Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/df135c7e-25c6-3136-a764-9f5d5eff4170.roa
File:                     df135c7e-25c6-3136-a764-9f5d5eff4170.roa (raw, json)
Hash identifier:          SXZrKgpSpO2pmHOsRMflH8SLR40XeKXnIUgJU1rDup0=
Subject key identifier:   4D:35:E4:99:70:C9:07:C1:94:E5:08:BD:5F:C2:9C:FA:F5:A2:9A:EA
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F4328584E7A42EE605A8D6EFB7E756E00
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/df135c7e-25c6-3136-a764-9f5d5eff4170.roa
Signing time:             Sun 12 Jul 2026 19:51:59 +0000
ROA not before:           Sun 12 Jul 2026 19:51:59 +0000
ROA not after:            Sat 10 Oct 2026 19:51:59 +0000
asID:                     400384
IP address blocks:        128.254.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:42:ee:60:5a:8d:6e:fb:7e:75:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Jul 12 19:51:59 2026 GMT
            Not After : Oct 10 19:51:59 2026 GMT
        Subject: CN=af183316-a1d2-4f05-8244-a2f3cc87f8ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cc:19:39:db:1a:38:a2:87:fd:f2:0c:41:b8:
                    03:f0:49:cd:65:d7:60:61:8f:1b:a6:52:2d:17:3f:
                    1f:6b:e1:ae:b7:89:94:cd:53:c0:d5:64:d6:6b:d6:
                    c0:27:df:2f:23:25:b1:78:9e:94:50:8e:7f:56:0e:
                    6c:91:e6:c8:e0:42:2b:ac:9e:e7:72:ea:d3:61:9d:
                    71:fa:1d:9e:75:83:f3:90:af:78:84:ab:a1:5a:6b:
                    ce:66:f3:c3:17:c1:1b:a1:71:a6:52:89:a1:fb:0a:
                    b8:b6:cc:c9:e3:22:d6:d4:f4:49:f7:95:59:3a:c1:
                    d1:a4:2f:40:d9:b8:f3:18:a8:a7:b6:8b:d3:b2:54:
                    dd:b2:1a:28:f5:82:43:d4:af:4a:a1:bb:95:6b:19:
                    56:70:38:6d:2b:17:6b:b5:4a:45:8b:de:e0:05:1d:
                    af:4b:c4:0c:8f:ae:05:e2:08:fa:d9:a8:71:44:37:
                    72:b9:55:05:c8:7c:00:c9:31:a7:69:ae:2b:03:de:
                    5d:4d:20:93:a8:be:c9:ce:9c:04:e5:ae:a0:90:a1:
                    cc:83:fa:9b:af:98:0f:f4:e9:1f:1a:08:7e:81:de:
                    c2:f2:4c:8c:90:6c:5c:8c:6e:75:eb:76:70:5e:b8:
                    82:ee:06:c6:87:57:46:b1:b9:92:39:cf:5b:db:ea:
                    be:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:35:E4:99:70:C9:07:C1:94:E5:08:BD:5F:C2:9C:FA:F5:A2:9A:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/df135c7e-25c6-3136-a764-9f5d5eff4170.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:f4:11:16:e3:f6:2c:7d:02:1a:9d:60:d2:f0:2c:56:f0:23:
         62:5d:3d:a4:59:10:60:b6:88:46:79:9a:bc:9d:c0:71:a2:89:
         84:eb:ab:a8:35:37:76:8c:8a:24:85:a5:61:e4:cd:c1:32:d9:
         15:2e:54:dc:98:86:ca:8b:fb:f6:ec:f4:88:10:b9:68:ef:c5:
         87:ed:f6:43:80:bb:7e:22:9b:d3:b6:75:f6:ae:e0:dd:f0:cf:
         fa:db:7c:e5:c0:98:cb:85:e8:25:af:57:f2:ac:65:a3:3c:a3:
         da:1f:ed:3e:bc:bc:05:83:f3:b6:09:09:1c:d1:29:99:44:aa:
         f5:9d:5c:44:76:8e:64:c2:fb:72:0d:59:4c:3d:ac:4b:3a:33:
         db:55:fe:e0:18:24:fc:64:a8:ae:1d:a9:99:de:3e:4e:24:1e:
         78:36:91:35:78:9a:19:98:fc:c2:03:9a:f7:7c:12:b8:85:7e:
         ad:82:54:47:0d:11:d3:3a:75:c6:7b:69:49:58:1b:1b:ac:a9:
         93:e1:a7:b0:7f:12:74:a1:11:10:8c:61:20:ed:92:3c:03:bd:
         ec:62:1c:74:a5:b8:5d:15:da:90:4d:52:7a:2b:fa:cb:a0:51:
         4d:4a:13:31:de:55:20:67:e4:b6:73:a0:36:5b:76:ae:cf:42:
         38:3d:ed:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:53 2026 by rpki-client