Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9972ffd2-82f4-460a-b701-97566a69b6fc/f72d34ce-c8ba-3015-a3a7-aabe8798edcc.roa
File:                     f72d34ce-c8ba-3015-a3a7-aabe8798edcc.roa (raw, json)
Hash identifier:          H7yxs9UiC4htkjYJPMSWjiiTv4UPjY1ihDSkThK1ltM=
Subject key identifier:   78:38:7A:D2:4B:21:73:7E:EB:06:C0:99:FC:EF:E8:F1:F0:63:B6:B7
Certificate issuer:       /CN=9972ffd2-82f4-460a-b701-97566a69b6fc
Certificate serial:       010D0C9F4328584D2299885CC1FC6905C6FB1900
Authority key identifier: 68:1A:08:2A:B7:E1:29:36:2F:46:6D:34:00:63:1C:1B:BD:83:3D:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9972ffd2-82f4-460a-b701-97566a69b6fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9972ffd2-82f4-460a-b701-97566a69b6fc/f72d34ce-c8ba-3015-a3a7-aabe8798edcc.roa
Signing time:             Wed 11 Mar 2026 17:28:24 +0000
ROA not before:           Wed 11 Mar 2026 17:28:24 +0000
ROA not after:            Tue 09 Jun 2026 17:28:24 +0000
asID:                     210
IP address blocks:        146.86.0.0/17 maxlen: 17
                          146.86.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9972ffd2-82f4-460a-b701-97566a69b6fc/9972ffd2-82f4-460a-b701-97566a69b6fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9972ffd2-82f4-460a-b701-97566a69b6fc/9972ffd2-82f4-460a-b701-97566a69b6fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9972ffd2-82f4-460a-b701-97566a69b6fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:22:99:88:5c:c1:fc:69:05:c6:fb:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9972ffd2-82f4-460a-b701-97566a69b6fc
        Validity
            Not Before: Mar 11 17:28:24 2026 GMT
            Not After : Jun  9 17:28:24 2026 GMT
        Subject: CN=c0f882cd-10ff-4133-9f86-cbce8259f1c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:23:6f:38:81:a2:62:53:d4:71:2d:59:79:56:
                    51:18:21:4e:63:d9:cf:35:03:71:91:44:1e:76:f2:
                    5c:6c:5b:e0:18:7e:fe:18:40:5b:21:29:5b:f2:01:
                    48:6b:bc:90:1c:1a:5a:ff:fe:e2:a4:a2:48:59:0e:
                    47:42:ee:aa:f4:e9:ba:34:1c:fa:5a:a5:1c:ae:8e:
                    1d:5a:97:14:81:f9:73:40:e6:a9:2a:72:9c:85:24:
                    f8:1a:26:e8:3a:c6:0b:47:1e:97:67:28:5f:ed:55:
                    0a:f9:35:54:0f:db:07:ca:57:1b:1a:82:38:71:1a:
                    24:40:28:51:6a:dd:d8:51:21:f4:11:5e:ba:72:fb:
                    72:40:1d:c9:4b:e8:03:65:ed:b5:7b:35:41:9f:6e:
                    47:ca:89:55:6d:14:af:c2:62:c1:35:97:86:88:7a:
                    54:06:42:79:31:95:03:64:87:f7:c2:da:15:3c:7a:
                    e1:52:4e:07:26:95:06:f9:78:51:96:e8:d4:c0:6c:
                    a9:ad:29:74:38:bc:c4:1f:bf:00:dd:5e:fe:7b:0e:
                    c5:d3:89:ae:54:64:ae:90:ba:9d:79:b3:89:fc:cc:
                    cc:19:c6:8f:b5:66:93:b2:a2:9d:74:4e:7f:de:4b:
                    1a:a4:2a:ae:19:0c:f7:a9:ab:98:e3:79:66:b0:18:
                    6d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:38:7A:D2:4B:21:73:7E:EB:06:C0:99:FC:EF:E8:F1:F0:63:B6:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9972ffd2-82f4-460a-b701-97566a69b6fc/f72d34ce-c8ba-3015-a3a7-aabe8798edcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9972ffd2-82f4-460a-b701-97566a69b6fc/9972ffd2-82f4-460a-b701-97566a69b6fc.crl

            X509v3 Authority Key Identifier:
                keyid:68:1A:08:2A:B7:E1:29:36:2F:46:6D:34:00:63:1C:1B:BD:83:3D:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9972ffd2-82f4-460a-b701-97566a69b6fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.86.0.0/17
                  146.86.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:30:67:c7:24:c7:f0:68:e2:aa:3e:35:e4:e0:15:82:3c:09:
         0b:3a:ee:84:47:7a:8c:96:e5:42:04:61:96:f4:44:13:07:6c:
         87:8a:b3:cd:df:07:3e:06:36:a9:98:a8:b5:0e:fb:ec:a5:b9:
         60:09:e4:17:38:bf:ae:0b:9b:1c:6a:e8:9c:e3:6c:9d:88:a6:
         48:89:5f:31:be:ef:7a:b4:5f:98:96:d9:d1:13:ac:6e:04:62:
         19:ed:b4:6b:99:33:a3:13:62:b0:cd:33:15:6a:b3:60:ba:99:
         79:38:7d:2e:ec:a0:80:93:60:6b:e6:bd:dd:46:81:66:d9:5f:
         1c:7b:6c:49:38:8f:3d:64:11:fc:0f:65:12:32:0c:04:26:32:
         85:61:59:4f:b3:94:65:13:b3:89:9a:f2:af:23:80:40:a9:0a:
         bd:78:d3:e6:25:e9:8b:aa:c3:90:f5:d1:7b:c5:33:4d:0c:d7:
         47:2f:fe:71:72:95:91:f9:31:c1:80:96:12:ed:83:e1:59:2a:
         34:d1:d3:bf:56:a3:6d:46:38:60:2d:a1:52:55:bf:67:d6:28:
         f3:f2:4e:50:9d:bd:fe:2c:b9:8a:23:05:0a:6f:ba:1b:81:cf:
         80:cf:71:93:a3:8b:1c:26:dd:7d:fe:f0:78:df:73:2c:14:de:
         cd:96:97:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 08:18:01 2026 by rpki-client