Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/146a180d-76c7-32c9-8122-510d21e8d8b7.roa
File:                     146a180d-76c7-32c9-8122-510d21e8d8b7.roa (raw, json)
Hash identifier:          ZshbhfSfrT5KJWpkH4/4chCXEFDavDR+MwDh0zxu9d8=
Subject key identifier:   FC:68:81:9A:2D:50:8B:F8:F6:A8:3F:EF:97:0F:34:2E:5A:02:FC:E9
Certificate issuer:       /CN=2e4e9332-b3fa-4993-b1e0-b3204976405f
Certificate serial:       010D0C9F4328584DE41B267E59725EE319FED480
Authority key identifier: 41:A4:3C:BD:61:0C:4B:19:7C:37:1C:1F:E4:82:A3:DE:78:0E:18:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/146a180d-76c7-32c9-8122-510d21e8d8b7.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     397388
IP address blocks:        147.185.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/2e4e9332-b3fa-4993-b1e0-b3204976405f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/2e4e9332-b3fa-4993-b1e0-b3204976405f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:26:7e:59:72:5e:e3:19:fe:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e4e9332-b3fa-4993-b1e0-b3204976405f
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=8ec57f5a-0c7b-41e3-9c82-7fc6c214710e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:30:71:02:33:1a:a0:81:9a:19:b3:4c:ea:d4:
                    fe:d2:6f:a1:18:94:bf:35:55:83:0e:03:d4:ad:ca:
                    24:7e:03:51:74:99:19:43:51:1d:80:04:de:86:cb:
                    24:86:57:2c:68:60:3f:89:a1:d7:c2:1c:a6:60:0e:
                    b0:fb:c2:3b:87:4b:4c:c3:61:d5:ce:03:95:b1:5e:
                    6d:18:65:0e:f3:af:82:9e:8e:af:5e:de:59:90:9a:
                    bb:09:b6:b4:8e:bd:01:50:58:ba:6f:de:5a:c5:a5:
                    c3:61:33:04:76:5c:e4:82:db:14:17:80:6c:69:29:
                    79:45:60:86:42:7b:b9:0d:e1:16:81:a8:97:94:98:
                    e6:07:27:64:e5:c2:42:30:f9:f2:b5:c6:d2:fd:b9:
                    88:de:d4:3b:ce:99:0c:21:e5:39:f4:79:9f:28:1e:
                    63:69:f3:0e:88:64:75:8b:da:43:d5:9b:a2:7f:3b:
                    06:af:17:35:67:c2:9b:e7:e5:25:87:1f:43:05:0c:
                    81:a7:c6:00:d4:41:f2:d5:be:90:0d:64:ac:42:2d:
                    5d:c0:9f:d8:03:36:75:ba:45:7a:18:6c:58:4b:7e:
                    d3:8f:c3:b1:3f:9e:a7:59:bc:53:03:17:6b:aa:0d:
                    6b:c4:d9:7f:78:49:98:06:81:29:41:6a:78:0a:d3:
                    e5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:68:81:9A:2D:50:8B:F8:F6:A8:3F:EF:97:0F:34:2E:5A:02:FC:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/146a180d-76c7-32c9-8122-510d21e8d8b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/2e4e9332-b3fa-4993-b1e0-b3204976405f.crl

            X509v3 Authority Key Identifier:
                keyid:41:A4:3C:BD:61:0C:4B:19:7C:37:1C:1F:E4:82:A3:DE:78:0E:18:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:9f:a0:1d:fb:08:28:60:96:0a:f3:af:6e:9d:03:00:18:1d:
         e5:d0:7b:97:12:da:90:16:4e:63:ce:c0:c4:f7:31:50:29:6d:
         90:21:a9:87:fb:73:17:95:14:8b:9b:f6:16:9f:d4:f6:90:a9:
         e3:19:fe:7d:c9:dd:37:6e:87:48:93:96:b6:f1:67:48:c5:a2:
         61:20:39:db:28:c4:ed:9e:37:8d:6c:d3:e6:20:94:88:84:24:
         85:bd:b0:c5:11:af:5b:d6:16:e1:87:a7:26:27:81:bd:91:00:
         bf:4e:83:f4:8f:89:ac:1f:d8:80:34:bd:5d:42:f6:8c:fb:b7:
         66:df:91:cb:4e:57:4b:57:d6:37:a2:c6:c2:7b:c7:aa:47:06:
         7b:7f:92:d3:69:c9:f4:fd:e6:f8:26:f6:84:1a:7a:80:5e:4a:
         2d:a9:11:44:c4:f7:20:4f:c8:96:d0:0d:96:5f:12:cc:cd:ba:
         fe:b4:2b:9c:5f:af:02:6a:70:8e:40:00:0a:e3:dd:65:6f:94:
         7d:d2:96:3a:d7:76:f8:e4:75:76:ee:3d:f2:c8:3c:11:f7:02:
         97:8e:e5:39:d5:c4:a0:88:d1:6e:f3:0a:2a:9b:e7:fa:9b:df:
         1c:53:08:24:92:13:e7:c0:9e:5f:44:9e:14:00:ed:b2:f6:7c:
         92:d6:84:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:14:21 2026 by rpki-client