Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ad37f580-af04-3fed-aed2-315791687392.roa
File:                     ad37f580-af04-3fed-aed2-315791687392.roa (raw, json)
Hash identifier:          IbjDsaQ44GHkiAGSBpqH1BeXHyMOOVe8Y3wXC3ddSu0=
Subject key identifier:   5C:5D:6F:AD:D7:E8:79:E8:36:45:EA:27:2A:B7:78:E7:6D:A1:87:5C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D5FB233B8B985813E1A306680
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ad37f580-af04-3fed-aed2-315791687392.roa
Signing time:             Thu 02 Apr 2026 14:42:25 +0000
ROA not before:           Thu 02 Apr 2026 14:42:25 +0000
ROA not after:            Wed 01 Jul 2026 14:42:25 +0000
asID:                     396982
IP address blocks:        146.148.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:b2:33:b8:b9:85:81:3e:1a:30:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr  2 14:42:25 2026 GMT
            Not After : Jul  1 14:42:25 2026 GMT
        Subject: CN=b4084704-6431-4ea4-a5b9-3a6b81c318c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fe:c5:3e:d0:04:7e:f0:27:a8:4f:65:51:8a:
                    60:36:e0:85:1e:f3:7e:86:3d:19:12:99:62:33:f7:
                    35:73:c1:ba:ae:fd:6c:53:42:cf:ac:e1:03:f3:2c:
                    6d:0e:f3:6c:88:9c:09:c4:8f:4a:84:f6:76:3b:6e:
                    b6:47:27:03:44:36:cc:d7:d3:35:f0:d6:ae:8d:a5:
                    75:7a:9e:dc:31:da:1e:35:c6:8a:97:1a:64:b0:b4:
                    f7:2e:0e:16:c1:a4:b3:51:c9:45:7a:d8:c5:df:dd:
                    9b:f5:d5:13:5e:36:63:81:1b:db:a8:30:22:1b:b8:
                    ec:ae:15:04:cf:0f:cf:20:bf:83:20:79:63:1e:a6:
                    5e:77:77:df:eb:58:25:ed:a1:f3:d3:0e:dd:56:19:
                    bf:13:2d:0e:38:51:6d:dd:51:81:83:ef:93:19:e4:
                    3f:47:b9:5a:fc:87:ff:17:f0:05:40:9b:15:b3:9e:
                    0b:e6:7e:d7:19:d8:56:d0:f5:fd:34:b0:d6:94:d3:
                    7d:6a:e8:8f:c5:c1:e9:5c:9d:d6:89:fe:89:c1:97:
                    80:e4:57:fb:bd:9a:04:6a:48:2e:d6:83:25:8f:dc:
                    53:bf:9b:a3:ce:4f:dc:75:e0:2b:8f:ad:8d:09:dd:
                    f1:0b:5c:72:fd:a0:e5:74:8f:2c:fc:f1:64:35:14:
                    47:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:5D:6F:AD:D7:E8:79:E8:36:45:EA:27:2A:B7:78:E7:6D:A1:87:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ad37f580-af04-3fed-aed2-315791687392.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.148.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:d1:51:56:0b:0f:28:a8:63:b5:8d:49:41:44:a0:6d:4c:73:
         3a:be:1d:04:c9:00:0e:92:05:26:e3:39:d6:cd:ff:38:d1:f8:
         65:42:6c:6f:16:ad:e3:78:59:12:b1:5c:af:a7:7b:ed:63:31:
         93:10:4e:b7:c5:f6:11:a9:9f:ec:3a:c1:2c:c7:b3:79:c6:94:
         f3:84:48:1c:31:23:75:94:12:48:3b:af:c7:63:85:c0:d1:39:
         fe:30:8b:72:9d:2b:b7:f1:14:5f:d6:1c:27:3c:10:d9:e8:10:
         89:31:2e:6c:64:11:09:64:be:93:a1:89:74:c5:b4:13:2d:1b:
         30:35:4a:03:45:dd:71:c2:21:0e:27:88:70:6b:1f:d0:d5:48:
         43:a5:f0:c8:07:df:53:0c:d2:01:b5:3f:1a:7a:4a:14:a8:ab:
         d1:7d:c5:00:57:e0:7f:8e:26:4c:c8:f9:c3:6d:a8:5d:e0:1e:
         e8:cb:e3:c2:8e:be:a9:8b:af:76:3e:32:6c:37:49:af:84:39:
         63:cc:55:94:71:38:71:57:e0:58:79:bd:68:b1:0f:b2:e1:b1:
         4e:f4:e4:8b:3b:75:26:1d:f9:a6:5b:01:e8:f8:61:13:f9:3a:
         4d:6c:00:17:44:5f:cf:b6:ec:fb:57:12:9c:15:6b:1e:5f:16:
         62:af:58:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 18:57:08 2026 by rpki-client