Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/dc512b57-bd72-3747-8b91-b95cac90faa8.roa
File:                     dc512b57-bd72-3747-8b91-b95cac90faa8.roa (raw, json)
Hash identifier:          YxWUmrpCi65zcQ1LhxPCNjdZMi8WWRIShELGk0vesCM=
Subject key identifier:   B5:95:84:BD:49:CA:0D:12:58:72:25:F3:05:C1:C7:7D:FA:BD:57:4E
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584CB121D9CD4548ADBB48A816E4
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/dc512b57-bd72-3747-8b91-b95cac90faa8.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     12162
IP address blocks:        146.115.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:d9:cd:45:48:ad:bb:48:a8:16:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=f9c307c7-1763-4aa8-a140-3577ad17625a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:37:00:89:70:3c:67:44:2c:3d:8e:7b:0d:ce:
                    96:bd:57:36:71:54:bd:b2:47:c2:55:d2:d9:8f:9d:
                    6f:58:e7:10:6d:2a:d0:42:51:6e:c7:f3:b3:49:5f:
                    f2:7c:b1:3e:ef:f7:bd:f1:1d:20:f7:15:5b:4e:bc:
                    45:6c:f5:8b:52:19:46:80:2a:c7:b2:6a:75:51:8e:
                    0a:b6:07:97:ed:64:da:e4:5a:61:39:03:e3:2d:07:
                    89:30:01:8d:9b:00:83:6c:eb:8b:26:26:ea:62:0e:
                    47:17:dd:34:b1:33:96:d6:48:de:7f:d2:01:88:2a:
                    78:2c:ab:d0:56:5b:bb:14:cb:d5:fa:32:e8:7a:36:
                    56:f5:a3:a8:9b:0c:af:60:f7:6f:cd:80:65:b2:f8:
                    15:6b:6f:c3:35:e8:1f:32:05:d2:73:9b:73:5c:fb:
                    64:83:c2:97:ab:76:52:07:55:5b:cb:d3:20:e6:c4:
                    ab:33:d9:bb:1f:d7:21:8c:87:30:73:af:ee:0b:ff:
                    43:49:28:31:dc:3f:5f:49:f7:f4:85:95:8a:c9:8d:
                    5a:98:b8:0d:fe:3d:d3:e4:17:30:4a:7e:c3:56:31:
                    d5:06:71:6a:ca:7b:49:0d:e0:a6:2b:8f:41:6c:06:
                    37:fd:e8:fe:5b:66:ce:26:39:d2:60:bb:6b:7d:82:
                    06:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:95:84:BD:49:CA:0D:12:58:72:25:F3:05:C1:C7:7D:FA:BD:57:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/dc512b57-bd72-3747-8b91-b95cac90faa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.115.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:02:52:bf:c1:42:91:e8:fa:36:9b:c3:21:e7:7d:dd:b7:84:
         7b:57:e6:80:1a:32:1b:0d:e8:85:f8:e4:2d:29:76:ce:50:a4:
         e7:a3:88:4b:de:b0:99:a2:67:94:43:b3:82:3b:e5:f7:64:0b:
         c7:c2:62:83:9d:da:38:01:85:b6:c6:ac:6f:1b:c7:77:cd:64:
         2d:53:4f:0d:ce:61:72:52:7a:5b:19:0e:8b:bb:d1:3b:34:93:
         fe:8a:18:6c:8a:a4:65:f6:dc:1a:ba:cc:17:ca:45:ee:25:47:
         e7:13:fc:d2:a4:02:fe:b0:26:ce:f9:a1:bd:f6:55:94:c4:32:
         ab:8b:0b:8b:d2:07:24:d3:cb:6b:94:4e:47:bc:95:bf:4b:e0:
         cf:ff:f4:3a:70:07:68:a2:21:aa:19:96:1d:de:5c:83:f9:74:
         0a:b2:e0:2a:97:74:6b:82:53:64:b9:1a:f8:3c:13:98:3a:63:
         ac:aa:97:54:a5:53:c2:2f:67:ed:d6:d1:72:46:4a:75:ae:39:
         8d:ac:f1:e4:bb:5d:c8:05:64:ba:16:e4:bf:89:ee:05:64:32:
         07:07:a0:6a:50:b8:1f:b4:f7:9b:75:dd:33:01:b0:03:ca:cf:
         dc:ce:f9:25:7c:72:1d:e0:71:c8:1b:d5:71:a0:4a:27:7f:cd:
         21:87:d4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:30:25 2026 by rpki-client