Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2319d758-c98d-395e-8e3d-c34f7f632200.roa
File:                     2319d758-c98d-395e-8e3d-c34f7f632200.roa (raw, json)
Hash identifier:          lGzSvDMm/rVTGFZH1joOGByGqWyuiNN75Qt9pRr0Ix4=
Subject key identifier:   C4:59:44:4A:8C:4B:FD:E9:BF:AB:D8:C0:45:A3:7E:0E:4F:BB:D2:20
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584D5E1A6366E2F8CA490F01CD40
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2319d758-c98d-395e-8e3d-c34f7f632200.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     16696
IP address blocks:        148.59.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:63:66:e2:f8:ca:49:0f:01:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=792ffccd-278e-46aa-a50b-70c2a74aa012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d3:4a:45:ea:72:ea:08:f2:24:3b:fa:52:62:
                    41:0e:c0:50:73:27:8e:6c:29:39:3f:9f:bc:3a:8b:
                    e4:66:d8:29:50:21:e3:d4:58:66:58:42:ba:88:6f:
                    c7:22:5b:fa:c1:97:ee:fa:21:5b:ce:8d:45:2d:ad:
                    e0:61:8b:f1:44:ad:f8:28:7b:76:4d:2f:16:8f:3e:
                    89:3c:25:5d:86:70:64:a5:e1:a7:c2:49:4a:dd:a2:
                    d5:55:9b:22:ae:5e:ed:c1:36:f4:f6:d2:95:c1:e6:
                    05:7c:48:b0:78:9c:42:fa:55:88:17:1d:c1:f7:ff:
                    97:3f:c8:ad:81:26:7a:8a:37:4d:c5:e3:a2:50:54:
                    5f:c1:90:3e:ef:1a:08:46:bf:82:c6:8a:16:c2:5d:
                    e8:e0:e3:87:3a:3c:ae:6b:b7:ba:0a:fb:38:31:10:
                    07:5b:ed:e8:98:5f:eb:23:ab:c2:0b:87:da:d0:3a:
                    39:08:b9:18:2b:85:c8:bf:f5:aa:93:f4:c2:be:ca:
                    65:d5:0c:26:64:48:dd:64:1d:ec:dc:b5:86:4f:0c:
                    38:5c:3e:e5:88:27:a3:da:d0:80:75:1f:b0:15:91:
                    fb:ea:bf:1f:85:a0:2b:05:f0:72:37:b1:b6:f5:b7:
                    81:e7:74:9d:fe:d3:b2:22:30:83:5c:7d:b9:c4:fc:
                    e8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:59:44:4A:8C:4B:FD:E9:BF:AB:D8:C0:45:A3:7E:0E:4F:BB:D2:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2319d758-c98d-395e-8e3d-c34f7f632200.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ec:06:9f:6a:9c:38:fc:4b:4e:82:5d:b9:20:99:f4:38:12:
         e1:52:a5:19:4a:81:73:3f:56:f9:0f:4c:a0:1a:d1:ed:78:71:
         9f:80:e2:e2:6c:11:3d:25:94:64:49:f4:1a:a4:5d:24:69:3d:
         5d:83:50:97:77:db:27:73:df:61:dc:6b:aa:66:51:9a:88:4a:
         13:8f:cb:81:ed:7e:27:e8:e3:cf:ac:66:9e:83:45:4e:bf:e5:
         1d:49:af:4c:4e:0e:f5:9a:79:3e:c2:98:47:d6:e2:6f:a9:fa:
         4c:26:72:b5:0b:4b:60:bc:68:8c:87:49:23:de:d1:29:1e:cf:
         07:99:94:17:b9:31:0a:fc:98:ba:0d:0a:78:b5:6e:ec:c8:e4:
         eb:fb:c7:86:63:72:3f:30:09:25:51:08:5d:06:5f:ce:e3:d2:
         f9:d3:ad:6b:fc:ae:12:16:4b:f0:c6:c1:b1:f5:26:22:7c:c6:
         89:61:e6:b9:b8:ed:c4:9f:0e:9e:85:66:97:d9:42:2f:f2:0b:
         aa:18:a8:22:2b:1d:65:e5:fc:e3:de:05:88:a5:f0:95:23:cc:
         31:9d:68:55:21:02:4d:ba:1c:87:51:02:3b:99:87:09:cb:b3:
         ed:22:4e:cd:a1:67:b2:0c:0a:6e:dc:84:a3:f8:29:d2:67:89:
         29:8f:1f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 2 22:36:28 2026 by rpki-client