Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7455b21a-a7e4-4b9f-b734-3a4f05530609/8486755a-62b2-3566-9ce6-635db082ca4c.roa
File:                     8486755a-62b2-3566-9ce6-635db082ca4c.roa (raw, json)
Hash identifier:          m8lgGJioGyZ06yLfHFGKtCGl21mTBA2LnrkmuQXoK2E=
Subject key identifier:   6B:E8:1D:7A:64:A8:BB:A4:E1:9A:9F:58:36:88:39:DA:5F:B4:00:1F
Certificate issuer:       /CN=7455b21a-a7e4-4b9f-b734-3a4f05530609
Certificate serial:       010D0C9F4328584D624A5D7AB4014507649E7100
Authority key identifier: 8A:4F:D6:5D:51:EF:F9:C5:B1:4E:D4:DA:F4:E7:71:F5:13:CD:E8:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7455b21a-a7e4-4b9f-b734-3a4f05530609.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7455b21a-a7e4-4b9f-b734-3a4f05530609/8486755a-62b2-3566-9ce6-635db082ca4c.roa
Signing time:             Fri 03 Apr 2026 13:00:30 +0000
ROA not before:           Fri 03 Apr 2026 13:00:30 +0000
ROA not after:            Thu 02 Jul 2026 13:00:30 +0000
asID:                     395748
IP address blocks:        144.249.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7455b21a-a7e4-4b9f-b734-3a4f05530609/7455b21a-a7e4-4b9f-b734-3a4f05530609.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7455b21a-a7e4-4b9f-b734-3a4f05530609/7455b21a-a7e4-4b9f-b734-3a4f05530609.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7455b21a-a7e4-4b9f-b734-3a4f05530609.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:4a:5d:7a:b4:01:45:07:64:9e:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7455b21a-a7e4-4b9f-b734-3a4f05530609
        Validity
            Not Before: Apr  3 13:00:30 2026 GMT
            Not After : Jul  2 13:00:30 2026 GMT
        Subject: CN=039f9b5b-ff9a-4346-88cd-fc79e19a8665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9b:99:5b:b1:70:58:62:0f:64:74:68:bd:6a:
                    bf:17:4d:53:5e:8f:7e:55:6a:8d:d9:86:a7:1e:fd:
                    2d:85:48:ab:6d:0d:55:c4:1f:6c:4c:5c:6c:04:87:
                    26:65:6a:2a:c8:9b:86:0e:ee:95:ff:97:b6:10:79:
                    d1:ce:c2:86:71:fc:51:1a:aa:36:98:27:47:cc:cd:
                    51:6f:94:65:69:24:3f:19:f3:7d:35:c8:38:f5:58:
                    f9:77:c7:e4:0d:7f:7a:9d:8c:a8:83:fd:96:32:83:
                    99:93:27:4e:f9:91:9e:6c:31:d1:8e:1c:35:4a:ba:
                    ad:91:99:89:ba:5a:45:c2:47:26:ae:33:65:d8:fb:
                    6b:c0:03:e9:25:7e:b7:3c:76:9a:3f:0a:5f:f3:63:
                    0b:b6:bd:31:aa:e9:de:cc:09:5d:34:36:84:03:a1:
                    5c:2b:b0:aa:75:fb:39:7d:63:62:14:b7:79:30:29:
                    d3:3c:bc:d7:73:c8:2a:4a:ab:d6:b4:34:36:70:f5:
                    39:7f:f9:2c:e7:7f:54:58:23:43:f5:c6:df:43:70:
                    e0:b9:0e:65:38:7b:59:22:1b:21:4e:1c:aa:6c:ab:
                    50:42:ac:40:63:cd:3f:81:41:83:e4:48:91:24:32:
                    0e:a6:4e:37:82:43:5b:2c:1e:3d:80:53:eb:e8:26:
                    0f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E8:1D:7A:64:A8:BB:A4:E1:9A:9F:58:36:88:39:DA:5F:B4:00:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7455b21a-a7e4-4b9f-b734-3a4f05530609/8486755a-62b2-3566-9ce6-635db082ca4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7455b21a-a7e4-4b9f-b734-3a4f05530609/7455b21a-a7e4-4b9f-b734-3a4f05530609.crl

            X509v3 Authority Key Identifier:
                keyid:8A:4F:D6:5D:51:EF:F9:C5:B1:4E:D4:DA:F4:E7:71:F5:13:CD:E8:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7455b21a-a7e4-4b9f-b734-3a4f05530609.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.249.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:69:97:85:01:71:67:3f:5a:ee:75:01:f2:87:23:70:e7:e2:
         71:be:43:30:da:57:e4:b4:4c:8c:98:f8:d8:81:e9:90:29:d5:
         e3:e9:86:9c:b7:21:85:3c:ce:8b:97:9f:49:b0:2c:0f:e2:5f:
         e0:bc:89:8a:dd:93:0d:f0:15:da:05:5f:df:9e:8f:1f:9d:84:
         d8:44:52:76:5e:1c:ce:a4:e6:b7:04:64:4e:f8:6f:e8:12:c1:
         e6:49:67:c7:fa:7e:bd:34:1f:96:5b:40:13:86:f0:ed:73:f4:
         5a:3d:40:40:5e:a1:50:62:a0:87:4c:1d:0d:90:1c:b7:97:a5:
         1f:69:89:78:10:02:97:7d:b8:48:3c:87:8e:b2:04:fa:6d:63:
         df:94:85:93:2c:2a:22:73:96:8e:a8:80:06:58:e0:f3:5a:2c:
         12:53:b4:9a:33:9d:4b:49:e5:4c:b9:42:78:60:d4:59:23:52:
         72:30:a5:63:0d:36:92:fe:44:53:05:d5:6f:cd:fe:c3:cb:83:
         ad:7f:40:6d:f8:46:9a:05:68:5f:8d:15:4c:e6:27:a8:53:54:
         d4:06:fb:e2:e5:15:ed:dc:16:38:cd:27:56:21:d3:ac:be:ca:
         bb:1c:8d:aa:7a:04:65:8e:e0:77:be:ef:c4:6d:9c:b9:11:63:
         6e:3b:dc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:11:50 2026 by rpki-client