Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/fdb26c6d-d89b-34ce-a506-b53c61013ac6.roa
File:                     fdb26c6d-d89b-34ce-a506-b53c61013ac6.roa (raw, json)
Hash identifier:          +hD+syX75clh4ECj4YB/j08vJlWwpOn6rcmHeC+jZBc=
Subject key identifier:   76:72:01:6E:69:9B:B5:29:CA:8C:5F:4D:A6:08:4B:23:3F:7A:A5:D5
Certificate issuer:       /CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
Certificate serial:       010D0C9F4328584D59EA4F4849E9171991F66F90
Authority key identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/fdb26c6d-d89b-34ce-a506-b53c61013ac6.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     16509
IP address blocks:        143.220.128.0/23 maxlen: 23
                          143.220.130.0/23 maxlen: 23
                          143.220.132.0/23 maxlen: 23
                          143.220.134.0/23 maxlen: 23
                          143.220.136.0/23 maxlen: 23
                          143.220.138.0/23 maxlen: 23
                          143.220.140.0/23 maxlen: 23
                          143.220.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:4f:48:49:e9:17:19:91:f6:6f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=c34725f0-76b1-4d53-9c69-d535321752b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6c:a0:fd:30:c8:94:f8:7e:6d:4d:5b:26:bc:
                    28:21:3f:7d:0e:ca:00:78:f8:af:f4:e5:7a:bf:78:
                    23:8c:0e:7b:3a:68:c8:2f:54:a8:fa:2c:41:ee:65:
                    5f:83:56:c2:20:c0:c8:0e:a6:4b:2f:7e:e8:de:f0:
                    c3:99:28:6b:8f:cf:ce:84:1d:76:82:7c:90:9d:25:
                    c1:fb:a3:8e:75:b2:50:d4:3d:98:d6:cc:a7:85:c1:
                    1e:da:d4:b7:ed:56:7d:0a:89:5c:1b:28:cb:df:7f:
                    91:47:83:e6:a5:97:16:17:ad:a9:d7:6b:9e:73:24:
                    de:03:0a:c4:0c:18:41:4a:9f:ed:6f:0d:30:39:73:
                    d0:f7:88:95:71:89:1f:de:c7:0f:a3:d1:54:de:08:
                    11:56:6e:e7:b4:07:f3:29:be:e0:b0:bb:8d:ff:e5:
                    3a:ec:0e:9a:21:8c:f0:e3:ff:32:18:6a:ac:71:78:
                    4c:5b:9d:c2:48:5f:22:56:88:99:59:5a:07:cd:6b:
                    af:12:f9:5f:ab:84:72:05:54:6c:40:55:ef:ab:09:
                    a5:75:fc:5f:3d:41:d8:e6:f8:44:aa:55:bd:94:cd:
                    b6:0e:04:4b:be:db:f7:2d:89:d8:15:5c:9f:60:6b:
                    11:f2:58:d3:0e:6b:bf:6d:7e:7c:71:fe:a6:df:07:
                    6b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:72:01:6E:69:9B:B5:29:CA:8C:5F:4D:A6:08:4B:23:3F:7A:A5:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/fdb26c6d-d89b-34ce-a506-b53c61013ac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl

            X509v3 Authority Key Identifier:
                keyid:59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.220.128.0-143.220.142.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:70:33:35:c7:33:2d:6b:21:d6:4d:1a:7b:e9:00:9a:97:02:
         0c:49:53:7d:07:e2:a3:be:0c:3c:11:52:43:9b:9e:ea:2d:e9:
         d4:ff:2f:c6:fa:28:1e:ff:a2:31:7d:3a:23:14:3f:85:a6:31:
         a4:2b:94:db:46:27:4c:9f:90:2f:81:47:4d:f9:80:c3:e2:65:
         d3:86:14:a3:15:d3:ce:26:5f:bb:36:37:fd:52:61:3f:a6:42:
         42:49:ad:58:87:6b:05:26:85:e0:1f:9c:72:ab:91:bd:31:d6:
         47:67:91:d5:b9:59:c3:e3:58:ea:77:bf:e4:f7:d4:25:95:05:
         b0:8e:31:6e:83:38:0c:c9:14:01:de:e6:13:4f:02:8c:68:17:
         3b:65:6f:f1:82:34:9e:bf:5d:5a:08:33:4d:12:c3:78:7f:22:
         42:87:1f:d0:b1:e7:bb:68:64:cc:43:62:f7:dd:74:f7:a4:b6:
         bf:5b:bd:df:c5:6d:08:dd:39:6b:da:56:8a:b9:08:ad:27:5e:
         27:0c:91:c1:69:76:2f:8c:b6:a7:60:72:f8:52:00:65:8d:55:
         ff:0b:bb:4c:b7:9c:50:19:fb:80:f5:8c:12:b0:b1:c0:17:24:
         fd:bb:4c:06:03:dc:ea:e6:71:40:14:86:4a:e4:03:10:c9:67:
         fc:c5:62:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:59:35 2026 by rpki-client