Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/38e8dd53-d61a-3a02-9e01-0813ec535a48.roa
File:                     38e8dd53-d61a-3a02-9e01-0813ec535a48.roa (raw, json)
Hash identifier:          iSYCs+FyBZiK3BzBNcE5HejFBY7dsnceHEykTOV8aEo=
Subject key identifier:   95:84:FE:10:79:97:26:B4:FB:EE:7F:5B:49:69:AF:7E:43:5A:0E:3B
Certificate issuer:       /CN=a6206bd0-e97f-4bc4-9e06-e1bb9b383624
Certificate serial:       010D0C9F4328584CDC6772A5F4DBA34BA0D79180
Authority key identifier: 03:14:81:13:BC:3C:4E:71:F2:9D:DD:63:06:82:F4:78:1F:61:EF:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/38e8dd53-d61a-3a02-9e01-0813ec535a48.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     6145
IP address blocks:        172.110.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:72:a5:f4:db:a3:4b:a0:d7:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6206bd0-e97f-4bc4-9e06-e1bb9b383624
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=5158b55b-c427-4243-b13c-0b3ac8b9852f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ac:20:7b:1e:52:18:f5:6f:d4:80:aa:a8:fa:
                    11:ef:95:ce:11:4d:99:bf:d8:34:e0:a8:b1:aa:f3:
                    bd:ed:e6:03:be:5e:dc:cc:45:10:1b:d6:8e:2f:2e:
                    81:6e:d4:bf:36:db:ae:b5:9a:4c:77:bc:84:38:1f:
                    14:87:7b:6b:f6:a4:18:47:e6:0c:e5:f6:d0:55:65:
                    32:90:33:6f:af:56:cb:4b:47:b3:be:0a:95:07:f4:
                    55:af:95:a2:7a:94:0f:55:14:09:66:82:5d:de:ff:
                    b5:b2:5f:94:83:b5:27:47:41:a1:33:08:be:f3:97:
                    d2:f2:c8:b5:4c:7b:a9:91:8c:6a:c1:85:fd:4c:0a:
                    9c:27:6f:3c:07:73:c8:bc:39:19:f4:ac:17:7f:7e:
                    fd:f7:eb:d5:6e:9c:fa:a7:71:ea:3b:96:f1:4f:e9:
                    90:1e:70:0a:30:ec:dc:68:1c:a9:de:40:c4:c3:17:
                    23:6d:a7:61:3f:21:c0:eb:d6:df:c8:b0:fe:91:68:
                    71:36:dd:19:d1:12:5c:22:3a:e1:bb:ed:ae:c9:82:
                    7f:aa:98:12:5d:39:f0:ec:bd:a8:d6:f2:09:e8:4f:
                    04:70:8b:84:60:b1:85:5a:b4:5b:6c:9f:d0:7d:90:
                    61:a2:29:e2:c9:18:fa:bb:70:44:26:2e:73:b6:16:
                    3b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:84:FE:10:79:97:26:B4:FB:EE:7F:5B:49:69:AF:7E:43:5A:0E:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/38e8dd53-d61a-3a02-9e01-0813ec535a48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:81:13:BC:3C:4E:71:F2:9D:DD:63:06:82:F4:78:1F:61:EF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:51:2b:d7:2d:f3:21:0f:e5:90:fd:eb:b6:ff:33:54:22:0e:
         15:17:24:da:21:be:c9:af:b1:6a:6c:49:40:3a:40:12:bf:d6:
         65:5c:83:5d:e6:4c:11:54:12:8f:df:d0:cc:f9:86:58:80:33:
         bd:5c:c9:07:1d:8c:3e:39:71:75:c5:5c:4f:76:bb:8a:6c:f2:
         e8:f0:f0:7a:65:72:2f:16:23:03:ec:24:1f:ff:1e:e5:6d:f8:
         2f:91:2a:98:62:3c:67:9b:74:69:68:8b:f8:ad:85:70:76:d7:
         2f:0e:09:a2:8f:50:f7:d7:9f:ec:ad:53:d7:e4:9a:92:18:72:
         77:83:34:73:3a:d7:18:87:43:c9:e2:7b:94:f0:21:c2:51:7e:
         40:6c:88:90:7e:c2:e2:2a:a2:9f:88:ad:7e:19:5c:68:ca:ec:
         ef:7d:88:d6:fe:7b:72:1b:0a:6d:47:e8:61:58:7c:a0:9f:9f:
         23:09:65:47:5a:f5:ee:29:77:92:69:65:1e:ff:e4:62:59:48:
         24:aa:a7:52:fc:5f:91:6b:d7:14:eb:08:b9:3e:58:b1:5d:26:
         3d:b0:c9:46:a5:8a:d9:7c:e3:03:85:d3:02:95:a0:3c:ff:92:
         6e:ba:e5:e8:7a:fa:3e:d1:75:e3:f3:2b:96:a8:65:c8:41:f9:
         12:a9:ec:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:37 2026 by rpki-client