e5:97:e5:02:8d:21:47:42:
                    88:62:8d:56:9d:d5:c2:0b:e4:89:54:6c:ef:7d:50:
                    ce:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8C:BF:65:B6:99:F8:AD:E5:A5:4C:26:12:05:7F:2E:D2:FC:E3:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/2c899756-ad1f-3734-977c-65eaef2bba02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl

            X509v3 Authority Key Identifier:
                keyid:59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.220.144.0-143.220.149.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:38:94:75:36:2b:0c:75:90:99:62:61:6a:51:a5:13:32:e9:
         4b:06:67:e2:82:43:67:f1:0e:97:25:fe:2e:de:d6:49:6d:55:
         d1:46:04:13:2b:79:df:8b:38:a1:28:09:a9:3a:1b:44:3f:d7:
         22:b3:69:a6:07:68:b3:69:6c:7d:56:ce:6f:31:e3:f2:75:95:
         53:0d:c6:f7:3c:33:18:e4:93:2c:66:0d:1a:c1:b6:a2:c3:bb:
         70:f0:aa:23:5a:fd:d8:2d:07:af:3a:93:fc:8f:10:48:6d:21:
         4d:a7:eb:85:28:cd:2b:8e:bf:67:e9:46:7c:17:a9:3f:3f:62:
         b0:8d:74:75:25:8f:fc:95:01:e9:f1:7f:fb:2e:ed:47:8c:c0:
         64:c0:c0:93:9f:58:8d:bc:3b:ee:62:19:f9:7c:89:14:1f:d1:
         81:64:b2:2e:1a:a7:95:bf:69:fb:55:56:11:5c:1e:7e:18:95:
         81:0a:54:b4:5f:13:70:53:26:c7:98:1d:f8:4e:f5:f6:49:b8:
         ad:0a:bc:9b:43:6f:4c:66:dc:d3:81:42:eb:68:64:83:27:dd:
         2e:b9:4c:bc:9a:d5:0e:84:42:c3:e1:62:c2:9d:52:f2:bd:ef:
         02:89:ed:87:75:fe:0d:c6:8f:22:45:81:22:d9:eb:16:1e:7f:
         bb:8c:61:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:40:14 2026 by rpki-client