Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/43318d43-107a-3c35-937c-35cc2520acca.roa
File:                     43318d43-107a-3c35-937c-35cc2520acca.roa (raw, json)
Hash identifier:          CeydC0AR9OIzBJASz7b0EjBRDB5YNynNzsp1SYoWpGE=
Subject key identifier:   5D:45:14:C2:B7:07:4D:D7:B3:B7:D1:35:E2:B5:54:D0:FE:4E:95:ED
Certificate issuer:       /CN=c3927d26-c229-496a-8940-c88a834f5196
Certificate serial:       010D0C9F4328584E18AEE52EC207AD24094BB700
Authority key identifier: DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/43318d43-107a-3c35-937c-35cc2520acca.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     12119
IP address blocks:        142.204.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:e5:2e:c2:07:ad:24:09:4b:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3927d26-c229-496a-8940-c88a834f5196
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=341eaef5-cfd1-4769-9dec-b84fcf76346b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:21:9d:35:f6:d0:bd:4c:2f:7a:c4:b6:e1:f8:
                    d6:1d:fb:b2:be:31:63:65:a3:80:b4:32:8b:4a:6c:
                    24:77:f0:b1:45:4f:21:89:99:25:85:53:50:85:da:
                    c5:73:b5:0d:3c:c6:54:1c:72:e8:8c:32:f8:47:89:
                    30:9f:e9:a3:43:46:59:fe:81:af:fb:ca:0e:dd:4b:
                    40:33:8e:9e:c5:09:f6:5b:05:f5:e0:43:00:19:d9:
                    4d:a4:cf:45:fa:06:8b:00:66:62:99:d7:53:d6:03:
                    0f:35:82:16:b5:3c:d1:f4:cc:9d:f3:fc:93:01:8b:
                    03:c3:e1:fb:11:de:db:c4:d8:c4:9e:1c:8f:a6:14:
                    ce:bc:2a:d3:8c:1f:9a:56:20:42:f9:b0:f2:71:1e:
                    7d:59:09:ec:ae:06:84:67:80:0a:f4:fa:a5:41:b4:
                    6c:56:02:d1:0e:fc:ba:70:db:c5:4e:31:b1:6c:bc:
                    27:f0:e2:05:d3:81:1e:da:ca:7b:8a:84:5b:0a:49:
                    17:a0:44:21:4a:5c:f1:f3:0d:94:78:e1:ea:69:50:
                    60:0c:cc:c2:ef:57:8d:0a:82:ce:64:eb:9d:9c:eb:
                    8c:78:3a:29:64:1e:90:7b:3d:14:8c:3e:40:8d:8b:
                    98:04:3e:ab:a8:c4:84:65:0a:d8:2f:90:b2:51:26:
                    bc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:45:14:C2:B7:07:4D:D7:B3:B7:D1:35:E2:B5:54:D0:FE:4E:95:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/43318d43-107a-3c35-937c-35cc2520acca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl

            X509v3 Authority Key Identifier:
                keyid:DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.204.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:2b:65:58:6f:a6:b3:3b:dc:67:80:0c:35:a0:c0:32:37:b6:
         17:a5:47:0d:f7:df:47:6e:5b:e8:ec:48:94:b7:b3:18:ce:cd:
         64:6b:a1:77:bf:2d:a6:99:05:0d:ae:48:47:24:98:77:72:5d:
         61:df:b0:b6:3b:91:ab:4d:40:92:35:28:50:b6:74:ec:5e:06:
         eb:16:3b:35:3a:5c:f0:d4:81:96:80:d1:ce:52:2c:8c:0d:c7:
         b2:ef:5a:1e:3e:89:96:56:71:ec:16:c8:b2:92:62:ef:25:6e:
         80:10:97:54:8d:aa:b2:8c:40:85:1b:f1:6d:9a:c4:f8:d9:29:
         47:85:00:1b:dc:4f:d3:17:59:39:00:4f:1b:03:02:fa:7a:60:
         10:fb:7a:92:1e:ed:21:32:0d:ec:53:ce:b5:55:3f:fe:3a:8f:
         bf:c0:5f:e9:fb:0e:ad:9a:9b:42:3f:80:f0:8c:44:7d:25:e9:
         40:f6:66:a0:84:1e:bb:87:4d:15:0c:e3:2a:13:73:ce:f9:11:
         8c:93:5b:6d:7e:4b:4b:60:ca:e7:cb:1b:a0:4b:7d:72:1b:c1:
         cd:7d:b9:c6:26:85:a6:d4:42:67:83:f5:58:70:d6:21:f5:75:
         15:64:6e:46:53:3e:33:47:1a:ba:55:9b:9c:79:34:a9:8d:ad:
         a5:03:c7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:53:50 2026 by rpki-client