Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/018f0304-387a-4819-8fa5-ca228a4ecf70/4b577272-57d8-3c62-8756-461fd87cbaf9.roa
File:                     4b577272-57d8-3c62-8756-461fd87cbaf9.roa (raw, json)
Hash identifier:          bQLkpmdRsl7+1RqBzl1BTF8MvMyV+5X1SoJw9RtMuuc=
Subject key identifier:   94:29:5B:22:8A:17:FF:CE:A0:D3:AE:C5:6F:E8:CC:4B:05:DD:50:58
Certificate issuer:       /CN=018f0304-387a-4819-8fa5-ca228a4ecf70
Certificate serial:       010D0C9F4328584D624A60030E644DF5EF0A1BC0
Authority key identifier: FF:A6:A3:E9:42:08:B9:1C:5C:AE:1B:B7:6E:BA:9A:2B:0A:41:57:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/018f0304-387a-4819-8fa5-ca228a4ecf70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/018f0304-387a-4819-8fa5-ca228a4ecf70/4b577272-57d8-3c62-8756-461fd87cbaf9.roa
Signing time:             Fri 03 Apr 2026 13:00:30 +0000
ROA not before:           Fri 03 Apr 2026 13:00:30 +0000
ROA not after:            Thu 02 Jul 2026 13:00:30 +0000
asID:                     29838
IP address blocks:        142.248.239.0/24 maxlen: 24
                          2602:f78f::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/018f0304-387a-4819-8fa5-ca228a4ecf70/018f0304-387a-4819-8fa5-ca228a4ecf70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/018f0304-387a-4819-8fa5-ca228a4ecf70/018f0304-387a-4819-8fa5-ca228a4ecf70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/018f0304-387a-4819-8fa5-ca228a4ecf70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:4a:60:03:0e:64:4d:f5:ef:0a:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=018f0304-387a-4819-8fa5-ca228a4ecf70
        Validity
            Not Before: Apr  3 13:00:30 2026 GMT
            Not After : Jul  2 13:00:30 2026 GMT
        Subject: CN=8e59c880-328d-46ac-822e-b4ec01a425af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ab:8e:d2:ac:33:25:ab:21:9f:e9:12:a4:b6:
                    32:ec:49:5c:2c:6d:00:e6:d0:b2:c1:b5:a7:a3:ab:
                    23:2f:9d:6c:52:a7:8f:8d:99:a1:b0:b8:78:ff:60:
                    fe:e9:38:0f:17:d1:d4:5e:50:40:36:d9:ee:77:7f:
                    9a:8a:f4:7d:af:05:6a:0d:4a:a0:2c:0c:10:fa:db:
                    b9:39:9e:63:19:b5:5a:8f:9f:47:3c:b3:d6:de:f8:
                    35:cf:93:63:6d:f8:11:95:56:d4:26:08:a0:2e:6d:
                    58:cf:51:e9:75:ad:0a:49:b5:4e:d9:12:dc:9e:2e:
                    90:da:71:9e:72:0f:42:ef:83:56:c4:fa:06:76:8c:
                    ee:27:8c:09:12:be:d9:45:c8:e4:d9:c0:8a:ec:11:
                    24:4e:b6:91:07:5c:65:e9:52:2f:39:f4:49:8f:be:
                    d3:2f:d2:bf:19:7d:3d:7b:30:a1:ec:1b:4e:e5:bf:
                    13:7e:0d:d0:b8:52:87:f0:d4:fa:0d:ac:4a:7c:14:
                    f1:45:39:4d:97:dc:7b:99:20:9a:80:2f:f8:74:90:
                    db:44:80:28:bb:7c:98:75:00:0b:81:94:5a:66:a0:
                    76:ab:11:c1:87:96:8b:0f:db:55:13:cf:60:bc:b9:
                    8f:f8:0e:23:aa:74:9b:d2:5f:3f:8e:39:00:76:81:
                    72:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:29:5B:22:8A:17:FF:CE:A0:D3:AE:C5:6F:E8:CC:4B:05:DD:50:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/018f0304-387a-4819-8fa5-ca228a4ecf70/4b577272-57d8-3c62-8756-461fd87cbaf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/018f0304-387a-4819-8fa5-ca228a4ecf70/018f0304-387a-4819-8fa5-ca228a4ecf70.crl

            X509v3 Authority Key Identifier:
                keyid:FF:A6:A3:E9:42:08:B9:1C:5C:AE:1B:B7:6E:BA:9A:2B:0A:41:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/018f0304-387a-4819-8fa5-ca228a4ecf70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.239.0/24
                IPv6:
                  2602:f78f::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:7c:96:c1:77:06:c1:3a:be:f1:61:c9:2a:0a:f7:fb:ba:3e:
         e6:7e:c3:a2:0b:66:ae:09:f3:25:5a:9e:e0:0a:fb:95:a8:76:
         2d:e8:fd:9a:58:9f:6f:d1:38:b2:0c:52:3b:7e:0f:96:ef:cd:
         2d:33:40:e5:e0:f4:63:8f:e6:49:df:3a:f2:c4:2d:fd:5d:2e:
         80:cd:42:68:1d:dc:32:19:32:41:8b:da:db:1c:cb:d6:c0:04:
         ea:09:54:d0:42:54:06:37:28:04:98:30:e8:3c:a1:38:6e:07:
         4a:75:9c:ba:67:58:8f:62:e1:cf:d9:28:67:c5:2d:2b:bb:72:
         1f:c8:87:cb:d7:73:de:3b:f8:f8:82:79:4f:3e:2b:37:a5:3e:
         43:fa:ad:ee:0b:93:f4:bb:d8:49:35:69:21:b6:ec:1c:62:53:
         38:9a:96:88:d0:e1:7c:3c:28:73:4d:8d:96:11:e4:b0:eb:17:
         68:b6:a0:d2:b5:bd:9e:a5:c2:2c:a6:68:02:4c:db:e1:12:6a:
         66:bc:67:6c:3b:95:58:f1:0b:9a:d3:43:03:e2:75:3d:1d:79:
         0e:f9:66:e6:93:41:5b:da:7e:11:e1:34:b4:b9:df:f5:f6:41:
         bb:93:33:b7:4d:f0:0f:bd:0d:0f:d0:b2:96:6d:08:21:5d:d8:
         16:73:0e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:10:13 2026 by rpki-client