Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18205b44-1c26-4889-9950-57a29dee3d86/7be45040-ce46-3d28-ad0e-4cdf71c5e164.roa
File:                     7be45040-ce46-3d28-ad0e-4cdf71c5e164.roa (raw, json)
Hash identifier:          haRy9WRWGXEBHKR9B5GbBhmSIvYtPhLUYfRA3ZXXWC8=
Subject key identifier:   87:F6:A4:65:1A:A3:03:CD:C8:B9:95:90:F0:D9:28:3E:05:AA:5C:2F
Certificate issuer:       /CN=18205b44-1c26-4889-9950-57a29dee3d86
Certificate serial:       010D0C9F4328584F66C2C9FA04D5D3156533B000
Authority key identifier: 62:88:98:D6:5D:1A:C4:47:BF:D9:B4:80:1F:86:BA:D8:FD:33:7E:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18205b44-1c26-4889-9950-57a29dee3d86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18205b44-1c26-4889-9950-57a29dee3d86/7be45040-ce46-3d28-ad0e-4cdf71c5e164.roa
Signing time:             Mon 05 Oct 2026 13:00:13 +0000
ROA not before:           Mon 05 Oct 2026 13:00:13 +0000
ROA not after:            Sun 03 Jan 2027 14:00:13 +0000
asID:                     174
IP address blocks:        131.143.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18205b44-1c26-4889-9950-57a29dee3d86/18205b44-1c26-4889-9950-57a29dee3d86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18205b44-1c26-4889-9950-57a29dee3d86/18205b44-1c26-4889-9950-57a29dee3d86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18205b44-1c26-4889-9950-57a29dee3d86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:c2:c9:fa:04:d5:d3:15:65:33:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18205b44-1c26-4889-9950-57a29dee3d86
        Validity
            Not Before: Oct  5 13:00:13 2026 GMT
            Not After : Jan  3 14:00:13 2027 GMT
        Subject: CN=c22c68d2-a8ba-4014-8812-0131205902fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:db:64:ff:57:f0:e7:e3:ee:8e:ca:e2:55:99:
                    0d:13:34:22:e7:1d:63:53:3b:4a:11:14:af:4f:a0:
                    30:eb:44:28:73:aa:5a:93:de:c2:c1:b9:ef:b7:4d:
                    6f:1f:68:03:0c:e1:00:8a:68:e3:db:fe:ac:37:49:
                    28:98:1b:0d:a8:7a:97:70:ec:82:60:8e:93:92:5b:
                    05:bc:3d:9e:95:a2:98:37:14:0f:cf:86:11:30:a4:
                    56:73:dd:7c:2c:ae:46:0b:b0:cf:24:25:7e:97:0e:
                    f9:1f:99:85:d5:f9:ed:af:8b:3b:63:05:82:3f:dc:
                    81:86:6b:ca:c4:a2:04:26:5b:0c:3f:13:aa:2e:8c:
                    52:89:a7:fd:3a:dc:6c:81:16:ae:f2:a9:64:55:75:
                    c8:8f:10:13:77:bb:08:95:c5:75:3c:b3:80:4a:20:
                    78:2f:3d:2b:e1:d0:d3:94:39:a5:39:37:16:83:d0:
                    1f:13:45:17:10:40:e9:f0:87:84:f1:73:a2:fd:ba:
                    dd:f8:ba:10:29:24:00:e0:dd:dc:a1:7c:14:8a:08:
                    84:2a:ca:cd:2d:ac:13:61:d6:50:eb:ed:40:da:82:
                    31:05:2e:78:0a:2c:d9:f7:44:25:00:96:79:ad:02:
                    11:79:1e:05:ef:42:a9:ea:3b:08:e6:b9:e4:1a:45:
                    6c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F6:A4:65:1A:A3:03:CD:C8:B9:95:90:F0:D9:28:3E:05:AA:5C:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18205b44-1c26-4889-9950-57a29dee3d86/7be45040-ce46-3d28-ad0e-4cdf71c5e164.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18205b44-1c26-4889-9950-57a29dee3d86/18205b44-1c26-4889-9950-57a29dee3d86.crl

            X509v3 Authority Key Identifier:
                keyid:62:88:98:D6:5D:1A:C4:47:BF:D9:B4:80:1F:86:BA:D8:FD:33:7E:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/18205b44-1c26-4889-9950-57a29dee3d86.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:b7:92:e4:b4:30:07:b2:3f:49:20:cf:62:b1:ff:c6:7d:8d:
         7e:ed:3e:3f:f0:15:37:41:d0:dd:fb:ea:8f:d3:07:c2:3f:3d:
         d7:64:d9:77:1b:aa:06:95:00:83:9e:51:b7:ea:0f:e5:a2:8f:
         fd:3a:64:29:91:75:8d:0b:47:c9:24:54:71:34:18:7e:9c:3a:
         4b:03:b4:32:30:72:35:9e:e2:cf:ef:e9:59:e4:e2:96:18:c2:
         21:88:1e:f2:a0:e9:a7:b6:42:80:4f:d2:92:fd:d3:44:c9:13:
         17:0c:a7:d1:25:f6:e7:7d:b4:80:27:4e:de:e3:93:37:80:c4:
         b1:1e:92:89:f4:ee:29:10:52:e2:d4:04:f3:cc:d6:2a:6e:23:
         97:24:ec:e5:d1:82:58:76:96:a9:c7:d0:2e:27:d1:ca:cc:eb:
         e6:05:0b:c8:d8:7b:43:cc:e7:ee:e5:30:6c:39:ca:0f:f1:57:
         7f:b6:0b:ca:9c:9c:08:48:3f:53:57:df:ef:8a:ce:cb:30:11:
         d7:69:e2:f7:5e:45:19:5e:fd:7f:1f:79:d2:bd:23:11:81:ce:
         ff:ba:61:df:ff:ee:30:18:29:30:da:bd:1f:a4:bf:f2:d6:cf:
         c5:d2:90:68:a0:a7:0c:4a:1e:a2:b9:7a:ce:47:4b:97:9e:88:
         78:7a:41:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:23:46 2026 by rpki-client