Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/cfa7cf23-8b99-3993-9542-8d4224a4493e.roa
File:                     cfa7cf23-8b99-3993-9542-8d4224a4493e.roa (raw, json)
Hash identifier:          cn6a6P1B50vMuQmGpYVbSH0oMSHN0E9M0X1t9SuPKFU=
Subject key identifier:   40:E8:A3:F9:0C:F9:1C:F0:BB:6C:BC:27:79:ED:63:02:1B:F5:D9:18
Certificate issuer:       /CN=f5ae0cc6-b00f-4742-aadb-ab8ea354d895
Certificate serial:       010D0C9F4328584DF4DB481EA8F546C43AE98F00
Authority key identifier: 8B:9B:62:95:30:5B:9F:57:9B:22:EA:3F:C8:93:30:B1:33:CE:F7:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/cfa7cf23-8b99-3993-9542-8d4224a4493e.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     8075
IP address blocks:        142.147.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:48:1e:a8:f5:46:c4:3a:e9:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5ae0cc6-b00f-4742-aadb-ab8ea354d895
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=ab76b0b1-eb4d-4a33-8746-f1b7198f0ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f7:58:72:74:00:e0:09:73:b2:21:23:94:9d:
                    c3:7e:38:e3:79:bb:49:35:1b:d1:66:5a:23:01:d2:
                    41:f7:51:fa:ad:84:d4:19:2a:6d:52:ab:34:ea:82:
                    7f:f0:25:84:ec:14:fc:f1:f1:74:0f:f7:6e:a2:61:
                    0a:25:52:70:d3:9e:b4:88:62:e9:5f:d8:45:fe:af:
                    11:3f:70:64:13:cd:2e:ca:a4:c0:c5:53:76:11:7e:
                    36:ac:0e:60:12:3f:3f:15:ad:65:72:95:f2:29:8d:
                    22:c6:c5:fd:a6:73:89:b6:4e:e5:9e:24:b6:20:08:
                    d4:31:5e:2a:24:22:41:5a:f1:8c:1b:d2:5d:ff:60:
                    90:7d:d4:c3:4b:16:a1:c3:ee:db:a8:94:b8:0d:1d:
                    ba:a8:b5:5e:11:5c:37:9d:aa:91:42:76:fa:62:f1:
                    2a:42:e5:0a:95:a9:73:78:dd:c7:cd:30:18:17:85:
                    d4:e5:77:20:50:f6:40:99:d3:d4:46:c1:86:44:a4:
                    c7:34:7e:09:df:63:c1:fd:c8:dd:76:6f:8f:e7:21:
                    40:e8:0d:54:ba:95:11:fe:39:cd:15:95:9e:7b:0a:
                    9c:4f:be:bc:11:d8:27:e6:ef:0d:2f:ee:e1:14:f2:
                    a4:0a:58:8d:70:8e:1a:77:7e:f4:9b:db:ff:e4:e5:
                    a9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E8:A3:F9:0C:F9:1C:F0:BB:6C:BC:27:79:ED:63:02:1B:F5:D9:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/cfa7cf23-8b99-3993-9542-8d4224a4493e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.crl

            X509v3 Authority Key Identifier:
                keyid:8B:9B:62:95:30:5B:9F:57:9B:22:EA:3F:C8:93:30:B1:33:CE:F7:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:b6:f0:95:df:ce:e0:37:bc:db:23:73:e0:6e:9c:65:de:0f:
         e1:07:8e:70:73:ce:28:b6:64:80:e5:82:ca:08:ed:25:5d:21:
         eb:79:f9:a0:b0:c7:b9:c6:95:ea:e2:91:05:3c:2b:8d:54:fc:
         2a:c2:f1:d2:96:7e:6b:51:0b:a6:e2:fd:99:f0:d5:26:b7:3f:
         b2:49:3e:68:45:89:a6:b9:c8:b5:ed:c1:8d:bc:ab:94:ab:33:
         9e:d9:25:e3:bb:c0:60:31:1f:46:4e:04:5f:ad:f7:88:aa:de:
         60:0d:48:2d:ed:f5:55:1e:53:1a:19:5c:31:95:3a:8a:b5:45:
         a9:3f:1c:7e:4d:15:9e:b8:40:48:0a:b8:95:df:da:84:27:db:
         c1:54:1c:27:83:c9:f0:3b:36:e8:48:e5:b5:10:44:11:d6:15:
         51:57:68:f0:b1:6f:53:3e:b4:a5:98:c9:1d:7b:90:48:fa:fc:
         63:d8:a3:64:87:ec:8d:5b:91:6a:bf:f3:b6:1d:a6:9e:8c:f0:
         57:37:9a:75:35:cd:13:7d:c2:c8:67:c1:b9:94:17:88:38:20:
         d6:40:15:83:06:7b:89:57:e8:94:76:af:73:84:ff:c9:4d:00:
         15:89:55:df:b2:35:7c:02:53:9f:6d:c1:b1:a6:89:50:0a:c0:
         62:3d:49:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:46:44 2026 by rpki-client