Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/46cfbc7b-5284-3990-afa8-e20285f053dd.roa
File:                     46cfbc7b-5284-3990-afa8-e20285f053dd.roa (raw, json)
Hash identifier:          NGVlctXn6IIaOJm+DaQSF+28HXQdbthY2AJKtEP3fvY=
Subject key identifier:   DA:4E:89:AE:DE:8A:2E:B8:2A:8E:C8:BD:6D:5D:E8:6E:9D:E8:2E:E6
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584CB287367D368877F4EE502E00
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/46cfbc7b-5284-3990-afa8-e20285f053dd.roa
Signing time:             Fri 30 Jan 2026 14:00:40 +0000
ROA not before:           Fri 30 Jan 2026 14:00:40 +0000
ROA not after:            Thu 30 Apr 2026 13:00:40 +0000
asID:                     22635
IP address blocks:        146.115.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b2:87:36:7d:36:88:77:f4:ee:50:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Jan 30 14:00:40 2026 GMT
            Not After : Apr 30 13:00:40 2026 GMT
        Subject: CN=3176e45f-e109-4946-9519-f9c23fd8573f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9c:e3:23:ad:91:b0:15:cf:d2:d9:97:bf:97:
                    95:4e:31:6f:c6:74:86:08:46:40:23:6b:ab:96:cf:
                    12:5c:65:af:91:77:e7:66:c3:10:ad:89:5a:56:e0:
                    d0:92:5a:1e:bb:d9:b7:6b:d0:b1:84:eb:c7:fc:7b:
                    f8:1f:f8:9c:e5:ac:ba:ef:ef:8b:09:06:92:b0:cc:
                    5f:d7:fc:23:bc:86:bc:e4:2b:bf:e5:3b:12:4e:a7:
                    da:6d:79:ee:6e:19:fe:3f:13:4b:85:a1:3a:6a:0e:
                    1c:62:bf:e3:b2:7f:b5:cb:f9:8f:16:c7:2f:2b:71:
                    28:56:f9:c6:2c:a2:13:92:4c:65:f5:b2:d9:3a:65:
                    44:d6:b7:b4:6c:05:01:b1:f8:38:ab:c7:88:9b:73:
                    19:8f:f7:a7:d6:06:fc:a7:e9:20:3e:44:86:74:dc:
                    ad:62:ff:31:33:b5:66:a7:9d:57:86:81:e0:97:e5:
                    91:8d:69:f7:39:3d:e3:0e:7b:b9:fc:40:73:df:1b:
                    e6:d6:b8:95:02:30:fe:9f:70:c7:fd:e4:49:11:93:
                    b2:21:04:5a:81:dc:b0:7e:46:36:b3:19:32:b0:0d:
                    b2:fd:7a:dc:f5:6f:4c:00:33:33:32:3c:ea:95:5a:
                    3e:cc:bd:33:f7:f1:5e:2f:82:3e:09:64:24:ef:45:
                    31:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4E:89:AE:DE:8A:2E:B8:2A:8E:C8:BD:6D:5D:E8:6E:9D:E8:2E:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/46cfbc7b-5284-3990-afa8-e20285f053dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.115.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:63:5c:ef:13:d3:3f:55:62:1c:39:6d:15:0d:1a:44:ef:15:
         ea:32:5f:c5:08:80:f2:c7:c8:0c:cc:68:16:37:e3:73:e0:6d:
         ff:bd:18:ea:22:9f:20:a7:7a:ff:a5:f5:7e:ac:ac:33:59:57:
         b9:39:87:b0:2e:24:08:39:d4:b1:5e:33:cc:43:a9:da:73:db:
         d1:2c:8a:c0:a8:b6:47:58:19:02:4c:36:88:5f:ef:cd:0d:6f:
         df:fb:81:b7:42:de:d0:d0:5a:57:e9:39:e6:31:08:54:ff:b1:
         5c:a3:79:12:68:63:35:89:58:91:2f:ad:00:fe:dc:c9:a4:59:
         a9:d2:93:89:39:93:b4:36:be:62:3f:5b:a3:04:e3:f3:14:c2:
         9a:3b:e0:59:0f:1f:9d:f3:4d:14:34:0b:91:98:ea:d9:b9:f9:
         d9:fa:ff:05:48:c4:50:41:88:f2:6b:88:f8:8a:36:d0:83:bd:
         6e:01:d2:bc:fc:32:2b:74:2c:e1:2f:96:14:c2:25:60:3a:4a:
         5e:fa:9b:c1:4b:6b:e9:1c:4c:90:34:82:1a:2f:b2:2a:1b:00:
         1b:ff:13:bd:82:e8:bb:04:9a:8f:92:db:fb:be:62:b0:0d:42:
         e9:d1:e2:ec:13:80:99:df:6b:48:80:ef:42:00:f7:bf:91:ab:
         8e:6d:c9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:24 2026 by rpki-client