Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a1b8784-8b25-31c3-83b9-e829bd653a8b.roa
File:                     2a1b8784-8b25-31c3-83b9-e829bd653a8b.roa (raw, json)
Hash identifier:          fQj3NkGkPVx4p3/Vs/CEzZ4LVJoOzXcf1kOvoYJgYhg=
Subject key identifier:   08:B4:9A:D3:CD:85:AB:57:67:FC:EB:E9:4F:5A:41:8B:78:DD:A6:00
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC67C60247A7EBA7375EA5C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a1b8784-8b25-31c3-83b9-e829bd653a8b.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     701
IP address blocks:        141.150.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:c6:02:47:a7:eb:a7:37:5e:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=e31b22bb-09ff-4bfd-9b69-51894e284361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:44:e6:19:74:cb:f4:40:9c:a1:7c:7a:86:2d:
                    c4:fe:37:28:d5:7b:2b:e4:ad:2b:87:9d:15:76:ba:
                    1b:f1:7e:c8:21:af:7c:12:ee:b7:de:f2:e5:de:a1:
                    73:4d:33:3e:f6:00:57:9d:48:98:ec:6d:f0:bb:ef:
                    c4:28:32:00:3c:68:b5:e0:1d:bc:9c:81:64:59:a3:
                    cb:34:a2:96:ff:ba:e2:3f:ed:13:a7:49:fc:12:f6:
                    d4:67:3f:b9:1e:8d:9a:b8:03:00:b2:62:8b:7c:d7:
                    3d:1e:9f:30:16:b2:88:c4:25:df:4d:64:08:1d:bd:
                    e2:55:32:f3:0a:f7:8f:0d:3f:50:eb:9b:63:a4:f0:
                    67:c4:58:8a:55:1a:ed:f3:55:2b:17:b1:21:88:7e:
                    e4:88:9a:1f:a6:2e:1b:06:19:cf:6c:1d:55:dd:01:
                    83:e9:96:08:4e:ee:3b:b3:22:74:64:57:df:61:c0:
                    f5:6e:38:1f:9b:cb:b5:cf:0a:5d:ec:67:40:54:8d:
                    e4:e2:23:df:13:07:b7:e2:83:7a:19:99:5b:1a:db:
                    ef:8a:8b:a2:dd:3d:d7:29:ef:5f:5b:01:5b:6d:47:
                    f7:46:0d:b3:96:94:35:00:5d:40:d1:f0:e2:c8:29:
                    38:a2:25:9c:e9:21:5c:b6:d1:c7:ea:6a:e1:e3:62:
                    b5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B4:9A:D3:CD:85:AB:57:67:FC:EB:E9:4F:5A:41:8B:78:DD:A6:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2a1b8784-8b25-31c3-83b9-e829bd653a8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.150.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:8a:95:6f:04:6b:85:a8:07:73:8b:08:23:b3:ca:af:10:ac:
         0f:8e:66:71:0a:ef:3d:9d:8a:6a:89:14:a0:d9:67:5e:50:62:
         b9:ca:ef:e9:9c:54:4b:f9:06:fe:13:73:cc:10:b8:61:61:87:
         14:11:db:c9:1c:38:39:26:f5:94:ee:cf:02:8d:ff:c0:e9:d0:
         26:30:1d:e1:fb:6c:ca:a4:b1:dc:82:d0:56:8c:2b:fa:61:ac:
         a0:bf:88:e2:2b:32:97:2f:8f:33:4c:52:42:27:8b:ae:58:51:
         96:07:84:ff:d8:a3:2c:ac:45:0d:60:ab:02:7f:6e:be:17:06:
         02:3c:eb:d9:9f:b6:a8:25:67:02:a3:9b:01:df:2f:bd:68:19:
         57:5f:de:cb:27:24:ff:43:98:bc:d9:a3:3b:3e:a8:f2:53:d6:
         fd:f8:10:e7:2c:0d:34:e0:f4:6b:45:f0:3b:7a:93:7a:26:86:
         ce:77:9a:b2:48:74:3c:98:bf:49:03:1e:a0:4a:11:45:57:95:
         8c:77:0f:fe:78:f9:2c:59:7f:f0:cb:9b:95:4e:52:cf:60:7d:
         cb:2e:7d:ca:25:6a:e8:a4:04:44:4e:09:9a:23:af:41:8d:10:
         00:99:c2:12:bf:04:e4:61:37:18:e6:e3:e3:f9:1f:d8:55:82:
         f1:86:de:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:51:41 2026 by rpki-client