Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/4de3ff13-69a0-3064-b65a-2ac9b6b3f672.roa
File:                     4de3ff13-69a0-3064-b65a-2ac9b6b3f672.roa (raw, json)
Hash identifier:          egsKujUce4xUn5tSoTHHGuS5EqBbGKSsmgwuI0+Ty+Q=
Subject key identifier:   F6:81:CC:BC:77:EB:40:AC:4B:EB:69:5B:B5:03:6F:34:53:52:80:C9
Certificate issuer:       /CN=a110574b-b0a8-4116-8fba-63e69eba9d92
Certificate serial:       010D0C9F4328584CB81C86E1301496ADD58A1300
Authority key identifier: 85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/4de3ff13-69a0-3064-b65a-2ac9b6b3f672.roa
Signing time:             Sun 01 Feb 2026 14:00:40 +0000
ROA not before:           Sun 01 Feb 2026 14:00:40 +0000
ROA not after:            Sat 02 May 2026 13:00:40 +0000
asID:                     31942
IP address blocks:        143.223.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b8:1c:86:e1:30:14:96:ad:d5:8a:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a110574b-b0a8-4116-8fba-63e69eba9d92
        Validity
            Not Before: Feb  1 14:00:40 2026 GMT
            Not After : May  2 13:00:40 2026 GMT
        Subject: CN=b3a5cb69-0dba-4717-8690-1560393877b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:df:6f:19:6f:6a:07:73:0e:2d:bb:73:ee:22:
                    b2:f6:8c:6f:96:61:a9:91:b3:b9:62:64:5e:65:6b:
                    d1:a4:90:46:e7:71:ff:ee:30:7f:61:44:c1:41:76:
                    b1:8f:7a:c8:f3:58:e7:a8:58:1a:84:6d:0f:b8:e3:
                    be:ad:d0:d6:f9:08:8b:dd:63:fe:0b:90:29:55:73:
                    27:53:26:d7:93:db:76:ab:0d:d1:c9:ca:5a:54:aa:
                    6f:28:ca:56:f0:67:9d:7c:2f:98:2b:a9:8c:82:d9:
                    4d:2c:24:b7:d5:9f:18:a0:6e:c9:68:ee:ef:28:84:
                    c5:a3:a7:c4:06:9d:96:bb:a1:22:44:b1:dd:13:2d:
                    7a:f9:ef:9a:f1:f7:17:b9:e1:13:3c:c2:94:e9:a9:
                    35:4c:81:23:cc:8c:26:00:38:7c:f9:b4:36:0c:62:
                    b4:d1:2a:21:64:4b:bc:73:3b:1e:2f:ac:9b:b0:ce:
                    3a:21:45:65:59:de:48:ec:55:49:85:7d:04:69:15:
                    9f:1d:16:d3:88:f3:2c:c5:53:e1:ed:5a:f0:7e:fe:
                    9c:41:3e:6d:0d:15:bc:23:75:46:f3:76:9f:59:a9:
                    83:42:86:ba:e8:9f:64:58:b4:e7:db:36:f1:4e:81:
                    99:77:36:9b:4b:99:1b:0e:fa:65:ef:10:99:a8:1d:
                    75:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:81:CC:BC:77:EB:40:AC:4B:EB:69:5B:B5:03:6F:34:53:52:80:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/4de3ff13-69a0-3064-b65a-2ac9b6b3f672.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92/a110574b-b0a8-4116-8fba-63e69eba9d92.crl

            X509v3 Authority Key Identifier:
                keyid:85:72:27:D8:27:19:93:73:40:DF:B9:BA:BC:3F:68:C5:A8:19:E3:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a110574b-b0a8-4116-8fba-63e69eba9d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.223.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:73:c2:2f:b1:48:6b:1d:6d:f7:56:b4:ce:b6:93:76:6a:1a:
         ee:72:51:a4:43:85:bf:85:f8:c9:93:78:3c:0a:e8:ab:01:82:
         05:44:8e:95:8c:e9:9a:7d:d0:d5:12:29:6a:9d:19:fc:51:70:
         58:48:f0:c4:06:8a:81:60:aa:c9:3d:54:1f:e8:0a:07:64:8b:
         9b:4a:c9:8b:33:9b:00:e9:f8:8f:15:ff:4e:23:bd:fc:ab:67:
         cc:e0:8d:88:38:38:5b:05:57:0d:cb:7f:f8:f9:b6:de:e1:08:
         41:ea:24:53:c0:e3:ce:db:fa:bb:f4:e5:95:72:bf:c8:92:01:
         99:f7:1e:31:2a:8a:e3:f0:2a:d7:31:8e:72:01:e8:53:91:80:
         7d:6a:e0:8c:e6:f2:83:2e:f9:59:b7:85:0f:78:36:cd:3e:f0:
         fc:b3:68:81:29:41:20:26:a3:c4:da:c6:f5:c6:4a:c2:6f:f5:
         ca:06:b5:0d:a3:8c:8e:44:34:de:aa:9e:d6:5f:74:33:98:40:
         37:b3:22:ee:84:a9:35:eb:8f:4b:28:78:0b:b6:3c:36:7a:b1:
         aa:0c:89:f2:4d:c8:a6:a4:83:68:51:cd:c8:75:d3:7a:12:69:
         5c:0f:e2:33:8b:38:72:e1:26:3f:49:4a:2d:ed:65:d2:38:58:
         b6:f2:d3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:59 2026 by rpki-client