Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/3fdd46d9-90c7-39ad-a76d-70419fa36ef1.roa
File:                     3fdd46d9-90c7-39ad-a76d-70419fa36ef1.roa (raw, json)
Hash identifier:          XZDAIo+PpQ+qnszMRBB7Il6ss7wVlPHgF6OJ1pHOYKE=
Subject key identifier:   70:F1:86:CE:3D:17:46:19:A8:73:3C:E6:49:B7:0E:A0:FB:AA:E5:F6
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584CEA5CDC734AC3DE0E3FC83400
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/3fdd46d9-90c7-39ad-a76d-70419fa36ef1.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     394859
IP address blocks:        142.190.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:dc:73:4a:c3:de:0e:3f:c8:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=cd12ee05-559d-451e-8722-2a99aad72cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:8c:fa:17:ed:69:67:67:27:65:26:4a:51:d8:
                    ae:c3:93:f2:4b:4f:f6:2d:32:6b:29:b7:a0:01:4b:
                    1b:55:53:44:fa:0d:9a:85:bb:b3:f5:80:91:58:2a:
                    04:91:08:be:e9:cc:38:16:e7:19:23:ac:d4:bf:b7:
                    73:4a:88:14:1b:91:c9:d8:98:0e:ac:3d:0a:f1:e7:
                    33:61:41:80:3d:2d:c2:a1:3c:0f:55:15:f7:3c:cf:
                    73:2c:ca:5a:8a:80:af:f7:62:a9:38:ba:03:50:ee:
                    5c:58:f3:c7:4f:2c:ab:2f:8f:66:ec:16:29:27:54:
                    ba:22:ff:02:a6:ed:24:00:97:06:e7:70:11:39:55:
                    a2:d4:5c:70:87:77:d6:a8:79:bb:87:9a:f2:aa:be:
                    0f:38:65:a1:0b:56:b1:46:cc:ee:2e:dd:53:0a:ba:
                    38:13:84:cf:7e:39:a9:80:a7:fc:07:be:ed:dc:f3:
                    de:05:3a:62:f7:4b:c8:c9:1c:ea:72:a9:97:6f:60:
                    ea:89:48:20:31:3a:07:04:ba:ce:2f:a1:fb:09:09:
                    6d:1e:36:a1:44:47:2d:a3:94:8e:49:e6:42:3b:94:
                    b2:28:9e:49:dd:df:f5:70:1d:5b:16:54:e5:6a:72:
                    dc:5f:ca:3d:db:35:ee:2a:1e:1c:36:e6:51:8d:a1:
                    bc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F1:86:CE:3D:17:46:19:A8:73:3C:E6:49:B7:0E:A0:FB:AA:E5:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/3fdd46d9-90c7-39ad-a76d-70419fa36ef1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.190.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:20:79:f6:24:5e:d0:0a:00:6a:c8:d8:66:c4:ad:77:c0:fa:
         c3:d3:a7:ea:79:0b:bb:84:82:0c:1d:9d:2b:0d:8c:82:fd:d5:
         a4:bf:70:b3:50:ff:87:87:c8:31:a2:b9:14:a3:86:39:f6:de:
         6a:f3:4c:fb:31:05:d7:bf:0d:f1:52:12:0b:11:58:28:a1:95:
         02:94:d2:d1:41:e0:7f:2f:1f:51:df:84:00:c2:90:61:57:bc:
         17:64:33:4b:c2:7c:fa:e1:69:c2:ed:19:81:d2:fe:84:5a:fc:
         81:ad:4a:6a:34:41:71:c8:58:d8:fd:95:c3:60:62:8b:66:f5:
         f3:5c:59:84:41:7a:c8:87:53:43:2f:96:27:af:7a:9a:af:38:
         9d:a0:ae:f7:e9:e5:77:9f:01:ab:09:2b:4e:f9:e5:b0:d1:fb:
         b2:74:3b:b2:4a:a5:ca:c2:41:25:df:0e:15:78:fb:ba:68:19:
         96:e8:8b:b5:c9:7d:55:58:36:87:bb:f0:84:b9:81:63:91:66:
         56:fe:67:eb:16:9a:3f:14:a6:2d:11:6e:73:b3:cc:f5:92:47:
         e4:6b:67:ea:e1:2e:2a:73:cc:1b:d1:0b:1a:5e:82:f6:42:ce:
         b4:94:06:fb:51:ee:dd:b5:82:14:00:7f:3d:21:99:ca:9d:1c:
         8c:b5:96:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:34:52 2026 by rpki-client