Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/65b83426-ac91-3f34-b308-4fce4d1b3e96.roa
File:                     65b83426-ac91-3f34-b308-4fce4d1b3e96.roa (raw, json)
Hash identifier:          NIq/y9JACs2xA1SmUBCe0HxqGNJd5IFweYl9SYfppks=
Subject key identifier:   52:37:9E:CF:8E:DA:ED:F6:EA:44:6B:E5:C6:80:2B:60:EF:E1:B5:7F
Certificate issuer:       /CN=719038d9-6923-4e29-8b36-f45b06ce12f8
Certificate serial:       010D0C9F4328584C9C31A8B333842650AFB805AC
Authority key identifier: 77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/65b83426-ac91-3f34-b308-4fce4d1b3e96.roa
Signing time:             Thu 22 Jan 2026 14:00:37 +0000
ROA not before:           Thu 22 Jan 2026 14:00:37 +0000
ROA not after:            Wed 22 Apr 2026 13:00:37 +0000
asID:                     393238
IP address blocks:        142.204.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:9c:31:a8:b3:33:84:26:50:af:b8:05:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=719038d9-6923-4e29-8b36-f45b06ce12f8
        Validity
            Not Before: Jan 22 14:00:37 2026 GMT
            Not After : Apr 22 13:00:37 2026 GMT
        Subject: CN=ba570add-3d9c-4626-a1ee-52de7b93a397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b6:b3:88:4f:00:65:d4:56:ec:f3:e4:60:85:
                    0d:39:75:1b:0a:b7:cd:ca:01:f8:27:2e:05:66:60:
                    64:a7:3d:33:a9:41:a0:9c:38:4a:34:18:5f:76:0b:
                    eb:31:96:82:ad:3d:f1:5f:13:95:a1:47:72:68:41:
                    1d:4c:2c:21:03:6a:28:78:95:7e:38:3f:8b:79:3a:
                    8a:60:68:88:0f:aa:27:0d:40:54:85:50:6a:51:80:
                    3a:22:6b:71:18:97:8d:1b:9e:dd:74:c9:f3:aa:7b:
                    ac:8d:fa:27:ef:e9:29:18:bc:6b:c0:33:3d:b0:7d:
                    37:ec:3c:0d:33:81:28:45:14:b5:9d:70:a5:c4:c6:
                    1f:a2:f2:34:28:c5:10:90:08:a0:cc:06:f7:4e:ee:
                    9d:99:14:36:c6:74:cc:3d:e5:35:69:ad:46:08:82:
                    3e:da:8e:bb:0e:e2:1d:63:5e:9c:48:bd:e1:60:f7:
                    4d:19:ec:ec:a2:e1:40:4e:2e:cc:8d:96:dd:ff:5c:
                    a2:a6:7c:57:d2:c3:97:53:e8:41:e4:ec:2b:ac:f0:
                    fe:8c:de:f2:fe:a7:70:b3:56:34:16:0f:a2:de:f6:
                    af:8e:6e:58:9f:9d:0c:33:6a:1c:fc:7a:70:fd:86:
                    0d:b1:f5:9c:2f:39:04:7b:41:78:ea:35:f0:dc:69:
                    f0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:37:9E:CF:8E:DA:ED:F6:EA:44:6B:E5:C6:80:2B:60:EF:E1:B5:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/65b83426-ac91-3f34-b308-4fce4d1b3e96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.crl

            X509v3 Authority Key Identifier:
                keyid:77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.204.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:a4:62:92:69:d4:35:e5:ef:d8:ea:e2:fc:5a:2a:cc:23:7f:
         44:a2:97:d9:c9:1b:4d:a8:24:c2:66:25:9d:dc:16:13:d2:40:
         e6:f6:e5:af:c5:6f:ac:16:d7:4e:25:e1:14:cb:b1:66:97:30:
         97:c0:7d:69:fa:fc:b7:93:2f:ad:46:c5:f5:87:86:d9:2d:0f:
         eb:48:18:cf:38:0d:80:0c:cb:47:a0:f2:5e:7e:6b:fb:1b:00:
         87:9f:d8:98:4e:8d:5a:7a:15:94:08:b8:36:92:10:36:f3:db:
         aa:14:21:64:d0:93:4c:7e:c9:57:42:3d:4d:38:18:ea:0c:46:
         89:41:81:19:bb:34:3b:19:16:62:8c:9a:2c:31:b1:f8:1f:d4:
         85:62:60:69:d8:ff:04:d5:4d:73:f5:21:73:35:bc:d3:0b:eb:
         d5:c5:9b:2f:db:83:ab:6b:7a:bf:15:2d:cd:5b:2b:d2:76:1c:
         85:01:7a:ff:2b:30:4e:65:8f:fb:01:cb:36:c0:cc:c1:04:3d:
         03:22:dc:dc:4a:39:4e:1c:58:06:ba:09:3e:38:ae:36:b2:35:
         65:a7:00:5c:4f:db:99:9c:cd:dc:66:f2:a7:db:c6:dc:f9:64:
         c4:af:74:a2:b5:1d:b0:a5:9c:70:2d:dc:1c:2f:b4:d3:ef:ee:
         f4:bd:33:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:28:58 2026 by rpki-client