Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c/00ae5caa-538c-3bb9-8d4d-b94809a3f879.roa
File:                     00ae5caa-538c-3bb9-8d4d-b94809a3f879.roa (raw, json)
Hash identifier:          rlfDDBmXxQDD50OTr/Mf6wycip3R9IpyN+e2FSidD54=
Subject key identifier:   54:AC:B3:BF:8C:62:45:A5:C0:EA:1E:7F:47:59:DA:9C:29:5D:EB:3C
Certificate issuer:       /CN=4e639667-2398-443b-9142-a0e6c46a369c
Certificate serial:       010D0C9F4328584EA793837BF489B5A73FCE45A0
Authority key identifier: 84:60:F4:8A:A2:5B:9D:7A:19:4C:69:5E:AE:DA:AC:EF:62:F8:81:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c/00ae5caa-538c-3bb9-8d4d-b94809a3f879.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19695
IP address blocks:        142.248.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c/4e639667-2398-443b-9142-a0e6c46a369c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c/4e639667-2398-443b-9142-a0e6c46a369c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:83:7b:f4:89:b5:a7:3f:ce:45:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e639667-2398-443b-9142-a0e6c46a369c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5d7a8fa7-7ba2-4fdc-b350-5da3564b1aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cd:70:b8:1a:a9:ee:80:ab:b1:9a:c3:c8:48:
                    63:52:40:93:9c:46:1d:f2:43:94:1d:6e:6e:73:3b:
                    d9:3b:b3:7b:ba:53:52:99:06:c9:57:5d:08:9d:8b:
                    b1:8a:e3:4d:10:d8:24:4a:6f:fa:37:b8:65:a8:67:
                    6d:81:25:4d:ed:29:a5:f6:ec:ce:29:92:c0:ae:3f:
                    97:05:fb:eb:93:03:a5:eb:34:4e:3c:22:94:eb:f3:
                    58:a4:80:14:6b:9f:fc:5e:0f:f1:f0:57:40:c1:52:
                    c0:26:ef:a2:39:ed:92:86:a7:5e:d7:d1:7d:6d:13:
                    d1:e5:bb:9e:71:7e:ac:9f:14:53:1d:a3:92:d5:eb:
                    70:9e:3d:d9:3d:3d:a7:ec:f6:a7:9a:44:d3:65:71:
                    cb:8d:92:2a:0b:ec:8f:c5:fc:95:02:fa:cc:bc:6b:
                    16:28:86:84:5f:1a:40:4d:1f:9a:7a:82:19:52:43:
                    f4:b1:41:d7:57:80:a1:a1:bd:97:7d:b0:fe:4c:88:
                    01:dd:7a:54:ff:f3:fe:f2:3f:c6:36:87:17:24:4e:
                    89:22:51:c4:67:2b:b0:bc:90:dc:44:33:2e:85:4a:
                    0b:16:6e:53:d3:0f:ea:01:24:ab:11:21:02:85:e6:
                    fd:48:a5:ab:b3:c7:eb:d5:48:22:71:a4:0c:39:f2:
                    08:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AC:B3:BF:8C:62:45:A5:C0:EA:1E:7F:47:59:DA:9C:29:5D:EB:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c/00ae5caa-538c-3bb9-8d4d-b94809a3f879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c/4e639667-2398-443b-9142-a0e6c46a369c.crl

            X509v3 Authority Key Identifier:
                keyid:84:60:F4:8A:A2:5B:9D:7A:19:4C:69:5E:AE:DA:AC:EF:62:F8:81:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:70:8d:c2:81:ea:1b:a1:1d:ac:71:3c:68:24:59:31:ff:8d:
         2e:aa:a3:49:1f:70:1b:b8:be:3b:42:28:ba:ec:fe:16:fa:58:
         6a:c6:bb:68:ed:fa:21:f4:a7:75:75:47:fc:ab:a1:3d:ed:90:
         c3:30:e6:f8:d4:0b:20:64:03:27:50:d6:f4:45:21:40:d1:77:
         f7:c0:f8:13:d6:36:f1:4d:87:7e:90:34:7a:82:29:b1:db:79:
         2b:ad:13:7b:61:83:5c:be:85:4a:65:ed:d9:75:a1:df:f4:1f:
         37:c4:b1:11:34:77:9e:28:83:12:b6:5d:17:27:e1:30:ca:33:
         81:fe:d9:69:f3:b3:d1:7a:dc:89:6e:5e:92:6a:5a:43:19:6a:
         36:ed:24:f5:37:ea:5c:46:82:f8:8c:37:2e:95:a1:7c:62:95:
         8f:5c:be:8c:6f:97:80:18:5c:a0:5e:12:0f:18:6b:77:ce:5b:
         0f:aa:4a:d8:9d:62:17:f3:5b:b3:3d:d4:8c:87:ad:93:57:d1:
         bf:3f:df:1f:4c:40:1a:f6:ea:35:20:36:41:71:1d:e8:59:1c:
         5d:b1:7a:cd:23:62:9e:aa:11:6a:d5:d8:f9:17:02:b8:34:f4:
         84:1b:48:68:fc:b3:86:04:e0:3b:f8:22:d6:f8:21:8d:04:f9:
         16:b6:2f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:54:18 2026 by rpki-client