Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/f16f516e-8c3f-3ace-9ab3-9b2b80788004.roa
File:                     f16f516e-8c3f-3ace-9ab3-9b2b80788004.roa (raw, json)
Hash identifier:          Iz/jmcwLF3V5WnNAlkTbNXcj1OsmS7J5BSKrkzChE3U=
Subject key identifier:   45:DB:3C:A1:38:38:E4:E1:26:F3:67:94:78:48:73:A2:5A:6C:AA:66
Certificate issuer:       /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Certificate serial:       010D0C9F4328584AAB265B46AA141CDB24178680
Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/f16f516e-8c3f-3ace-9ab3-9b2b80788004.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        142.202.36.0/24 maxlen: 24
                          142.202.37.0/24 maxlen: 24
                          142.202.38.0/24 maxlen: 24
                          142.202.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:5b:46:aa:14:1c:db:24:17:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=87b1dd2b-4ff4-4ffb-aac4-ed56538c5940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3e:e2:c4:4e:b7:51:7a:a9:c7:54:ac:3e:18:
                    7a:50:6f:3c:24:a9:30:ab:32:6c:dc:82:f3:41:1f:
                    32:af:0a:e0:47:46:9d:7d:e5:7a:31:6e:ae:cf:c0:
                    09:fc:77:bc:40:1e:ce:98:25:8a:37:36:b0:92:d9:
                    7c:b5:80:01:83:c6:00:8d:87:03:ac:8a:10:4d:43:
                    4c:bd:52:f8:cb:cc:10:14:57:ac:ca:d1:b5:6a:61:
                    20:00:7a:cf:89:7a:e0:5d:c6:18:d5:3f:0f:27:54:
                    fc:a9:9e:c9:13:f6:23:fd:fd:3a:72:3f:e0:45:ae:
                    a4:4b:e3:44:d3:ce:d0:0b:f3:a5:c4:e9:bc:53:7a:
                    c1:f8:6d:57:3d:ed:7b:9a:24:31:cb:79:3f:89:96:
                    6b:b1:99:78:19:73:02:57:a9:29:2c:0b:ba:6e:37:
                    9a:70:25:02:d9:19:e2:41:5a:a1:af:4b:8c:d1:30:
                    df:4b:12:ab:c9:32:c0:92:51:57:a7:fd:59:1a:8f:
                    72:83:6e:ac:20:e6:b0:23:c6:d1:b2:6d:31:12:99:
                    65:16:c1:6e:02:95:3d:66:2b:ee:90:13:8b:69:05:
                    c0:c4:63:fb:8c:53:1b:6e:de:e2:ee:5a:20:90:f6:
                    2b:ef:7d:b8:19:67:de:bc:5a:bc:63:20:db:e4:3a:
                    9b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DB:3C:A1:38:38:E4:E1:26:F3:67:94:78:48:73:A2:5A:6C:AA:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/f16f516e-8c3f-3ace-9ab3-9b2b80788004.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:8a:73:6b:c0:1a:87:08:86:1c:1a:34:41:09:70:e4:9e:95:
         03:e0:b5:8d:23:8c:2a:fd:5e:b8:32:70:ac:5e:46:2d:a3:6a:
         41:34:27:ce:ae:20:df:22:f9:62:fc:75:ce:cc:c4:a4:99:c3:
         06:92:6f:21:3d:f5:7e:1d:e9:fd:a4:cc:32:36:5c:ea:26:4a:
         d1:86:79:77:ac:18:96:04:a7:c5:eb:09:46:03:fc:f6:10:2a:
         53:ad:d8:58:dc:e3:37:bc:1c:36:6a:0d:18:34:0f:81:ef:6b:
         a5:84:74:a5:39:b4:00:4d:0c:23:4b:b7:3f:0b:61:82:b9:55:
         33:4a:06:2f:f4:2d:47:3f:8b:51:9e:5c:ae:12:2e:b3:2b:c5:
         35:cf:e7:6c:af:cc:47:5b:88:ef:e1:0f:dd:55:d2:ad:9f:f6:
         54:11:b3:13:78:9a:0d:48:59:62:52:bc:2a:7d:19:d0:68:63:
         d7:19:64:95:a9:25:73:e0:5e:88:3e:a3:a4:4a:55:1b:5c:2d:
         48:f7:e7:24:07:c7:ef:08:55:92:75:ef:1b:47:ab:ca:0c:6e:
         8e:a3:de:1b:3a:e6:45:03:55:b1:8d:7d:17:4c:37:cc:91:89:
         f8:ea:cb:b5:00:fd:3d:c5:4e:b1:a4:89:45:ab:b0:ec:61:86:
         02:28:02:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:37:13 2025 by rpki-client