Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/2a418837-36ea-42a0-90ef-7daf88431a27/d79b68f7-fa3f-3134-9ec3-15e943286670.roa
File:                     d79b68f7-fa3f-3134-9ec3-15e943286670.roa (raw, json)
Hash identifier:          Okr3jUrn2kyVKP91bFMeXBz0JgMBkE95yCLXhPbB5C0=
Subject key identifier:   49:E6:A1:FC:BD:18:C1:8B:12:A7:06:5E:63:EF:12:19:52:E9:8E:7F
Certificate issuer:       /CN=2a418837-36ea-42a0-90ef-7daf88431a27
Certificate serial:       010D0C9F4328584FA56A79D290310DD0D16B2180
Authority key identifier: 7A:6A:B9:8F:4A:E8:6B:A6:FF:63:86:7A:DA:35:0D:09:E9:7D:FB:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/2a418837-36ea-42a0-90ef-7daf88431a27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/2a418837-36ea-42a0-90ef-7daf88431a27/d79b68f7-fa3f-3134-9ec3-15e943286670.roa
Signing time:             Tue 27 Oct 2026 23:38:22 +0000
ROA not before:           Tue 27 Oct 2026 23:38:22 +0000
ROA not after:            Tue 26 Jan 2027 00:38:22 +0000
asID:                     8103
IP address blocks:        205.143.240.0/24 maxlen: 24
                          205.143.242.0/23 maxlen: 23
                          205.143.244.0/24 maxlen: 24
                          205.143.245.0/24 maxlen: 24
                          205.143.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/2a418837-36ea-42a0-90ef-7daf88431a27/2a418837-36ea-42a0-90ef-7daf88431a27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/2a418837-36ea-42a0-90ef-7daf88431a27/2a418837-36ea-42a0-90ef-7daf88431a27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/2a418837-36ea-42a0-90ef-7daf88431a27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a5:6a:79:d2:90:31:0d:d0:d1:6b:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a418837-36ea-42a0-90ef-7daf88431a27
        Validity
            Not Before: Oct 27 23:38:22 2026 GMT
            Not After : Jan 26 00:38:22 2027 GMT
        Subject: CN=a3983e3a-374f-4e7c-ae67-b0a875a1fc80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:54:a4:c5:e5:23:e2:4d:c3:8c:66:c9:51:1e:
                    9a:91:65:8e:c4:5b:02:34:f4:74:cc:1b:fe:1d:45:
                    77:19:53:14:4d:9c:ba:42:78:38:71:c1:c9:c2:29:
                    94:a0:46:3b:ea:1d:fb:70:ad:7a:33:45:ed:fa:07:
                    e2:d8:ea:dd:9d:ea:ac:b6:c4:32:43:13:96:42:23:
                    23:dd:3a:79:9e:13:4c:ec:e0:72:a6:0d:d8:b6:5d:
                    1d:3e:4a:82:1a:5c:fc:0f:e1:c0:b5:2a:54:a1:ef:
                    f4:06:39:cd:cb:75:70:06:06:6b:68:6e:29:7e:5a:
                    18:5d:14:59:21:ed:87:77:5d:40:9e:28:d0:c8:2f:
                    aa:e2:d2:3d:77:ee:eb:f2:60:c9:af:09:78:89:6c:
                    a3:ae:52:16:95:05:cf:00:d7:dd:98:02:68:7b:60:
                    d4:90:5d:2b:9b:eb:78:41:75:40:21:24:69:19:38:
                    01:0a:10:39:d4:f7:30:47:4f:d8:83:6b:87:83:18:
                    32:7f:c4:67:fa:bc:c2:73:d5:f0:4f:e0:4f:70:8e:
                    da:ad:82:5e:1a:52:81:d8:fe:e6:65:a3:ad:84:53:
                    ed:c1:9e:12:25:84:00:0f:b2:9d:26:a7:b9:17:10:
                    b5:fc:19:d5:df:29:76:ed:d9:25:ee:5f:75:e1:2c:
                    fb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E6:A1:FC:BD:18:C1:8B:12:A7:06:5E:63:EF:12:19:52:E9:8E:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/2a418837-36ea-42a0-90ef-7daf88431a27/d79b68f7-fa3f-3134-9ec3-15e943286670.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/2a418837-36ea-42a0-90ef-7daf88431a27/2a418837-36ea-42a0-90ef-7daf88431a27.crl

            X509v3 Authority Key Identifier:
                keyid:7A:6A:B9:8F:4A:E8:6B:A6:FF:63:86:7A:DA:35:0D:09:E9:7D:FB:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/2a418837-36ea-42a0-90ef-7daf88431a27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.143.240.0/24
                  205.143.242.0-205.143.246.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:13:c1:bb:81:a3:55:2a:a2:24:a0:90:91:c8:7c:6a:58:64:
         97:db:0e:76:21:84:bc:e8:89:9f:80:1b:68:15:13:0c:62:ff:
         4c:27:65:ff:35:f4:c1:81:96:19:24:b7:0d:c4:8f:03:74:6e:
         07:70:17:a1:90:f0:8c:8a:49:f7:66:3f:42:f0:af:f7:d9:2d:
         b2:1d:3a:34:f0:88:13:f6:8b:6a:64:2e:4a:41:5f:b6:e2:4a:
         12:6a:9a:2b:fa:94:55:50:16:21:9a:ea:cd:af:dc:b5:4d:08:
         22:fc:a5:80:5f:d8:4e:74:14:96:f8:f4:19:5c:db:43:df:70:
         aa:27:bd:f2:06:9b:90:4e:74:bb:86:5d:e2:8b:ad:0e:8f:2c:
         f2:45:c7:c0:f2:09:30:da:84:62:81:1b:b2:41:31:8d:c6:1e:
         9c:df:a9:38:3e:83:86:e3:61:e4:4a:7c:d4:ed:38:e5:6d:25:
         f5:6a:17:35:dc:5c:a9:92:48:77:1f:cb:8e:7d:9e:7e:db:61:
         74:6c:3c:eb:1a:6a:fc:c6:99:7a:dc:72:8e:94:c5:2b:15:4e:
         d2:f9:c4:ad:9c:03:ca:6f:11:6b:5f:b1:4a:c6:f8:d6:71:15:
         f0:00:8d:f7:a0:f4:f2:fc:c7:8c:4b:f4:19:4a:1a:f3:4c:35:
         17:af:16:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 00:07:46 2026 by rpki-client