Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/3ec56888-fa6e-3257-b9f7-c27984d4193e.roa
File:                     3ec56888-fa6e-3257-b9f7-c27984d4193e.roa (raw, json)
Hash identifier:          tyF78tAEWCyT6WqWg4UArKAHo/A1ffkjSqDZuci3zd8=
Subject key identifier:   15:E3:6B:2B:09:EC:58:82:5A:65:1A:B6:5C:9D:33:3B:17:C0:CC:54
Certificate issuer:       /CN=75210b1f-48f2-40ee-9b12-cddbae20e12a
Certificate serial:       010D0C9F4328584EE504605C550FD88102582900
Authority key identifier: C6:7A:9B:37:11:B9:90:5B:02:B4:65:44:0B:2F:A4:9D:87:2B:74:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/3ec56888-fa6e-3257-b9f7-c27984d4193e.roa
Signing time:             Thu 20 Aug 2026 01:37:27 +0000
ROA not before:           Thu 20 Aug 2026 01:37:27 +0000
ROA not after:            Wed 18 Nov 2026 02:37:27 +0000
asID:                     401746
IP address blocks:        142.248.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e5:04:60:5c:55:0f:d8:81:02:58:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75210b1f-48f2-40ee-9b12-cddbae20e12a
        Validity
            Not Before: Aug 20 01:37:27 2026 GMT
            Not After : Nov 18 02:37:27 2026 GMT
        Subject: CN=213efb0b-886e-4577-bfd6-a359c9c3e9cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7e:65:03:f0:59:fb:28:a9:2e:ca:97:3f:54:
                    63:a1:05:02:d1:7a:c3:0b:9f:ee:5a:c1:d5:65:95:
                    4f:c9:0c:df:8d:bd:da:07:89:e8:39:ff:3a:5e:60:
                    f2:af:00:ca:14:79:d2:72:c3:33:12:cc:9e:76:d6:
                    e8:8e:d3:17:ed:fc:81:3f:4a:75:fc:47:28:f0:cf:
                    d4:8f:c3:aa:93:98:03:dd:bf:f1:95:24:a9:af:1a:
                    73:5a:01:42:3c:79:ea:39:f2:ef:af:9e:8e:a6:e8:
                    d0:47:78:3b:d0:b0:d6:25:94:29:15:37:41:6e:6a:
                    ef:10:e5:26:22:c5:8c:41:5f:e6:d2:51:25:01:f3:
                    a9:38:01:ba:98:79:20:be:0a:c2:41:b9:02:3b:03:
                    7e:98:77:8c:ae:d3:2f:4d:ca:dc:bd:59:99:33:63:
                    a2:7d:34:00:5f:e6:a0:da:7a:22:bf:03:dc:8a:08:
                    b8:53:3d:cd:65:92:df:9e:0b:b7:8a:a8:3f:89:d8:
                    7a:78:ee:a8:9a:a3:35:4d:f5:37:53:19:11:79:d0:
                    80:e0:d2:0a:d3:cf:96:64:80:8b:87:ad:13:7d:54:
                    6a:a4:b2:63:d8:4b:8c:6d:ec:d1:60:f3:ea:81:57:
                    a1:d2:7f:7f:0a:5f:41:4f:83:4e:de:68:2a:d8:8e:
                    f7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E3:6B:2B:09:EC:58:82:5A:65:1A:B6:5C:9D:33:3B:17:C0:CC:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/3ec56888-fa6e-3257-b9f7-c27984d4193e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a/75210b1f-48f2-40ee-9b12-cddbae20e12a.crl

            X509v3 Authority Key Identifier:
                keyid:C6:7A:9B:37:11:B9:90:5B:02:B4:65:44:0B:2F:A4:9D:87:2B:74:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/75210b1f-48f2-40ee-9b12-cddbae20e12a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:95:fd:04:7e:13:21:2d:8d:f2:55:f6:47:65:a5:bc:21:b3:
         76:64:8e:fd:b0:7d:c4:db:1b:ba:a9:20:da:4b:3c:01:ed:90:
         f6:bc:2d:bb:28:ca:aa:ec:4c:b5:12:73:1e:1d:07:24:52:4d:
         63:ef:d1:5a:ee:c9:07:e4:b6:4e:7d:45:a3:96:f8:4c:09:de:
         a1:f2:70:8d:0b:47:f7:e5:c4:8e:3c:46:4e:14:12:39:33:2d:
         9b:7e:fb:e7:e3:59:08:4a:15:e6:8d:5a:74:63:b9:6e:5e:e8:
         82:74:02:fe:52:7c:c6:00:ea:3b:46:78:2f:63:34:97:db:9c:
         00:87:36:54:11:9c:17:b3:3d:0e:93:3d:ce:1a:22:dc:00:e1:
         ed:2d:0f:33:5f:7c:03:56:75:71:97:83:09:f6:5a:c4:11:be:
         6c:2e:28:af:0e:1e:0c:f6:3d:07:ff:4e:75:e5:bb:de:1e:58:
         63:4a:86:1c:cf:19:5a:26:e5:1b:29:51:13:a4:6f:d4:30:92:
         70:de:fc:43:1a:3a:a2:96:15:b7:2b:c6:08:bf:bf:e4:cf:76:
         ac:a5:22:39:60:55:a7:d7:87:80:2b:73:92:55:7f:b3:17:9a:
         90:23:32:04:b7:1f:a0:4e:36:ba:14:44:c1:6e:2f:f9:35:9d:
         86:78:84:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:37:39 2026 by rpki-client