Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cdb05df9-c4d2-3ae6-a609-7e5f33700162.roa
File:                     cdb05df9-c4d2-3ae6-a609-7e5f33700162.roa (raw, json)
Hash identifier:          yHhUX9IpzMzeMB6xfYrckZzsiSY8KonKSZGFr2btN3c=
Subject key identifier:   D2:45:24:41:3D:2B:AC:11:14:40:0A:68:EC:CD:88:DF:AB:5F:4D:9C
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584CAE5EA65A206F404D66228880
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cdb05df9-c4d2-3ae6-a609-7e5f33700162.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     6079
IP address blocks:        142.173.48.0/20 maxlen: 20
                          142.173.96.0/20 maxlen: 20
                          142.173.176.0/20 maxlen: 20
                          142.173.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:a6:5a:20:6f:40:4d:66:22:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=d8a4f754-36be-453b-a765-3b3807ba3146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f5:81:0e:8d:c0:2d:f1:35:8c:01:06:c4:4c:
                    37:65:51:52:aa:86:f1:90:a5:2d:a1:46:96:2e:31:
                    a6:8c:48:05:12:45:0d:55:a4:f5:90:ec:3a:ff:1a:
                    8e:82:29:23:e9:76:36:a6:01:41:6b:b0:9a:a2:37:
                    dc:75:86:50:76:84:81:4d:6c:79:c3:65:ee:6a:1c:
                    6a:2c:92:ca:f5:0c:94:33:a0:0d:8c:ec:91:62:30:
                    1d:92:59:68:78:17:7d:96:2f:64:56:94:96:2c:72:
                    04:3a:aa:a9:ff:1c:82:84:0e:17:2d:3f:06:0c:45:
                    70:08:1b:07:2c:06:da:69:2e:06:25:6a:e0:3d:f6:
                    bc:0b:ca:a8:54:ee:a1:85:08:5f:bf:f9:9c:d2:5b:
                    4f:18:7e:72:b6:1e:ac:2f:ce:1e:63:48:7c:42:cf:
                    03:4f:82:07:73:c0:d2:b9:75:cd:3a:bb:5c:c4:bf:
                    72:59:c4:bc:8c:f2:b9:df:6a:e6:a8:36:0a:97:c0:
                    25:e4:b3:42:40:88:d3:87:c5:c0:44:8f:c5:50:20:
                    3a:8e:3a:62:70:e0:09:20:b2:89:91:25:66:b9:94:
                    8f:6d:80:28:95:07:24:5a:e2:51:ea:c7:47:48:87:
                    38:cb:6f:de:c0:02:40:e7:4d:64:1a:25:bb:8a:54:
                    09:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:45:24:41:3D:2B:AC:11:14:40:0A:68:EC:CD:88:DF:AB:5F:4D:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cdb05df9-c4d2-3ae6-a609-7e5f33700162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.173.48.0/20
                  142.173.96.0/20
                  142.173.176.0/20
                  142.173.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:4a:cc:2f:a1:80:15:b9:c4:69:08:d3:64:78:72:ec:e4:50:
         7a:10:fb:0e:ce:ce:72:1e:85:a6:23:0b:88:61:8c:7d:ef:3d:
         05:48:b7:0d:eb:5f:40:c5:99:32:6d:f3:25:9f:85:9d:7a:cf:
         f6:b5:4e:59:c9:5e:e8:30:58:45:58:e1:be:c5:bf:6f:b3:41:
         48:9c:65:5c:1b:91:21:dc:1e:87:5c:58:a7:79:5a:a0:77:2b:
         c5:93:e6:69:f9:aa:1d:7a:a2:66:7d:2f:65:56:46:34:ae:d1:
         74:51:84:79:14:87:32:ac:7c:ff:ad:3f:8f:8a:4a:78:a0:8c:
         d5:1b:01:a8:20:94:81:bb:c1:53:f4:c2:0b:96:ab:66:5b:1a:
         31:96:6c:64:78:07:33:bc:e7:2e:7f:ee:2e:b9:f2:5c:85:66:
         1e:46:4a:11:0a:ca:3b:df:18:90:a8:f5:7e:33:ed:ad:28:73:
         f4:22:51:e3:64:1d:2f:8e:a9:ab:02:f4:7f:c1:61:e0:ff:69:
         86:19:08:1b:5f:84:66:7c:2f:29:78:c0:fd:c8:0f:9f:13:49:
         05:b1:51:f2:3c:e8:0d:8e:f1:05:db:2c:68:71:c2:19:9d:d0:
         04:f2:de:91:d2:3c:c7:c4:e4:a4:3e:a9:4d:03:78:cc:c9:4e:
         06:e3:2c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:00:01 2026 by rpki-client