Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/4c64440a-2235-3072-b0f7-3fcb1b997b67.roa
File:                     4c64440a-2235-3072-b0f7-3fcb1b997b67.roa (raw, json)
Hash identifier:          xQlAsN0hLI5Fp5VgJHTrKOJqpKl92w/F3DfwOB/sNeE=
Subject key identifier:   3E:6D:9D:0D:19:64:07:09:72:54:D6:83:46:CB:C1:5C:47:11:1E:EB
Certificate issuer:       /CN=a7804dec-fd00-426f-bba4-038d9b753fc5
Certificate serial:       010D0C9F4328584DF4DBA606AF9BE6365C96FA80
Authority key identifier: 68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/4c64440a-2235-3072-b0f7-3fcb1b997b67.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     40124
IP address blocks:        142.249.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:a6:06:af:9b:e6:36:5c:96:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7804dec-fd00-426f-bba4-038d9b753fc5
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=419ee7d3-2bda-4c07-9d06-2ebff483b714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:97:70:ba:0c:ce:9d:49:5d:e1:2d:67:13:f4:
                    2d:cc:e4:0e:90:27:23:4d:a9:71:e4:2a:d7:22:d4:
                    ad:87:3a:25:00:1d:0c:bf:70:fe:8b:46:5e:cc:55:
                    63:d9:b8:f2:2e:15:23:c3:41:e9:60:ca:f4:9c:fb:
                    b9:2a:a5:36:45:ca:aa:3e:d0:0d:58:88:b0:52:49:
                    ae:44:84:21:ea:08:bc:71:1c:95:84:43:75:87:35:
                    41:54:95:52:9b:57:42:b4:e3:d6:58:24:64:b2:22:
                    cb:5e:96:d7:99:22:08:08:17:4b:5a:f8:35:54:f4:
                    fe:dd:15:64:4d:80:a4:3e:41:8f:d3:6d:21:c6:12:
                    f4:15:bf:55:21:2c:dc:b1:f4:a2:6b:62:a6:bf:48:
                    22:06:b5:34:65:aa:89:07:be:d7:1d:00:b9:a0:aa:
                    9b:30:1e:7c:70:f7:2e:47:03:27:77:ad:e4:f9:78:
                    f9:a4:f2:2e:83:40:6a:1c:a1:63:61:5b:ce:3b:83:
                    6e:67:30:7a:e8:d4:a3:87:e0:77:eb:68:f7:53:49:
                    97:cf:c1:8d:84:63:b3:02:cc:e8:07:86:d8:58:71:
                    22:81:57:29:3f:03:f5:87:dc:3d:ad:99:96:da:ae:
                    d0:70:3b:49:65:3f:b6:b5:35:95:e3:e1:ce:01:6c:
                    56:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6D:9D:0D:19:64:07:09:72:54:D6:83:46:CB:C1:5C:47:11:1E:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/4c64440a-2235-3072-b0f7-3fcb1b997b67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl

            X509v3 Authority Key Identifier:
                keyid:68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:72:55:a3:1c:89:69:21:52:58:4e:ec:fb:fb:51:6c:d4:4b:
         39:0b:f9:98:64:3c:3c:dd:7a:34:96:25:22:31:3d:0c:15:14:
         8d:c7:8b:37:88:84:d2:e4:f0:8a:b3:65:cf:17:68:3a:1a:99:
         45:8f:b9:7c:a9:f9:fb:b5:ef:9d:82:2a:fc:4c:19:f8:7a:2d:
         2c:4b:d1:53:86:63:e7:39:b0:a6:70:53:52:7b:43:12:6f:69:
         85:ea:94:bd:5f:af:86:dc:d7:69:20:95:dc:a1:79:a0:33:59:
         a9:94:6a:da:14:7c:ae:cb:bc:cd:88:fc:29:fc:fa:ce:3d:3b:
         da:74:7c:68:37:d1:cd:b1:f5:98:81:1a:fa:f0:a5:71:de:2b:
         23:00:ab:35:74:4f:39:e7:4f:c1:c2:a5:65:4e:ff:5f:6d:73:
         7f:e0:89:9a:a0:e6:36:8e:b7:db:8e:e7:d0:5c:09:e4:51:70:
         c5:29:e4:7d:cd:1c:5d:16:e3:f4:fc:44:ae:37:82:bb:90:af:
         6f:f9:3e:0b:45:59:82:50:87:fa:76:d5:23:14:3f:bc:c4:75:
         87:4b:d1:67:9c:20:57:8e:e9:52:fa:34:0f:05:f4:ec:02:fa:
         1d:37:1c:9e:b5:3b:11:b9:31:4e:eb:e4:ac:13:ce:b3:3d:97:
         74:c4:3a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:56:17 2026 by rpki-client