Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c/a9740ef0-b53c-3a3d-83e9-143a2767a8f5.roa
File:                     a9740ef0-b53c-3a3d-83e9-143a2767a8f5.roa (raw, json)
Hash identifier:          qeTg2KdbWO1CterbOVv22PtfQHlKl7edI5mNxV2+NQ8=
Subject key identifier:   B6:F4:10:3D:46:14:70:9A:69:83:10:6A:6E:F2:36:F7:C1:59:2C:C2
Certificate issuer:       /CN=c0e74f0a-989b-4956-b947-f56b9aee9d3c
Certificate serial:       010D0C9F4328584E534F35F38740DE7534FB7900
Authority key identifier: 6D:45:0D:D0:2C:FC:62:22:9E:DE:FC:F8:3B:4B:51:B6:0B:35:C7:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c/a9740ef0-b53c-3a3d-83e9-143a2767a8f5.roa
Signing time:             Sun 28 Jun 2026 21:00:11 +0000
ROA not before:           Sun 28 Jun 2026 21:00:11 +0000
ROA not after:            Sat 26 Sep 2026 21:00:11 +0000
asID:                     399468
IP address blocks:        131.143.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c/c0e74f0a-989b-4956-b947-f56b9aee9d3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c/c0e74f0a-989b-4956-b947-f56b9aee9d3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:53:4f:35:f3:87:40:de:75:34:fb:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0e74f0a-989b-4956-b947-f56b9aee9d3c
        Validity
            Not Before: Jun 28 21:00:11 2026 GMT
            Not After : Sep 26 21:00:11 2026 GMT
        Subject: CN=db36e70f-baee-461e-a38c-a9fcc9b5845a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:24:2f:fd:b6:cd:6d:ec:9a:ea:f5:6c:74:b5:
                    44:73:33:5b:61:ba:84:04:f3:ff:cb:18:5e:96:5c:
                    c0:cf:64:6e:1b:7f:49:34:98:c4:31:7e:46:05:d7:
                    c4:c0:b0:f0:b7:e5:ea:08:b6:3d:c7:87:05:78:58:
                    50:22:81:dc:84:99:57:50:92:35:d9:7b:84:ef:71:
                    83:83:31:14:b6:8d:2b:6f:02:4f:93:b3:d5:2c:c9:
                    cc:1a:e4:e6:7f:38:c5:80:95:ea:ec:6b:3f:b4:d3:
                    a5:27:f3:a8:5e:74:f6:69:42:2e:63:6f:78:1b:ce:
                    a2:e5:0b:32:50:7a:54:71:29:a8:14:b5:f1:6d:24:
                    ce:59:00:4d:a1:2b:4c:46:11:d9:d3:a4:10:f0:36:
                    d6:b7:4d:c9:31:f8:6b:78:9a:88:bf:c5:f1:f5:35:
                    64:6d:a8:3d:d9:75:42:ff:db:d2:26:68:57:34:2f:
                    24:46:e0:4d:2d:d0:2d:42:fc:df:29:7c:11:d5:cc:
                    4a:90:b0:ba:2e:c9:96:7e:8a:7f:19:d7:19:92:d8:
                    42:45:1b:d0:1b:ef:60:b0:09:60:58:cc:da:9c:db:
                    43:76:68:c9:51:b8:05:4f:a7:09:8f:ad:6f:a1:4e:
                    c0:77:64:3c:5d:72:63:59:88:16:0d:2f:ce:d7:c4:
                    6a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F4:10:3D:46:14:70:9A:69:83:10:6A:6E:F2:36:F7:C1:59:2C:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c/a9740ef0-b53c-3a3d-83e9-143a2767a8f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c/c0e74f0a-989b-4956-b947-f56b9aee9d3c.crl

            X509v3 Authority Key Identifier:
                keyid:6D:45:0D:D0:2C:FC:62:22:9E:DE:FC:F8:3B:4B:51:B6:0B:35:C7:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c0e74f0a-989b-4956-b947-f56b9aee9d3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:3b:73:77:df:c3:15:b8:ca:3b:fc:c0:e7:3e:c4:21:dc:36:
         b9:d7:06:61:a2:ff:76:e4:22:bd:98:66:c4:ae:f9:2e:49:42:
         d6:d8:36:2e:df:89:1d:ef:71:7f:ad:ff:24:7a:3b:d5:98:b0:
         07:56:af:4f:69:c3:26:08:29:50:79:f1:9d:f4:38:62:69:1f:
         03:51:9a:5d:c1:2b:fe:69:d3:66:c7:2b:96:2e:6a:f1:c1:0b:
         42:25:b7:65:b5:c1:d1:d7:6c:df:9a:18:a6:0e:8e:a3:ae:a1:
         24:41:1c:4a:21:a2:7c:a5:cf:b5:05:c5:5d:74:67:bb:9d:22:
         89:1b:97:e5:93:c6:c0:74:8e:04:92:43:fe:84:82:5d:b9:18:
         2a:77:9f:a3:f5:19:a9:e2:ea:90:dd:61:77:7e:3d:ee:02:d4:
         34:28:6d:65:75:86:77:79:e3:a8:fe:bd:8e:a3:ac:17:8a:fe:
         a4:8a:29:ae:be:01:77:f5:e4:19:69:f2:62:70:7c:d9:5c:7f:
         46:4d:cd:aa:65:73:74:8c:64:c3:c9:cc:81:3c:eb:c5:f0:f6:
         8e:1f:b7:47:da:61:28:89:2d:b9:44:7d:cf:7c:8f:e7:6b:00:
         29:49:7c:20:b7:b9:1d:9c:50:ba:2a:87:da:55:14:9c:b0:13:
         1e:dd:69:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 23:53:50 2026 by rpki-client