Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d9f7749-8263-3bf5-8316-3f6fe04dcd6a.roa
File:                     1d9f7749-8263-3bf5-8316-3f6fe04dcd6a.roa (raw, json)
Hash identifier:          TAwRftySabwk82ZwnO1T3fz4Z1hkGpfJen+vmjvzEqc=
Subject key identifier:   6B:24:5A:88:EE:02:48:1A:87:EE:16:0D:10:54:42:C1:00:39:70:FA
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC67C6D38E158B1C456E4300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d9f7749-8263-3bf5-8316-3f6fe04dcd6a.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     701
IP address blocks:        141.153.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:c6:d3:8e:15:8b:1c:45:6e:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=06478328-a9fe-4671-af75-b88184f03fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:73:46:31:df:b9:1c:32:5a:ae:42:a1:15:1e:
                    2e:a3:d1:cb:09:50:1d:65:77:ff:b6:3e:eb:96:a5:
                    9b:e0:e2:2b:00:d2:76:27:88:95:9d:c9:7a:fd:15:
                    35:47:46:89:f3:61:80:8a:0e:6c:e7:96:f8:c8:35:
                    75:8a:0d:95:79:85:bc:b8:1c:c0:4e:66:86:16:8e:
                    d2:0a:14:23:89:cf:7e:2c:bc:0c:89:a4:bc:6f:3d:
                    a6:15:3b:f5:ce:c0:01:95:3e:88:17:03:f4:59:ae:
                    99:79:1d:da:db:ad:7f:6d:de:d1:17:5e:16:b9:44:
                    94:0c:4d:3a:11:a5:d8:5d:4a:2c:f5:db:a3:31:1d:
                    ad:f3:17:b0:4c:eb:20:ff:40:3e:4e:a3:3f:ef:78:
                    cc:a6:71:ab:30:ab:cc:00:4f:c1:b3:c0:c1:93:6d:
                    46:35:7a:c5:3d:2c:3e:4a:c8:27:f1:82:16:48:c4:
                    83:d6:5e:b7:9f:b7:82:7c:9e:bb:4e:78:03:57:8b:
                    fb:0e:92:8a:27:00:f1:45:76:f9:ce:fd:7b:37:8e:
                    4c:4d:1b:b9:37:45:6f:fe:26:69:e6:8f:b3:2b:6e:
                    13:05:7d:a9:1b:5d:15:ad:b9:86:61:7c:39:3a:99:
                    5a:df:64:85:11:6b:4c:47:2e:32:1e:d5:e5:34:79:
                    b2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:24:5A:88:EE:02:48:1A:87:EE:16:0D:10:54:42:C1:00:39:70:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1d9f7749-8263-3bf5-8316-3f6fe04dcd6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.153.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:03:f0:75:fb:70:46:20:f3:5a:eb:f9:9d:a8:35:1d:50:ce:
         d5:6e:80:b0:08:d4:e6:0c:74:2b:e6:8d:74:3b:d6:f2:11:2a:
         87:70:bc:72:00:d0:80:4f:79:d7:82:84:3a:0b:bb:5a:ac:ff:
         9e:66:06:98:36:a3:1b:4b:55:5f:99:04:24:7d:dd:37:36:95:
         ff:fb:0c:ac:0e:66:a1:13:86:c6:cf:be:31:04:be:24:26:fa:
         69:59:7b:65:04:eb:0e:d2:29:b3:2c:b0:17:5b:bc:5b:49:10:
         ba:68:cb:5d:d9:ea:10:34:ed:83:44:52:01:ed:ef:d5:af:99:
         5e:e8:45:62:07:1c:b2:d6:2e:d9:36:3f:88:74:3d:de:23:af:
         b0:4c:8e:b6:35:f8:43:a9:89:aa:dd:09:ea:d2:72:18:91:16:
         fb:cc:6a:bf:b2:2f:30:4a:36:f0:84:21:33:0e:30:4c:f4:d7:
         a9:20:81:31:ea:e4:de:fd:c8:69:57:e7:bc:33:b5:41:15:d8:
         73:89:6d:fc:ef:5e:7e:93:6a:b0:6e:0e:46:fc:5e:09:15:3d:
         40:12:58:90:04:41:f4:e0:14:55:be:ab:4c:c3:8b:d3:83:ef:
         43:5b:58:2a:7f:a4:da:98:a2:a8:5f:92:e0:fe:de:52:44:c4:
         c5:f1:90:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:48:47 2026 by rpki-client