Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/72ce5474-13ae-3784-9887-a4c143cbda9b.roa
File:                     72ce5474-13ae-3784-9887-a4c143cbda9b.roa (raw, json)
Hash identifier:          xd1d+hJqZD5N3KD6iU/H6OgnkyT3JuLZW2rOOBs8+wQ=
Subject key identifier:   BF:4B:DE:EE:DB:78:AC:77:53:9D:8C:51:C3:E6:A5:B7:3B:0B:7B:FF
Certificate issuer:       /CN=c6dce4dd-aa4a-4077-aa50-8e935d660edc
Certificate serial:       010D0C9F4328584CFC823123FA5A101F6A74C180
Authority key identifier: E0:47:A7:1C:8B:EF:3B:F3:70:6B:6D:40:6B:ED:03:01:E9:5F:D3:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/72ce5474-13ae-3784-9887-a4c143cbda9b.roa
Signing time:             Thu 26 Feb 2026 02:00:32 +0000
ROA not before:           Thu 26 Feb 2026 02:00:32 +0000
ROA not after:            Wed 27 May 2026 01:00:32 +0000
asID:                     46592
IP address blocks:        162.142.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/c6dce4dd-aa4a-4077-aa50-8e935d660edc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/c6dce4dd-aa4a-4077-aa50-8e935d660edc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fc:82:31:23:fa:5a:10:1f:6a:74:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6dce4dd-aa4a-4077-aa50-8e935d660edc
        Validity
            Not Before: Feb 26 02:00:32 2026 GMT
            Not After : May 27 01:00:32 2026 GMT
        Subject: CN=b1ce56bf-65b3-480b-95a3-9ede8b176aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fc:e3:e8:b0:68:37:ab:2b:59:bc:c2:5d:93:
                    57:13:d5:bc:6f:43:fd:af:4a:c9:3b:58:63:22:4b:
                    08:1a:fb:03:3b:6b:eb:e4:f5:8a:f0:e1:b3:37:8b:
                    b2:d2:db:7b:5c:b1:cb:e7:42:7f:f4:74:3b:01:c9:
                    2f:9b:07:2b:66:0c:36:b5:52:3a:4f:d4:a3:14:14:
                    db:6a:88:a0:aa:13:70:25:b5:a2:df:4e:7b:ca:17:
                    f9:90:fe:cc:72:9d:81:9a:7a:dc:42:db:82:bf:c4:
                    4b:b6:23:07:55:3f:83:6b:32:17:85:3c:5d:2c:b3:
                    2c:aa:64:7d:37:a6:51:b4:84:2b:32:63:f4:f6:cd:
                    38:a6:cf:8f:35:e8:dc:a8:27:f9:1b:e5:83:9b:27:
                    0c:f7:4b:ba:54:92:2c:9d:bd:37:88:d8:dc:93:25:
                    44:e7:72:4e:08:dd:56:cb:ce:af:6f:f1:69:87:ac:
                    ba:7a:ad:c8:38:c6:be:99:d8:0f:29:b2:eb:d5:42:
                    1e:d2:c4:4e:aa:37:2d:b3:f0:76:a2:e3:11:55:5c:
                    2d:70:73:c2:dd:91:9c:77:58:8c:5a:77:51:6b:3d:
                    31:d4:bd:1f:42:82:46:ff:ce:2c:65:17:2b:73:14:
                    db:92:23:13:59:75:1b:43:01:0f:6c:8c:cb:2c:43:
                    bd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4B:DE:EE:DB:78:AC:77:53:9D:8C:51:C3:E6:A5:B7:3B:0B:7B:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/72ce5474-13ae-3784-9887-a4c143cbda9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc/c6dce4dd-aa4a-4077-aa50-8e935d660edc.crl

            X509v3 Authority Key Identifier:
                keyid:E0:47:A7:1C:8B:EF:3B:F3:70:6B:6D:40:6B:ED:03:01:E9:5F:D3:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c6dce4dd-aa4a-4077-aa50-8e935d660edc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.142.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:f7:33:38:30:ab:d9:15:fe:13:20:e2:b5:7b:18:c5:a7:ab:
         78:1d:de:38:43:1d:f0:63:73:77:4d:32:69:c8:b9:c3:eb:4b:
         79:1a:4a:0d:0b:1d:fa:ff:33:c8:b0:b6:8e:6b:4a:89:1f:2c:
         9d:b6:04:19:48:82:14:a3:51:28:61:35:28:23:93:c4:f3:e5:
         bd:5d:96:a0:2c:a8:f2:5d:98:ee:13:c3:ed:14:df:35:c0:bd:
         69:4b:a3:6c:2d:48:18:1d:b7:59:47:02:88:15:53:70:da:e0:
         36:45:25:19:36:85:26:ac:41:cc:e6:c7:cb:8d:a4:26:8f:4b:
         e3:c1:c3:29:da:6d:da:46:59:47:d3:43:72:52:b2:a2:65:6c:
         f7:22:48:fb:a4:a8:32:fd:21:dc:a3:08:37:de:bb:03:aa:35:
         70:9f:64:bc:47:67:4e:d3:b9:a2:22:74:b3:2e:46:92:2c:40:
         93:7f:10:3c:7e:5d:e5:3e:a6:97:6a:cb:e7:eb:a3:40:e6:98:
         84:33:53:1d:31:f6:d7:00:9d:9f:f0:9d:af:2a:fe:15:9a:57:
         8c:28:b1:47:f5:d0:2a:bc:15:77:d4:17:f3:d6:11:ee:74:ff:
         eb:42:d9:a6:9e:38:80:5e:e4:f4:03:5d:6c:62:9c:1f:af:b5:
         4c:9a:04:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:40:52 2026 by rpki-client