Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/193adb60-54b1-357d-b43a-abb5a4bd0a33.roa
File:                     193adb60-54b1-357d-b43a-abb5a4bd0a33.roa (raw, json)
Hash identifier:          tup3caQfX1YRHvoNF4gV7aFN41bv24qR6sxVlJIDLYI=
Subject key identifier:   1D:44:B7:B3:BF:43:89:FB:B7:2D:30:23:84:C2:FC:BA:0C:88:72:17
Certificate issuer:       /CN=135a25e4-6a94-45c6-b694-2d6e8256166a
Certificate serial:       010D0C9F4328584EC0A71B28B67FCB0A171FBF80
Authority key identifier: DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/193adb60-54b1-357d-b43a-abb5a4bd0a33.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        143.192.40.0/24 maxlen: 24
                          143.192.41.0/24 maxlen: 24
                          143.192.42.0/24 maxlen: 24
                          143.192.43.0/24 maxlen: 24
                          143.192.44.0/24 maxlen: 24
                          143.192.45.0/24 maxlen: 24
                          143.192.50.0/24 maxlen: 24
                          143.192.51.0/24 maxlen: 24
                          143.192.52.0/24 maxlen: 24
                          143.192.53.0/24 maxlen: 24
                          143.192.54.0/24 maxlen: 24
                          143.192.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:1b:28:b6:7f:cb:0a:17:1f:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135a25e4-6a94-45c6-b694-2d6e8256166a
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=c02dc24a-d0ec-43de-93e4-f4d8ec56eb9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:96:e7:a0:08:d6:38:8a:19:a9:b7:72:85:ad:
                    fa:b4:c5:1d:cb:fb:ce:c3:4f:08:63:3f:fd:81:9e:
                    e2:f8:d7:63:37:bf:85:f9:8f:85:c1:7e:6d:30:4c:
                    68:17:67:79:8e:e8:7e:30:90:44:a0:87:37:79:6c:
                    d1:0e:ea:fa:e9:72:a4:96:af:a4:c9:27:a8:52:5d:
                    eb:60:d5:a1:05:72:e8:a0:0d:47:5e:90:f7:8e:55:
                    78:c3:b4:b5:bc:30:d2:73:ec:82:10:03:d5:03:2c:
                    d0:66:c1:7f:6a:34:a7:93:69:d8:36:75:91:23:6c:
                    51:da:cb:f6:3a:5b:28:19:0a:e6:4a:dc:b6:0f:10:
                    e6:87:9c:cc:5a:01:0a:2c:23:6e:0e:e1:f4:d5:4e:
                    52:8f:2f:e7:90:21:03:1c:99:9c:71:63:53:cd:0b:
                    81:98:9f:9c:a0:0f:54:ac:a9:94:4a:56:ed:84:08:
                    cd:5a:ce:15:4e:03:4c:11:68:85:88:7e:bb:48:14:
                    2f:f0:d4:d8:9f:35:e5:9d:60:5a:b5:64:fe:da:6f:
                    1c:b2:e0:dc:ae:d6:ca:27:80:85:de:ce:93:cb:0a:
                    19:57:ab:63:6e:69:35:7e:be:5b:54:dd:2f:7f:fd:
                    c0:45:66:cc:e4:bb:5c:2d:8f:81:a7:16:3a:e9:07:
                    6f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:44:B7:B3:BF:43:89:FB:B7:2D:30:23:84:C2:FC:BA:0C:88:72:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/193adb60-54b1-357d-b43a-abb5a4bd0a33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl

            X509v3 Authority Key Identifier:
                keyid:DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.192.40.0-143.192.45.255
                  143.192.50.0-143.192.55.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:cd:fd:87:e9:ac:cf:04:32:ad:bf:1c:c2:67:20:a6:49:03:
         25:3b:e0:62:7b:bb:af:1a:fd:c3:cf:6f:2e:21:3e:06:c7:60:
         58:bf:70:d8:f4:e4:7e:84:88:31:51:8d:6d:5e:10:40:17:30:
         83:9b:9c:a8:c4:7f:f8:c9:3f:b6:05:18:e2:86:9d:0d:07:9e:
         14:72:8c:99:c7:7d:47:7a:5c:f8:9f:6f:26:0c:67:76:04:af:
         5b:4b:60:1e:25:2a:91:81:7a:76:7a:61:81:3b:12:65:68:85:
         cd:7d:0a:1f:89:0e:20:d5:80:c1:41:21:fc:54:e8:53:cd:1c:
         c2:bc:f7:dd:2e:b4:5b:45:29:7b:0c:b8:80:83:3c:d1:f7:2f:
         4c:d6:18:cb:04:c7:0a:38:9a:94:a8:74:03:46:bf:9a:f4:31:
         d8:a0:aa:1a:cb:70:85:d3:62:10:54:96:8d:64:01:60:fa:6f:
         8c:c0:6e:c8:b4:3c:91:2a:79:a0:70:1c:80:51:0b:0e:89:04:
         a3:72:f8:1b:0b:95:31:64:53:99:94:31:a8:9e:0a:f7:3d:07:
         23:9b:29:2d:2d:f2:2d:cc:a5:e5:dd:57:f3:ea:aa:18:4d:f4:
         1d:29:57:78:45:8c:6c:93:55:00:c4:eb:dc:87:e1:ed:7e:3e:
         71:45:11:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 00:07:20 2026 by rpki-client