Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/193adb60-54b1-357d-b43a-abb5a4bd0a33.roa
File:                     193adb60-54b1-357d-b43a-abb5a4bd0a33.roa (raw, json)
Hash identifier:          SZO08jFufXP6Bd8pKMGg4UWD/F7EkJDafaE6bQJubCI=
Subject key identifier:   CF:06:6C:F5:46:9D:04:BB:5F:1B:CF:3C:03:F6:81:4E:01:80:C6:53
Certificate issuer:       /CN=135a25e4-6a94-45c6-b694-2d6e8256166a
Certificate serial:       010D0C9F4328584E1E444463CE47AD8F490C50C0
Authority key identifier: DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/193adb60-54b1-357d-b43a-abb5a4bd0a33.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        143.192.40.0/24 maxlen: 24
                          143.192.41.0/24 maxlen: 24
                          143.192.42.0/24 maxlen: 24
                          143.192.43.0/24 maxlen: 24
                          143.192.44.0/24 maxlen: 24
                          143.192.45.0/24 maxlen: 24
                          143.192.50.0/24 maxlen: 24
                          143.192.51.0/24 maxlen: 24
                          143.192.52.0/24 maxlen: 24
                          143.192.53.0/24 maxlen: 24
                          143.192.54.0/24 maxlen: 24
                          143.192.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:44:63:ce:47:ad:8f:49:0c:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135a25e4-6a94-45c6-b694-2d6e8256166a
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=85ae9d7b-a123-430d-881d-a9f6ef1d90ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:86:66:81:96:85:11:45:78:ed:e6:bb:49:47:
                    68:14:b6:95:a2:2f:8c:c6:2a:3f:d8:01:8f:6c:11:
                    e9:b9:94:bf:2f:9f:c5:43:02:be:24:d2:2f:e2:ba:
                    e2:9f:0c:a0:ac:4f:fb:4a:b8:11:a6:07:7c:04:af:
                    3e:4d:9f:f9:aa:42:be:8b:a4:2d:60:d4:b8:ef:ef:
                    15:24:3d:3c:db:e3:38:ac:b1:a2:79:4b:b2:53:09:
                    1d:3a:06:fb:ee:87:4b:1e:ed:d3:78:09:90:af:47:
                    d5:dd:99:e8:81:0e:fa:2b:ea:3e:a9:96:88:a7:fe:
                    d3:44:be:b9:c1:50:6f:ae:01:3a:05:e1:7a:9e:71:
                    36:7d:fc:ce:6c:56:6a:a8:17:a5:28:9c:79:95:56:
                    ec:a2:ae:3e:01:69:76:ba:58:5e:f4:b5:38:4b:b4:
                    24:f6:0c:b3:7f:df:3d:c1:28:1b:41:5a:fb:85:95:
                    8b:95:ad:af:de:ac:93:b8:5f:3d:b6:66:13:e2:d0:
                    bf:8b:f9:7c:f2:87:55:d9:8e:66:74:41:67:e7:91:
                    33:d6:80:2d:09:cf:47:ce:c6:dc:8c:9d:84:b6:ee:
                    7a:bc:c1:4a:6c:6b:41:77:c0:ec:a2:51:05:e8:1e:
                    5d:20:3e:59:e4:af:37:3b:4c:ed:b2:77:96:8d:61:
                    67:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:06:6C:F5:46:9D:04:BB:5F:1B:CF:3C:03:F6:81:4E:01:80:C6:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/193adb60-54b1-357d-b43a-abb5a4bd0a33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl

            X509v3 Authority Key Identifier:
                keyid:DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.192.40.0-143.192.45.255
                  143.192.50.0-143.192.55.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:61:28:9b:90:32:1b:3c:62:c5:97:bb:ca:ba:31:fe:ab:07:
         90:ff:14:a7:f1:6c:aa:a1:f0:3e:0a:9c:55:65:e6:d1:8e:6c:
         42:ad:04:5e:b1:50:5c:b1:2b:83:da:1c:e7:2d:82:70:d6:6f:
         ef:52:69:2e:da:63:9b:9a:26:d9:6e:6c:e4:47:24:8f:a7:a9:
         9e:85:a3:46:b2:23:c0:10:0a:0b:0c:75:33:e2:3a:09:24:dc:
         e4:d9:c1:41:fd:06:9b:35:34:54:6f:bc:35:70:0e:85:41:21:
         03:24:c4:67:46:77:f5:0a:f8:23:e2:8d:18:24:af:da:cd:e6:
         19:57:21:e1:98:28:37:2b:eb:b6:5b:07:a4:a8:08:e7:1d:18:
         03:93:15:94:68:d4:60:56:dd:0a:8c:23:9a:00:61:a7:a6:70:
         35:46:27:3e:e2:f7:59:fe:33:52:b7:54:5e:85:41:71:00:21:
         71:a6:69:ff:be:70:7d:70:75:a6:63:02:82:55:0b:f6:fb:83:
         86:b0:3b:1f:f4:3a:bc:bd:b9:45:38:46:09:82:54:dd:dd:14:
         1e:9c:b5:dc:cf:54:ee:81:3b:40:cb:ca:d2:b5:89:9f:ad:91:
         a1:99:2b:cf:5d:ee:00:2f:e6:56:d3:c0:24:9d:ae:99:a8:fd:
         83:21:48:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:40:04 2026 by rpki-client