Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/119734ec-a725-3c00-8d22-2b32823cedd9.roa
File:                     119734ec-a725-3c00-8d22-2b32823cedd9.roa (raw, json)
Hash identifier:          +wMO/tzN8qnjwclB9v1VXoWjRZ9dpOMQ5/xrMwwQEqE=
Subject key identifier:   CF:39:D9:F4:73:D9:D9:EB:38:51:5A:E9:97:3C:2A:C0:22:B2:0C:93
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F4328584F8578706E7F016C96A7AD8320
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/119734ec-a725-3c00-8d22-2b32823cedd9.roa
Signing time:             Fri 16 Oct 2026 13:00:12 +0000
ROA not before:           Fri 16 Oct 2026 13:00:12 +0000
ROA not after:            Thu 14 Jan 2027 14:00:12 +0000
asID:                     7862
IP address blocks:        146.23.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:85:78:70:6e:7f:01:6c:96:a7:ad:83:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Oct 16 13:00:12 2026 GMT
            Not After : Jan 14 14:00:12 2027 GMT
        Subject: CN=8e54ca50-4510-462f-b5f5-c8de36c8fd20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:71:de:9a:90:6f:5e:1a:1b:20:69:c0:66:04:
                    8e:c8:97:96:78:d9:47:05:e0:48:59:12:f0:a2:0c:
                    8d:7d:0d:be:9f:9d:75:e3:21:95:f4:d1:07:86:9b:
                    53:5e:72:75:8f:bd:d6:e2:69:6a:31:cc:fd:c4:ce:
                    e2:be:48:7d:5e:85:35:d6:a3:77:4c:6d:04:e2:52:
                    3a:71:6d:0e:44:7d:07:4c:49:95:e6:81:a2:81:c7:
                    59:e0:86:46:47:13:0b:d4:ff:14:5b:7d:91:77:dd:
                    0c:b7:41:33:f7:e2:30:b4:69:b3:92:dc:0d:e2:fc:
                    35:4f:a6:5a:f9:5c:c7:88:57:55:60:34:56:c6:7c:
                    ee:86:db:7e:fb:85:6e:6b:a2:c2:21:e0:39:e4:39:
                    a7:91:f2:ff:7b:57:dc:05:3f:e4:9f:a5:54:72:e4:
                    96:cd:f3:27:8e:b9:9c:53:42:f5:f4:f7:cd:9a:f5:
                    9f:c9:3f:4a:91:19:82:d9:7f:01:56:68:71:32:1a:
                    7c:66:b5:f5:00:cb:0d:0a:f3:a4:52:3d:e5:d4:b0:
                    97:84:51:ee:45:00:02:75:1d:fb:92:88:d9:d9:ca:
                    a6:e2:3a:fe:a9:94:4a:da:4f:10:35:1e:45:46:14:
                    16:bc:d9:7b:cc:41:95:15:6a:94:c4:6a:15:c4:5c:
                    26:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:39:D9:F4:73:D9:D9:EB:38:51:5A:E9:97:3C:2A:C0:22:B2:0C:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/119734ec-a725-3c00-8d22-2b32823cedd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:2c:c9:20:a4:da:05:73:47:2b:fe:4a:af:00:e7:a1:90:08:
         d6:aa:4a:02:41:bf:7c:d7:29:84:5d:d9:4e:6d:43:77:67:71:
         11:ec:0f:f1:a8:5d:97:43:4b:32:bf:e1:1e:4e:62:97:ee:5b:
         fd:b7:7c:e9:77:f8:92:fc:91:30:16:89:5e:6b:13:59:1e:fe:
         42:0c:1f:f0:33:2f:a6:80:7b:98:66:f6:8e:42:fc:d9:3b:63:
         8d:46:ec:ba:24:df:1d:9d:71:25:1f:ca:69:91:06:86:e2:d2:
         e5:29:da:00:83:6c:c1:88:ac:59:ea:6a:08:b1:45:fd:35:12:
         6a:03:99:3b:2b:bc:c1:c3:3f:13:29:39:a9:33:07:25:6c:e7:
         6c:a0:ca:28:9b:50:b0:88:dd:f0:f0:bf:88:1f:0a:b4:eb:4e:
         f8:9e:f5:06:96:ba:b2:a6:91:e7:6a:a6:4e:0f:56:1e:e0:9b:
         c4:f6:84:b0:66:67:7b:7b:b9:1a:bb:90:53:95:b6:3d:04:da:
         bc:e0:5b:57:a8:6c:ca:10:b1:ef:78:ac:07:9a:1f:49:f2:2e:
         43:ac:01:85:3b:e7:26:f3:21:0d:22:ed:c4:c0:54:58:43:43:
         88:9a:c8:49:cc:82:e3:4e:a8:7e:e1:d1:22:8d:e6:df:f6:3d:
         b5:13:d6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:07:23 2026 by rpki-client