Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a143c758-cd26-3da8-9539-5bf67f03cc10.roa
File:                     a143c758-cd26-3da8-9539-5bf67f03cc10.roa (raw, json)
Hash identifier:          gfPK1VgizHhqDKzYb0dgyj3bRolwYqF6M6Ng9qdGhA8=
Subject key identifier:   28:E5:A9:5C:00:67:FA:75:42:C6:7E:B7:AD:6F:C9:C3:BA:68:52:8E
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D7302DDA9471B3A03E93BBA80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a143c758-cd26-3da8-9539-5bf67f03cc10.roa
Signing time:             Thu 09 Apr 2026 12:45:19 +0000
ROA not before:           Thu 09 Apr 2026 12:45:19 +0000
ROA not after:            Wed 08 Jul 2026 12:45:19 +0000
asID:                     203054
IP address blocks:        64.204.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:73:02:dd:a9:47:1b:3a:03:e9:3b:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr  9 12:45:19 2026 GMT
            Not After : Jul  8 12:45:19 2026 GMT
        Subject: CN=0196d7b4-f332-4acd-a78f-51a987572d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:04:10:7b:d4:8d:20:bc:f6:d0:06:70:d2:22:
                    35:27:91:20:8c:25:c8:3f:3d:bc:42:43:e9:61:58:
                    ac:60:4d:fe:73:92:f2:cf:99:cf:a1:68:67:9e:97:
                    bb:e2:6b:72:1d:02:5b:1c:f2:d8:c6:fa:49:e2:76:
                    3e:7b:e3:0b:88:b4:eb:ef:25:4d:cc:b7:11:3e:7a:
                    0e:71:33:f8:e0:47:97:6d:e8:9a:d2:3d:9f:12:70:
                    45:a9:e6:42:43:50:79:9c:fe:c6:ae:1f:22:f0:40:
                    cd:7a:e1:34:bf:37:f5:28:c0:d4:bb:ab:f8:01:2f:
                    8e:fb:76:6b:9f:f2:5b:2d:bd:a5:14:97:21:a7:16:
                    f7:e2:07:23:9d:73:f1:88:6e:b1:0d:a7:76:bd:91:
                    12:e0:58:12:0d:d8:37:7d:d7:62:ee:dc:99:6e:11:
                    7c:3b:7e:18:cc:ee:a9:0d:71:c0:90:7f:6b:a8:b2:
                    cf:71:e8:f3:5c:0b:88:37:f4:d2:e5:94:8c:38:a9:
                    5a:eb:3b:a7:a0:d1:ad:20:1e:38:d5:ca:fe:e4:1c:
                    2b:5f:6b:ef:1f:20:8a:c4:1a:42:ef:e7:2a:72:4a:
                    cf:a7:a3:d8:10:a2:a3:34:5d:a0:f5:bf:46:a5:23:
                    0b:38:50:3c:c2:3b:55:23:f0:60:23:90:0f:1d:bc:
                    d6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E5:A9:5C:00:67:FA:75:42:C6:7E:B7:AD:6F:C9:C3:BA:68:52:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a143c758-cd26-3da8-9539-5bf67f03cc10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:0d:cf:d1:6e:04:8a:4d:a8:5c:85:28:38:a4:ad:cd:62:2a:
         ad:90:a0:fd:3b:a0:12:fd:f8:be:33:43:e3:66:4a:e6:5b:bf:
         81:34:98:8e:4f:54:6a:ae:b4:22:95:89:d6:fc:c6:dd:d5:e1:
         0e:fa:ec:28:54:01:ed:c9:e5:c7:87:a4:ce:a7:0a:95:74:c8:
         db:e2:de:da:46:c6:74:21:0b:56:fb:b0:e8:47:a7:bf:f0:75:
         49:36:d0:b3:ba:ef:cc:f1:97:2d:53:16:8e:57:72:e1:95:97:
         58:42:f3:48:98:44:d4:00:a8:00:aa:62:a8:82:31:bc:e1:b2:
         ac:a6:fd:17:0f:dc:41:1c:ef:e4:7c:c0:e3:86:4f:c3:b5:65:
         ca:5e:67:b7:50:7f:44:d0:ab:60:ab:9f:68:ff:9d:2c:34:ca:
         6b:21:58:e6:fa:e6:8c:46:5b:74:5a:13:ee:cb:4a:e3:33:75:
         69:df:50:40:c4:9b:b8:55:e8:15:92:7b:b7:80:30:da:dc:25:
         68:df:03:53:78:f2:5a:3f:ca:f0:9d:13:c9:5c:1c:83:70:d0:
         9f:bb:6a:db:2d:6b:98:c0:0f:de:7d:d2:3a:b5:5f:9a:30:6f:
         cd:8f:10:03:7a:0e:02:73:76:53:69:5e:85:0d:2d:45:e5:54:
         97:ea:0f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 23:13:30 2026 by rpki-client