Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c/00ae5caa-538c-3bb9-8d4d-b94809a3f879.roa
File:                     00ae5caa-538c-3bb9-8d4d-b94809a3f879.roa (raw, json)
Hash identifier:          pekojl4thuJ4JJdBVF3UcjoY2Xgnna9GauyotpGNKSg=
Subject key identifier:   6D:6B:07:05:51:75:25:90:73:74:18:16:68:78:05:BC:14:27:19:E2
Certificate issuer:       /CN=4e639667-2398-443b-9142-a0e6c46a369c
Certificate serial:       010D0C9F4328584D0BBE5F1ED259F82B90535D80
Authority key identifier: 84:60:F4:8A:A2:5B:9D:7A:19:4C:69:5E:AE:DA:AC:EF:62:F8:81:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c/00ae5caa-538c-3bb9-8d4d-b94809a3f879.roa
Signing time:             Tue 03 Mar 2026 12:59:03 +0000
ROA not before:           Tue 03 Mar 2026 12:59:03 +0000
ROA not after:            Mon 01 Jun 2026 11:59:03 +0000
asID:                     19695
IP address blocks:        142.248.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c/4e639667-2398-443b-9142-a0e6c46a369c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c/4e639667-2398-443b-9142-a0e6c46a369c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0b:be:5f:1e:d2:59:f8:2b:90:53:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e639667-2398-443b-9142-a0e6c46a369c
        Validity
            Not Before: Mar  3 12:59:03 2026 GMT
            Not After : Jun  1 11:59:03 2026 GMT
        Subject: CN=0c3a3f75-92ac-4841-8c87-982a617253cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:56:59:33:e8:33:e1:75:d3:0a:be:14:6a:ae:
                    10:8d:7e:01:ee:ea:36:db:9e:75:eb:97:66:60:43:
                    02:95:ed:08:3f:ba:47:5b:cd:2a:06:7e:dd:c6:15:
                    f6:c4:82:0f:b0:7d:51:ec:9e:fc:43:42:de:c7:e8:
                    a0:21:12:a9:8b:a7:c2:f4:d5:d1:34:a1:ab:0f:0f:
                    8b:4c:a4:30:b0:41:d2:ee:fc:63:8b:b7:5e:81:f3:
                    c7:04:97:44:88:cc:16:c1:10:c2:9a:56:15:ed:2a:
                    19:7b:64:1f:e3:bb:1c:4f:1e:2a:a1:6c:70:bb:32:
                    05:0e:df:a7:09:e7:4f:b6:70:95:4a:d1:ea:1f:8d:
                    46:16:60:1f:76:0c:6a:6a:ba:03:6b:a7:ff:be:37:
                    f7:77:3f:29:20:58:34:b7:56:ee:2a:5e:15:fd:4e:
                    3e:f8:93:4c:aa:05:ae:1b:23:38:7b:91:07:97:f8:
                    82:c0:9e:de:05:79:72:d8:85:4a:ec:5a:71:fd:d8:
                    7c:91:30:6d:9c:42:df:86:02:90:58:a4:98:ab:a6:
                    1f:9b:3b:4a:64:67:fe:42:36:fa:06:9d:38:15:8b:
                    e6:08:0d:29:0f:43:23:9f:b2:d2:3d:44:a6:76:19:
                    ba:89:3e:e8:43:35:c5:6e:30:f8:f3:c3:66:45:94:
                    0a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6B:07:05:51:75:25:90:73:74:18:16:68:78:05:BC:14:27:19:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c/00ae5caa-538c-3bb9-8d4d-b94809a3f879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c/4e639667-2398-443b-9142-a0e6c46a369c.crl

            X509v3 Authority Key Identifier:
                keyid:84:60:F4:8A:A2:5B:9D:7A:19:4C:69:5E:AE:DA:AC:EF:62:F8:81:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4e639667-2398-443b-9142-a0e6c46a369c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:ce:41:af:d4:37:b5:b7:30:a2:8a:a3:47:de:58:3a:f5:df:
         65:37:f0:93:e5:db:85:73:3c:90:d6:c0:a1:56:45:4d:98:ab:
         a4:e4:40:c8:a5:3e:e0:6d:e9:6e:c0:8e:31:45:a8:8b:fa:66:
         53:1a:1f:45:1e:9f:70:f2:f4:7e:c0:f9:c3:84:6c:a6:8c:0c:
         d5:35:2e:d3:ec:96:91:75:2e:3c:8b:1d:bf:6b:52:cb:f0:14:
         0f:19:6e:39:9d:8e:21:e8:4a:c2:73:a1:69:57:19:1d:52:c6:
         ce:4b:51:cd:b4:43:4a:60:8b:b5:89:37:1d:33:d4:b1:ca:c8:
         8c:ee:d9:c6:25:03:08:26:31:c2:48:ad:32:99:63:eb:48:22:
         ed:c2:71:9e:1d:60:a5:57:7e:37:e3:a7:7a:65:21:45:f7:82:
         3f:4c:42:22:8c:ce:74:b3:e4:d6:6f:42:fb:35:a2:5d:7a:56:
         30:f8:ce:64:c3:c9:2d:c5:6f:4d:33:5f:5b:62:4f:ef:49:de:
         74:0f:e0:9c:63:a5:9d:1c:a4:60:81:e6:19:3f:d9:0e:37:45:
         29:70:e5:05:15:30:32:74:1b:d5:7a:9b:25:a8:bf:9f:9e:db:
         4f:90:a4:d0:c9:f0:8b:3b:85:4c:99:31:d7:0b:e5:84:09:f3:
         60:1f:d6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 05:05:33 2026 by rpki-client