Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c2ed546d-d90b-3ca3-8b1c-ef2ee608a5d9.roa
File:                     c2ed546d-d90b-3ca3-8b1c-ef2ee608a5d9.roa (raw, json)
Hash identifier:          uvUL7esLYsl7q2Xq0tg/OCNAlvUHsq3mk91+ACI7rkE=
Subject key identifier:   11:21:41:A4:D3:02:15:76:B1:D7:28:E8:53:99:29:9E:7D:DF:DF:35
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584D651508E0162C4B9448D15A00
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c2ed546d-d90b-3ca3-8b1c-ef2ee608a5d9.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     14297
IP address blocks:        139.131.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:08:e0:16:2c:4b:94:48:d1:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=e7122892-8b7a-4a8b-a530-ba3e57361a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:40:6a:70:ca:71:73:a1:cd:3b:ed:aa:f5:e0:
                    7a:48:e8:8b:d7:08:0c:bf:17:36:25:a5:28:9e:c8:
                    4f:ae:93:2d:1c:b6:19:6d:2a:15:24:db:07:66:95:
                    69:af:e7:27:87:32:64:7f:2b:58:99:c5:55:0a:f8:
                    98:e0:25:b7:a0:7d:0a:89:fd:a4:1e:49:62:44:2d:
                    e4:c1:35:cf:ea:e4:a5:e0:35:a6:f1:0a:40:9f:9e:
                    46:ba:21:8b:31:6b:7b:11:5e:72:65:dd:a5:63:a1:
                    a2:52:47:44:14:37:49:3e:95:03:e8:d3:87:b6:af:
                    d4:70:5a:a7:d3:72:fb:70:eb:1b:69:93:62:a0:cb:
                    1c:37:ae:15:72:a4:f7:c0:b1:88:7e:89:ab:b2:13:
                    4c:43:d8:bd:1a:a0:44:67:22:60:ba:84:d8:b5:59:
                    f3:fd:d3:4a:91:96:c7:a5:3a:8c:1a:fb:41:48:7f:
                    25:53:0d:43:f0:80:87:fb:af:f0:0f:3c:f8:64:93:
                    f8:08:27:93:89:23:65:c5:99:75:8b:0d:86:4a:7e:
                    6b:0f:7e:47:ee:e4:24:f5:c9:d0:fa:a2:3e:c1:15:
                    2f:9d:b7:d2:b3:64:78:7c:56:b0:b4:ae:30:de:7c:
                    5c:ed:e1:62:8e:85:10:a3:28:92:a8:2a:f1:47:84:
                    11:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:21:41:A4:D3:02:15:76:B1:D7:28:E8:53:99:29:9E:7D:DF:DF:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c2ed546d-d90b-3ca3-8b1c-ef2ee608a5d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:09:58:1f:4b:bb:ee:47:5e:87:fa:33:ba:97:c4:c0:ed:06:
         58:27:08:60:23:53:5f:96:e6:d5:30:31:9a:7a:9f:1e:48:d8:
         3f:6e:a8:60:6d:a5:1c:f3:19:3b:c2:23:dd:26:ef:29:58:97:
         f0:75:ca:85:11:0f:6b:8e:49:d4:4c:ab:15:2c:dc:3d:ce:04:
         85:12:09:05:3f:5f:04:29:c9:de:96:e0:da:ac:15:6e:bb:72:
         e8:d4:ee:fd:ce:71:ce:fb:7a:34:bf:f8:d6:2b:2d:77:87:ae:
         ec:82:9b:a4:dc:0a:79:79:60:a1:9f:ff:b6:47:44:d0:44:34:
         30:99:65:d1:8f:93:d6:32:6a:1e:4f:be:51:5b:27:f6:6b:45:
         17:aa:a8:17:b5:16:83:9e:e9:a6:ae:c4:ee:9d:6e:ea:e9:62:
         ee:30:ba:9a:74:33:b1:eb:1a:d8:7a:cd:fe:dd:73:1e:81:e6:
         9a:27:32:76:a3:a2:34:17:36:0a:51:c0:66:70:aa:65:5d:a5:
         8b:9d:91:ab:e3:ce:b9:8e:05:ee:2c:ad:c0:75:84:2c:9f:de:
         c5:21:e7:b0:e8:1d:1a:35:f2:2c:f6:f8:73:b0:9f:0c:ef:cb:
         b6:4d:b4:17:6d:c7:f2:38:3a:a7:1e:9c:89:3e:b7:f0:a7:ac:
         98:e2:30:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:07:55 2026 by rpki-client