Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/b0885942-65d8-3e4b-8ea0-8671ef52bfb8.roa
File:                     b0885942-65d8-3e4b-8ea0-8671ef52bfb8.roa (raw, json)
Hash identifier:          8RG/XNT9GnpNZ63jPBTt3+xUsFcmnGRFdmVNlIhl+2k=
Subject key identifier:   4D:B4:A0:DC:FE:4D:29:CC:F2:0D:67:8B:2B:37:E4:68:24:25:42:5F
Certificate issuer:       /CN=1c5adecb-4ac8-432f-817c-84bec47b7708
Certificate serial:       010D0C9F4328584CD13C9F106744218B21EF26A0
Authority key identifier: 55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/b0885942-65d8-3e4b-8ea0-8671ef52bfb8.roa
Signing time:             Tue 10 Feb 2026 14:00:41 +0000
ROA not before:           Tue 10 Feb 2026 14:00:41 +0000
ROA not after:            Mon 11 May 2026 13:00:41 +0000
asID:                     23167
IP address blocks:        149.234.192.0/19 maxlen: 19
                          192.122.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:3c:9f:10:67:44:21:8b:21:ef:26:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5adecb-4ac8-432f-817c-84bec47b7708
        Validity
            Not Before: Feb 10 14:00:41 2026 GMT
            Not After : May 11 13:00:41 2026 GMT
        Subject: CN=60605b54-abfc-4503-9732-19382eb4dd3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d1:4f:3c:59:7c:19:ab:60:e0:ed:e5:f6:f9:
                    05:5f:95:f0:5a:5a:16:93:5e:40:15:cf:d2:fc:74:
                    3d:e9:8b:b8:0d:c7:b1:45:5c:2f:60:ba:5a:2f:14:
                    e1:89:fc:33:93:57:fa:9e:5d:f9:f1:21:1e:93:7c:
                    82:25:05:96:6f:b1:80:76:11:8d:65:90:9a:ca:bc:
                    1a:f0:46:ec:50:96:b6:bc:7c:35:0d:0c:2b:0d:0f:
                    c9:17:0b:8b:c1:a3:1d:9d:7d:bd:a6:4c:4a:b1:c6:
                    b2:9a:e1:24:56:6b:82:7e:94:11:69:2f:51:cc:bd:
                    1c:9d:51:3a:ec:40:5f:d6:0f:17:e2:ad:9f:d5:4e:
                    1b:7e:00:30:63:97:a4:e9:b9:b7:1c:a5:e5:f0:26:
                    65:2c:08:8c:d9:f4:0c:5e:99:52:e5:dc:8d:0f:fd:
                    c8:62:00:a7:c3:1e:eb:92:d3:fd:cb:68:46:c5:87:
                    cb:e3:ee:ae:21:f0:43:50:14:bc:23:67:b8:5a:cd:
                    a4:36:87:23:c6:ab:7b:38:c1:e3:d9:7a:ad:e1:4d:
                    85:59:d0:48:05:f6:9c:b5:a4:b8:0e:53:0a:6c:58:
                    d1:63:1d:90:0a:59:53:05:04:06:b1:05:dc:ac:63:
                    15:0c:ea:39:aa:f2:46:d1:83:83:79:18:6e:0c:96:
                    ac:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B4:A0:DC:FE:4D:29:CC:F2:0D:67:8B:2B:37:E4:68:24:25:42:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/b0885942-65d8-3e4b-8ea0-8671ef52bfb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl

            X509v3 Authority Key Identifier:
                keyid:55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.192.0/19
                  192.122.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:f9:1c:fe:b2:c3:3f:c9:c9:8c:fc:a8:26:ca:1a:f3:96:bb:
         80:bb:ab:0f:0a:d0:55:57:6d:21:b7:81:d7:ba:96:36:16:f4:
         01:8c:52:49:a2:51:18:82:0b:ef:9b:ee:bb:d6:4b:91:74:01:
         ba:8c:69:42:65:9b:30:29:57:a5:c6:79:50:9c:9a:18:8f:65:
         b4:b4:1d:67:a6:07:ea:08:83:3f:4b:df:2e:cd:0e:79:07:a6:
         cc:c2:61:77:3e:27:23:e0:e2:9d:b4:13:8c:72:cf:e9:b2:8f:
         c7:4a:6a:3a:93:9d:c2:e5:46:df:57:4c:21:12:0e:a7:b9:8a:
         c2:68:c9:dc:ba:0d:56:82:f2:b7:c4:81:04:c5:6c:8f:af:3c:
         66:9d:63:9d:3e:e2:3c:55:6e:db:7e:da:1f:b5:21:73:90:c6:
         71:9e:6d:6b:d9:0a:78:ff:35:7e:8d:c4:c6:21:a7:32:c6:ee:
         50:28:18:09:41:b1:73:a9:02:7e:1c:ca:b8:de:c9:0d:3e:62:
         e7:a7:fa:ef:d2:67:0a:ce:cf:3b:52:c5:8d:fa:1c:4e:ef:66:
         da:88:30:5e:d2:43:5d:5f:b3:83:37:20:e7:2d:ce:8e:b8:68:
         88:5b:d9:7a:77:19:08:fc:74:27:5f:3c:97:b9:18:c6:85:e5:
         fe:86:04:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:50 2026 by rpki-client