Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/dee37a17-92d4-37ca-a911-51088a738bff.roa
File:                     dee37a17-92d4-37ca-a911-51088a738bff.roa (raw, json)
Hash identifier:          eNRZTFR/2BToDPqhYY3j7Iob0yIj1mL3we6HNQHA7cY=
Subject key identifier:   80:CB:D0:77:EC:22:68:61:7D:29:B8:2A:55:B7:7B:40:8F:69:47:CE
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EC0495B511C7E777C1543D380
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/dee37a17-92d4-37ca-a911-51088a738bff.roa
Signing time:             Thu 06 Aug 2026 21:51:31 +0000
ROA not before:           Thu 06 Aug 2026 21:51:31 +0000
ROA not after:            Wed 04 Nov 2026 22:51:31 +0000
asID:                     395954
IP address blocks:        142.234.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:49:5b:51:1c:7e:77:7c:15:43:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  6 21:51:31 2026 GMT
            Not After : Nov  4 22:51:31 2026 GMT
        Subject: CN=943b8265-29d1-4707-9f08-621382555a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6d:5a:0a:4d:c4:ca:47:36:6e:f8:5f:fd:03:
                    85:cd:d2:d9:b6:09:19:74:21:c1:1d:90:e9:f7:f2:
                    ee:36:99:22:a0:38:58:9b:ed:8d:49:fc:70:e5:5f:
                    80:33:0f:2d:69:83:0b:fd:65:11:e8:a5:19:f7:e2:
                    46:7f:d3:48:c5:e3:ff:1a:7e:43:a3:cc:c3:c6:88:
                    de:b5:f1:c7:5f:6c:7b:04:74:f0:f2:55:fc:78:cd:
                    61:59:a9:bd:13:5e:66:8c:5b:a9:6f:51:c8:95:b5:
                    11:e8:ef:59:36:c1:e0:3e:92:a9:43:c2:82:dc:4c:
                    54:84:da:ae:2b:90:df:22:94:ea:31:48:b3:3c:ba:
                    9b:a8:9e:ca:3d:18:f8:a8:48:e3:f5:31:53:00:9d:
                    53:e7:1c:81:c1:fb:ad:d7:3f:5a:0a:2c:1f:fd:a5:
                    13:7e:93:3c:ae:e3:57:d6:3c:ad:db:63:60:99:b9:
                    be:3e:a3:01:0b:4a:2a:33:b0:c4:d3:7d:ad:a0:40:
                    61:ae:16:d6:aa:ca:31:03:1a:36:39:5c:d6:62:7b:
                    b2:a2:72:70:85:ff:89:4a:05:0e:fb:3e:1b:16:f2:
                    9f:32:61:e1:2d:53:69:73:f3:cd:ce:2b:dd:ba:9c:
                    39:2c:54:00:e5:cb:d1:b0:3f:ee:13:90:68:05:e9:
                    5b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CB:D0:77:EC:22:68:61:7D:29:B8:2A:55:B7:7B:40:8F:69:47:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/dee37a17-92d4-37ca-a911-51088a738bff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.234.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:56:62:fd:0a:73:4c:e0:54:7d:15:88:65:a7:29:ff:50:25:
         75:d6:17:29:37:b8:60:ea:d2:2a:a1:91:52:d4:a0:0f:49:a6:
         0e:6c:e5:c0:37:b9:ad:dd:14:53:a4:cf:65:cf:09:5c:16:e8:
         3e:5b:93:9c:fe:fa:f5:03:ab:ba:c9:72:d1:e5:04:c4:82:66:
         ee:23:7b:1b:0c:f9:1b:a8:cd:c7:a2:3a:58:99:a4:16:c0:75:
         b5:d9:81:82:4c:3e:ba:72:89:c7:d9:65:a8:d6:8e:8d:3d:c9:
         36:94:86:03:7c:4f:a3:48:47:95:bc:4a:09:06:36:7f:c0:2c:
         cf:7c:f6:6f:9b:e6:ff:76:f0:63:ca:18:e1:62:26:8e:e2:c4:
         bf:11:5c:52:2c:6b:36:67:35:e9:55:60:7b:4f:f7:bf:b9:12:
         ec:67:1d:7f:4a:a1:73:1d:86:5c:2d:63:c7:cf:48:c7:6f:08:
         46:d5:91:d9:14:f8:2e:ad:f5:b2:26:06:33:db:0e:70:a3:1c:
         34:04:bd:87:28:00:28:d3:d6:dd:9d:01:2e:d2:eb:31:04:40:
         d1:60:86:b3:5d:de:be:0d:86:05:a6:4c:74:64:0e:d2:cf:ce:
         a3:36:60:0a:ed:24:65:47:dc:9c:82:62:88:3a:a0:ff:77:32:
         90:9d:ed:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:38:38 2026 by rpki-client