Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/c5f83fad-67aa-328f-bed8-a9b051be30b2.roa
File:                     c5f83fad-67aa-328f-bed8-a9b051be30b2.roa (raw, json)
Hash identifier:          m6WTTB2mqD0gktNNll/rFXHV2gVueLHuZeXtHk4rJoc=
Subject key identifier:   39:13:CC:17:17:F4:F5:81:F5:F3:ED:BA:CC:49:F3:D8:54:71:51:07
Certificate issuer:       /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
Certificate serial:       010D0C9F4328584D67DFC9516B986CFD4C0FF280
Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/c5f83fad-67aa-328f-bed8-a9b051be30b2.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     30041
IP address blocks:        148.222.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:c9:51:6b:98:6c:fd:4c:0f:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=bf9ee646-b2bc-4191-be91-3ab6f48f8fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:10:31:2d:c6:71:1d:3c:e5:8e:fc:95:1d:a0:
                    ed:05:79:9f:3c:d6:0a:bd:1d:71:46:b4:4e:9c:f9:
                    2f:0d:87:bf:8b:84:e7:9d:d3:0a:54:3e:26:46:e2:
                    8b:e2:04:3a:69:1a:1d:0f:c9:26:a5:99:f7:fd:4e:
                    b7:2d:a3:c2:64:cd:c6:83:00:56:ce:a2:ef:fb:fa:
                    f7:62:f9:b2:b8:a0:0e:26:36:c9:c0:a7:cb:75:74:
                    f0:dc:17:6e:d5:fb:13:66:94:c8:57:c3:39:e1:e5:
                    24:c7:eb:d5:9e:d9:93:a5:aa:88:60:2a:89:79:36:
                    7e:09:12:ea:04:d9:37:5e:23:92:30:94:0a:18:c3:
                    bf:a0:41:3b:09:bc:ea:ec:af:f3:c7:04:16:3f:ca:
                    2a:97:d8:f7:d1:57:4c:d7:3c:01:68:2a:62:b2:3e:
                    53:a3:ca:56:05:83:55:71:85:45:ed:91:53:6a:76:
                    c3:90:96:bd:24:61:ea:f2:02:ea:65:5e:a9:18:dd:
                    03:fb:5f:1d:7a:bd:f7:fe:85:73:f0:eb:f9:f5:c6:
                    93:12:10:62:4f:fa:68:ba:80:be:e5:44:65:a0:2a:
                    1b:83:b4:d9:53:f9:c2:c0:45:bd:95:65:0c:fb:81:
                    b8:2b:cf:75:30:ce:68:eb:ae:ea:2d:bf:fc:6f:dd:
                    4b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:13:CC:17:17:F4:F5:81:F5:F3:ED:BA:CC:49:F3:D8:54:71:51:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/c5f83fad-67aa-328f-bed8-a9b051be30b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl

            X509v3 Authority Key Identifier:
                keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:fa:e4:98:ef:8e:cf:4c:0f:62:cf:f0:0b:93:7a:b7:30:0b:
         ef:8b:ad:53:07:af:60:b0:7a:7a:9e:3e:83:8a:ff:b4:6a:c2:
         35:d4:32:d0:cb:7f:7b:ee:0e:08:3a:18:67:6c:e0:1f:ce:fd:
         15:15:0a:c6:42:48:ae:d0:6f:ea:e9:86:53:8b:dc:5f:f1:2f:
         bd:df:51:9d:b3:ba:cc:13:35:df:a1:c4:42:7b:15:92:c6:67:
         f2:da:6a:01:82:b4:91:b6:ac:6f:53:6e:a4:77:4b:00:b2:d4:
         9d:ca:ae:48:d7:0a:97:8c:20:f8:8d:ea:96:91:c5:7b:17:f9:
         7a:9f:07:23:7c:07:92:b6:e3:6c:a5:52:f9:7f:6c:35:80:ff:
         b3:64:d3:6a:49:04:5a:a0:d1:b8:d8:09:a8:4b:3d:dd:69:9b:
         8d:32:18:bb:9d:19:ec:6c:27:19:0d:9a:50:68:99:0e:c5:49:
         57:71:21:d7:2d:de:d2:cf:26:e9:aa:41:6c:e4:68:ab:db:89:
         89:b6:1f:95:42:09:aa:4e:d2:37:8b:b6:e0:2d:59:07:c4:42:
         b9:58:e1:dd:a0:46:92:39:c7:0f:2c:a2:74:b6:4d:b8:04:be:
         b6:69:dc:db:fd:0a:49:07:6f:19:8b:07:ca:c7:be:56:ee:58:
         0b:e7:d9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:17:54 2026 by rpki-client