Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/193adb60-54b1-357d-b43a-abb5a4bd0a33.roa
File:                     193adb60-54b1-357d-b43a-abb5a4bd0a33.roa (raw, json)
Hash identifier:          UUz+muQPrbj5geLwCF7tnluCXPO5y5FAuqXpM0Te2KE=
Subject key identifier:   71:59:56:C1:79:EE:DF:E5:11:88:07:A3:CD:25:76:2C:AA:F3:4E:95
Certificate issuer:       /CN=135a25e4-6a94-45c6-b694-2d6e8256166a
Certificate serial:       010D0C9F4328584D3DFF97B67F29CA6B195C5C00
Authority key identifier: DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/193adb60-54b1-357d-b43a-abb5a4bd0a33.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     16509
IP address blocks:        143.192.40.0/24 maxlen: 24
                          143.192.41.0/24 maxlen: 24
                          143.192.42.0/24 maxlen: 24
                          143.192.43.0/24 maxlen: 24
                          143.192.44.0/24 maxlen: 24
                          143.192.45.0/24 maxlen: 24
                          143.192.50.0/24 maxlen: 24
                          143.192.51.0/24 maxlen: 24
                          143.192.52.0/24 maxlen: 24
                          143.192.53.0/24 maxlen: 24
                          143.192.54.0/24 maxlen: 24
                          143.192.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:97:b6:7f:29:ca:6b:19:5c:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135a25e4-6a94-45c6-b694-2d6e8256166a
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=ff42f8aa-902e-4a4c-ad23-3b65dee3ed65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fa:fa:a4:e3:d1:00:6f:70:a2:41:e8:7d:5b:
                    75:04:bc:be:3b:24:2c:e4:0e:83:55:46:2e:08:56:
                    1a:30:89:f2:31:31:fd:00:f5:59:1b:07:87:02:2c:
                    90:fc:63:5f:f6:07:12:cd:9e:3b:4b:d8:97:99:72:
                    49:9a:c2:fc:6b:5e:42:51:1f:9f:f8:63:9e:9a:a9:
                    a9:64:c7:c6:7f:9d:c0:32:12:3e:6f:28:a3:c7:31:
                    1c:d9:4b:85:76:6b:5d:ed:5c:a2:4e:6c:9f:7a:b9:
                    4a:3e:3a:2d:14:37:1c:eb:3b:e7:49:84:79:ce:da:
                    a6:9c:2c:9e:bc:28:02:40:06:36:1c:f3:1d:08:01:
                    d1:d2:dc:13:55:6c:08:99:5b:f5:65:2c:78:bb:b1:
                    3f:1b:1d:15:f8:82:01:8c:22:e6:76:63:92:58:5a:
                    47:d0:39:f1:53:2b:6c:d0:9e:76:b2:e5:03:3b:fc:
                    e4:c7:3b:4e:fd:01:36:ec:27:ce:df:4b:02:09:89:
                    1d:6e:71:ea:58:0a:15:ed:f7:51:5e:d1:c7:3a:cf:
                    89:76:83:af:90:cb:dc:57:27:10:b5:50:8f:d1:31:
                    ce:23:ee:74:ee:7d:4f:b6:ea:82:26:5b:b7:34:91:
                    0c:5c:06:e9:ba:0d:72:16:29:2e:23:fc:9e:35:5f:
                    ab:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:59:56:C1:79:EE:DF:E5:11:88:07:A3:CD:25:76:2C:AA:F3:4E:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/193adb60-54b1-357d-b43a-abb5a4bd0a33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl

            X509v3 Authority Key Identifier:
                keyid:DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.192.40.0-143.192.45.255
                  143.192.50.0-143.192.55.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:1b:b7:e8:32:8f:a2:4c:a0:03:f4:88:fe:a8:ad:41:6c:1a:
         d6:fb:66:2f:eb:4a:fd:52:f1:ee:fa:12:20:b8:2e:c7:5c:19:
         02:2f:20:c8:23:83:ef:b1:84:9a:31:fc:7b:a6:44:71:ea:ac:
         db:d0:02:97:a4:e4:26:5e:b0:2b:69:76:4b:81:16:10:20:23:
         01:8c:61:e1:10:58:19:b4:94:da:92:0b:33:a5:9c:b7:49:55:
         05:18:fb:27:8c:45:62:d1:45:aa:58:df:dd:b1:19:3e:a8:0b:
         fc:d7:c0:0d:0c:9e:78:80:fb:ee:cc:f4:f7:96:21:61:de:a6:
         09:af:99:69:a1:1c:74:0a:b5:11:63:d6:21:85:86:a8:00:e9:
         ae:4b:27:a8:43:b0:72:b6:f2:19:7e:a6:97:11:35:da:ef:9d:
         5b:08:f8:7b:8e:45:97:3b:4d:ca:fa:a5:1a:1c:e8:80:7f:03:
         b4:60:94:3f:d5:c0:96:50:10:d0:16:8a:a1:ea:b2:05:39:f3:
         d4:36:82:f2:9b:a2:fa:c0:20:0d:35:7f:0e:01:35:2c:d4:4b:
         de:99:49:3e:01:d8:b1:10:41:d2:d4:87:aa:10:10:e0:90:a2:
         f5:2e:fc:3b:8b:20:1c:28:bf:77:ae:09:90:43:f7:1a:8a:21:
         d3:1a:28:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 09:46:17 2026 by rpki-client