Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/a2d74e47-19c5-3371-a747-73fda18be658.roa
File:                     a2d74e47-19c5-3371-a747-73fda18be658.roa (raw, json)
Hash identifier:          BX8MlttT7CvKBBbK7DfA9iipKxAjp9cpw9PYHy9rPtw=
Subject key identifier:   0D:EC:12:39:AE:B7:00:22:3F:81:64:C0:C1:92:EC:71:ED:61:E5:02
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F4328584CC6121AAA33E8A705E401BC30
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/a2d74e47-19c5-3371-a747-73fda18be658.roa
Signing time:             Fri 06 Feb 2026 14:00:40 +0000
ROA not before:           Fri 06 Feb 2026 14:00:40 +0000
ROA not after:            Thu 07 May 2026 13:00:40 +0000
asID:                     154323
IP address blocks:        163.123.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c6:12:1a:aa:33:e8:a7:05:e4:01:bc:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Feb  6 14:00:40 2026 GMT
            Not After : May  7 13:00:40 2026 GMT
        Subject: CN=2f0ce6e7-c952-495a-a0df-f559a353b9f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2a:47:41:6c:ac:c3:0f:72:c9:cf:f0:37:f3:
                    6e:12:b9:09:67:48:01:01:47:05:c5:3c:54:db:2d:
                    b1:3a:77:03:50:dc:2e:b1:b3:23:1c:a8:e9:df:91:
                    55:d4:32:19:f6:b4:10:c2:79:35:a5:de:df:eb:c4:
                    14:ec:7b:63:47:57:b6:14:c7:aa:fe:b4:24:f1:03:
                    31:3a:f8:4f:fc:d5:da:9d:b3:f1:2e:ec:89:e9:e5:
                    0f:0a:66:d2:98:ef:d1:d2:0a:6b:5a:1c:72:c8:9c:
                    d6:7d:83:22:cc:9b:fd:87:b9:cf:d6:06:ba:80:a8:
                    2a:63:e3:30:e5:65:90:20:ec:5e:55:cd:2b:4a:82:
                    ae:1b:7d:db:bc:49:9a:13:28:24:b7:8c:4d:75:47:
                    0d:a0:37:05:32:19:51:14:a3:04:1d:4e:aa:dc:a0:
                    2c:2e:aa:63:dc:9c:6d:a2:dd:bf:b8:a6:41:3c:11:
                    66:74:31:e8:8b:1a:a2:ff:58:55:a8:8b:5d:cd:04:
                    60:e4:3c:4e:11:57:40:ad:16:12:ef:94:a1:71:5d:
                    e2:3a:ad:b3:ca:5f:9a:06:be:c7:31:a2:7a:2c:07:
                    49:8f:93:17:cb:bb:67:10:af:b9:40:01:33:61:47:
                    50:7e:21:76:40:5e:4f:22:aa:47:a4:f5:96:43:29:
                    d2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EC:12:39:AE:B7:00:22:3F:81:64:C0:C1:92:EC:71:ED:61:E5:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/a2d74e47-19c5-3371-a747-73fda18be658.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:ac:8b:56:4c:66:b8:59:f0:7b:13:bf:c2:69:3e:2b:ba:4c:
         34:ec:1d:c6:55:aa:92:fd:ed:fa:62:e7:f5:14:b3:c6:bf:12:
         85:fe:a2:1b:1a:d4:97:78:bb:d6:d2:68:19:c8:24:cb:2b:c8:
         8d:2f:41:d8:b4:40:eb:e6:3c:9a:69:a4:d5:53:50:21:ce:82:
         ed:e9:ea:14:62:02:5a:11:91:27:d8:8a:28:1d:66:32:47:70:
         7d:d7:52:54:00:34:a0:b4:5b:42:cb:81:66:52:07:7c:33:dd:
         91:90:7c:f9:94:39:a2:6b:57:a9:c3:f2:3d:e8:eb:2d:8a:ef:
         cf:5f:b3:9f:ca:4d:8c:00:8f:41:45:b4:71:23:6f:31:d8:f3:
         21:98:5c:ff:40:c0:f7:9a:e2:2e:2a:2c:d0:3e:15:3a:bb:68:
         2a:77:1d:90:1d:d4:99:30:d1:97:14:e5:ec:98:00:b9:a8:97:
         2f:f5:c8:ee:ad:0f:7f:d7:55:67:6a:77:50:12:c3:5d:52:4b:
         d7:b7:34:be:f2:00:ec:50:80:2f:3f:94:2a:15:07:05:4a:41:
         9a:4a:cf:1e:b5:f5:82:21:3e:bb:62:d7:da:ae:13:6a:c7:de:
         2b:14:3b:99:04:80:3a:d9:84:ca:ec:de:87:5c:1e:cf:f1:74:
         5a:78:f9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:22:32 2026 by rpki-client