Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/cfa9268d-50e6-3e9b-a249-1910607c366e.roa
File:                     cfa9268d-50e6-3e9b-a249-1910607c366e.roa (raw, json)
Hash identifier:          yTl7UGFgc7CJVdVFNqw4qhdtgvEeYRm+EoHnXdYnXeg=
Subject key identifier:   FE:95:30:C5:90:B2:62:75:FA:42:49:5C:90:C3:24:BF:E3:38:87:2A
Certificate issuer:       /CN=093d143f-009a-4f7c-beb4-ce9c73352417
Certificate serial:       010D0C9F4328584D55CFC7427CE1749651EC5B80
Authority key identifier: C3:0A:EC:72:62:13:1C:C8:8E:82:E5:2F:43:B6:2F:EA:8A:4B:DE:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/cfa9268d-50e6-3e9b-a249-1910607c366e.roa
Signing time:             Mon 30 Mar 2026 01:43:56 +0000
ROA not before:           Mon 30 Mar 2026 01:43:56 +0000
ROA not after:            Wed 29 Apr 2026 13:00:40 +0000
asID:                     33755
IP address blocks:        23.164.56.0/24 maxlen: 24
                          23.164.57.0/24 maxlen: 24
                          149.112.61.0/24 maxlen: 24
                          192.100.5.0/24 maxlen: 24
                          2602:f974::/36 maxlen: 36
                          2602:f974:2a::/48 maxlen: 48
                          2602:f974:2b::/48 maxlen: 48
                          2602:f974:2c::/48 maxlen: 48
                          2602:f974:2d::/48 maxlen: 48
                          2602:f974:2e::/48 maxlen: 48
                          2602:f974:2f::/48 maxlen: 48
                          2602:f974:3a::/48 maxlen: 48
                          2602:f974:3b::/48 maxlen: 48
                          2602:f974:3c::/48 maxlen: 48
                          2602:f974:900::/48 maxlen: 48
                          2602:f974:fff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/093d143f-009a-4f7c-beb4-ce9c73352417.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/093d143f-009a-4f7c-beb4-ce9c73352417.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:cf:c7:42:7c:e1:74:96:51:ec:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=093d143f-009a-4f7c-beb4-ce9c73352417
        Validity
            Not Before: Mar 30 01:43:56 2026 GMT
            Not After : Apr 29 13:00:40 2026 GMT
        Subject: CN=7e92976b-91e3-4349-b9f2-3e3797693af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d9:d7:4b:82:09:05:9f:bd:d4:22:1e:63:eb:
                    1b:56:9f:9a:62:b5:1c:69:64:d7:92:58:48:02:84:
                    6d:e1:df:eb:ea:39:ce:7d:09:2e:88:e5:ca:29:92:
                    2f:7c:e7:60:91:9c:6f:24:cd:47:47:60:0d:4b:b3:
                    ee:92:d9:22:77:27:58:15:bb:8c:77:2e:79:b8:42:
                    90:76:2e:1e:75:cb:c5:7f:52:8a:e7:4d:f5:cc:e7:
                    85:57:a2:ad:6f:98:4d:d1:c2:e3:d0:a7:56:48:c9:
                    bc:38:3f:c5:01:ef:56:82:d9:2a:3d:3c:12:9b:ef:
                    15:f3:18:4c:45:70:0b:f8:6e:8a:a6:52:f3:2b:af:
                    fd:a6:33:66:32:cf:ba:9e:ac:42:bc:54:7e:8e:aa:
                    a4:55:e2:ab:94:7f:ef:a9:8e:c1:27:4a:72:30:69:
                    1b:e0:f1:fc:55:7a:68:b0:56:44:12:ff:62:c1:d6:
                    ce:8d:ed:f4:ca:f5:1d:f0:6a:23:78:de:fa:c0:ab:
                    ec:8b:4a:6a:d1:64:37:40:b1:23:4f:1c:76:3e:bc:
                    2f:78:ed:dc:7a:d5:a2:93:c1:be:98:5e:f6:e6:81:
                    53:28:11:33:d7:cc:72:8b:05:50:71:ef:95:b9:7f:
                    44:36:ec:1c:35:b0:06:b9:9f:d8:ba:4b:03:c3:63:
                    9e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:95:30:C5:90:B2:62:75:FA:42:49:5C:90:C3:24:BF:E3:38:87:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/cfa9268d-50e6-3e9b-a249-1910607c366e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417/093d143f-009a-4f7c-beb4-ce9c73352417.crl

            X509v3 Authority Key Identifier:
                keyid:C3:0A:EC:72:62:13:1C:C8:8E:82:E5:2F:43:B6:2F:EA:8A:4B:DE:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/093d143f-009a-4f7c-beb4-ce9c73352417.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.56.0/23
                  149.112.61.0/24
                  192.100.5.0/24
                IPv6:
                  2602:f974::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:71:52:8e:7f:f9:dc:d1:91:8d:9d:da:9d:4b:86:60:08:89:
         24:4a:07:84:4f:9b:ee:37:93:3f:f0:88:8d:04:2c:df:4e:34:
         aa:ee:d8:cb:05:14:30:01:20:dd:84:f5:1f:5e:f6:b3:8c:b1:
         cb:16:89:70:1f:d7:b8:90:89:1e:0b:6b:51:93:5e:82:e8:19:
         07:f4:06:20:fb:78:34:17:7b:c9:01:77:8f:69:b8:81:19:37:
         d9:75:8e:51:49:4f:40:66:34:b7:9c:d7:4b:7b:35:75:c3:87:
         38:ff:75:c3:8e:00:42:e3:27:8a:eb:e6:6e:67:ff:55:d5:2b:
         4b:18:c4:ca:4b:3f:4c:87:12:7e:91:2f:da:09:cb:a7:82:c0:
         dc:8e:01:c6:39:ec:52:db:81:e9:78:84:93:f7:05:d0:06:b4:
         ca:dd:e9:dc:98:58:ba:5d:46:9a:e7:e1:af:12:5d:00:8a:86:
         ca:43:9e:f4:e2:2b:44:98:8f:37:f8:66:f9:10:31:42:54:37:
         61:0a:ba:76:7d:26:23:16:63:17:13:c4:93:40:a9:8e:6c:8d:
         92:64:ed:5c:0c:2b:df:eb:e4:e6:92:71:e0:69:81:4f:5e:b3:
         06:8d:3d:ec:33:65:0b:eb:70:6d:7d:4f:d7:e5:80:9d:c5:e5:
         55:5d:4b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 01:12:12 2026 by rpki-client