Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/f7f01ce1-4b62-3bbd-b273-2a48136d73c1.roa
File:                     f7f01ce1-4b62-3bbd-b273-2a48136d73c1.roa (raw, json)
Hash identifier:          mrRhgH05TGl0/QiUeQaiv7GbmufBgY98ErhfILJHBBc=
Subject key identifier:   69:61:D4:15:41:AE:4C:E7:E7:9C:A6:E8:3C:39:22:5A:50:5E:1B:8D
Certificate issuer:       /CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e
Certificate serial:       010D0C9F4328584E0005DF8A8D1EF1655AD31A00
Authority key identifier: D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/f7f01ce1-4b62-3bbd-b273-2a48136d73c1.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     51964
IP address blocks:        141.188.96.0/21 maxlen: 24
                          192.25.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:df:8a:8d:1e:f1:65:5a:d3:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=8e108aba-c380-4218-9d45-f94039a1b33c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9f:b8:d7:87:10:b4:1c:3d:28:32:16:02:45:
                    ea:4b:5c:86:f5:5a:6c:6b:ab:6c:11:f1:62:07:23:
                    f5:f6:c4:58:84:2c:88:89:fe:40:87:9e:56:44:95:
                    07:dd:45:74:d0:1a:f2:24:4b:73:aa:ac:e0:a0:17:
                    e6:07:2e:14:34:14:9a:e0:7f:ba:70:d6:90:ce:22:
                    ad:d4:2d:56:ec:58:4b:ce:8e:b8:9d:3f:65:ff:95:
                    ff:6b:a0:0f:d0:a4:f3:8a:cb:e8:36:85:c6:d9:34:
                    b1:8c:b4:dd:12:e1:5d:b7:e0:4e:4f:8c:40:3e:5a:
                    12:06:c7:e8:5f:cf:bb:03:bc:0a:63:33:48:bf:5e:
                    ad:e0:c7:89:0f:c7:ed:ab:9e:d7:95:20:d9:46:4e:
                    47:fb:74:76:4a:0f:1e:fc:88:4e:90:af:dc:10:76:
                    55:09:e1:3c:c5:b1:84:de:b8:1a:89:88:4f:45:a1:
                    0d:3d:e0:51:e7:36:5c:51:23:35:43:9e:48:75:5c:
                    c3:0b:7e:28:0b:ed:82:14:5f:9f:0c:5b:2a:ef:14:
                    99:58:df:81:f1:11:8c:83:67:e3:42:7d:c7:db:27:
                    d4:88:d1:20:59:7c:c2:ba:c3:9c:44:1d:72:74:04:
                    7b:53:65:13:40:9c:e6:18:cd:8c:c7:33:1c:c3:be:
                    89:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:61:D4:15:41:AE:4C:E7:E7:9C:A6:E8:3C:39:22:5A:50:5E:1B:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/f7f01ce1-4b62-3bbd-b273-2a48136d73c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.crl

            X509v3 Authority Key Identifier:
                keyid:D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.188.96.0/21
                  192.25.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:4e:c2:e6:26:11:7c:1b:ba:dc:67:98:36:7a:db:cd:13:1a:
         55:3b:1e:55:ab:9d:0b:e4:de:57:d0:0d:c8:08:7e:96:91:71:
         fb:1d:61:e3:e3:12:5d:33:75:ae:8a:18:0d:79:76:14:a7:72:
         f0:72:99:68:e0:c4:13:47:e4:0a:8c:09:a5:82:c9:4e:90:eb:
         97:5e:9b:75:cf:54:3c:ab:14:fe:1f:3e:1d:14:24:cf:10:35:
         34:ea:f2:e4:14:6f:83:0b:67:6c:25:40:7c:0e:70:a9:50:da:
         d2:9c:b0:19:2e:48:d4:62:c8:42:a7:c8:f6:4a:6c:c3:ba:ec:
         88:a4:c0:60:1a:23:1d:33:b1:52:c2:ae:ba:46:fc:f1:a9:ec:
         8a:97:c2:ca:b2:b5:a1:12:f8:38:22:e4:9d:8e:5d:63:b9:28:
         2a:aa:db:f0:e0:41:65:f3:5a:7e:e1:89:8d:dc:ea:48:d8:8e:
         83:79:b4:8b:2a:cf:c5:ed:fa:bb:ff:e7:1a:af:d3:97:1e:ab:
         ec:6c:b7:d8:e7:ff:2a:b1:eb:f9:df:43:05:5a:b4:da:e8:8f:
         b2:ef:36:a8:4e:ee:0b:70:77:80:4d:1f:a3:fc:6b:d0:d4:a3:
         d0:79:9a:5f:42:74:b5:ed:8d:b3:b4:4d:a2:a3:2c:0a:ed:da:
         2e:5d:b6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:36:54 2026 by rpki-client