Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/733b51d1-bf92-312f-af74-c856bb2c360d.roa
File:                     733b51d1-bf92-312f-af74-c856bb2c360d.roa (raw, json)
Hash identifier:          iGQuq9537WDgiP9naKNUTTLu4w3eGOux9fMceT39tH8=
Subject key identifier:   0F:68:3B:D5:2D:E0:25:42:F9:0C:3E:55:55:FF:DB:72:93:79:60:17
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F6292BC65FE6CE04CF29AA480
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/733b51d1-bf92-312f-af74-c856bb2c360d.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     395954
IP address blocks:        142.234.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:bc:65:fe:6c:e0:4c:f2:9a:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=7d2dfb14-8180-472e-a18a-70bcd7b9471b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a8:aa:83:dd:6b:d0:1e:d5:a2:36:56:5a:c0:
                    5e:bf:de:dc:75:21:f2:ee:ca:3e:3b:91:1f:3f:b4:
                    9f:db:12:11:61:e1:3b:45:0b:cb:66:92:c1:91:94:
                    01:87:cf:10:63:06:e3:4d:89:ff:73:f3:6e:5e:26:
                    23:67:8c:98:f2:bc:61:45:6c:f5:86:47:93:33:31:
                    8a:b6:f9:01:f4:2d:28:5f:82:3d:e4:e7:cd:3b:55:
                    22:1a:21:ff:3c:5f:46:fd:d8:6f:06:e6:44:5b:d9:
                    14:b2:02:aa:1c:42:80:f8:f5:f1:cd:aa:70:f5:64:
                    46:e3:83:09:5a:62:75:f9:29:a9:d4:d9:93:97:be:
                    7a:ac:48:f5:71:49:11:18:e4:62:c1:00:39:fb:fb:
                    55:a8:93:ec:28:cb:33:23:80:74:89:ac:ac:26:b9:
                    d6:ad:94:3b:d4:05:85:9b:05:31:57:e2:3e:21:9a:
                    25:e5:ec:1c:3f:80:6f:ec:aa:90:38:f5:a5:d9:82:
                    0a:10:d0:95:74:3c:bf:33:5a:ae:54:17:10:0e:0f:
                    c4:f2:37:5e:dd:ce:f7:7c:e5:74:8b:38:af:e2:e1:
                    f6:e1:11:7d:69:af:71:1a:9b:a6:58:1f:5d:9c:99:
                    a9:b7:77:1b:4d:ea:15:c6:6b:7f:c7:ba:43:39:ae:
                    02:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:68:3B:D5:2D:E0:25:42:F9:0C:3E:55:55:FF:DB:72:93:79:60:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/733b51d1-bf92-312f-af74-c856bb2c360d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.234.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:ae:b3:bc:d7:7f:06:3d:3a:39:5c:23:84:c8:ee:c5:a1:cc:
         ff:06:51:96:48:d5:1c:f2:d4:11:52:9b:61:a2:a2:c0:73:ec:
         dc:ac:ed:68:9c:73:0a:72:5b:51:07:09:8f:b9:18:ef:85:30:
         61:3d:55:2c:ea:b1:94:1c:1f:4c:2b:58:0a:d4:cd:f5:eb:5c:
         45:25:b7:ce:fc:c9:e5:5f:93:b3:8b:9d:8e:92:33:06:1a:ef:
         4f:bf:09:aa:0f:54:e7:54:61:71:b7:e0:4d:6e:cb:56:6a:9d:
         9c:b2:2a:cd:73:70:67:5c:7b:38:a6:68:c7:dc:a6:39:a0:76:
         88:81:f2:0e:fa:ed:17:dc:dc:6e:8d:e9:7a:35:3d:49:e3:61:
         0d:5f:26:49:b5:01:2a:69:44:3a:d9:94:85:ce:49:11:26:d7:
         21:d0:48:c9:cb:44:13:3f:bd:a4:26:e4:f0:87:62:0a:07:de:
         d8:55:e6:5a:d9:a7:db:af:47:27:c0:26:01:a7:4d:b2:85:5a:
         b6:7f:b9:e8:7b:09:05:b7:72:20:06:32:2e:95:a1:a9:d3:42:
         ba:7a:a6:ba:c4:2e:57:64:d4:2c:e3:b2:fa:52:8f:d1:9f:ce:
         fc:35:25:c5:ca:3b:cf:a6:5f:44:17:59:ef:ab:e1:56:9d:5a:
         50:c3:d5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:57:45 2026 by rpki-client