Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dad115b4-de3c-4a3c-8279-70a2d0d0f78d/cb4646ec-2856-3a1e-8d61-9e7dd18164e9.roa
File:                     cb4646ec-2856-3a1e-8d61-9e7dd18164e9.roa (raw, json)
Hash identifier:          q1rCo9M7SgCkg5ac1IocTyKJqbDkcpqqBqZQQVozoPk=
Subject key identifier:   15:1A:19:47:33:55:B8:FE:8F:C7:B7:72:0D:EF:FA:6D:D1:7B:72:EB
Certificate issuer:       /CN=dad115b4-de3c-4a3c-8279-70a2d0d0f78d
Certificate serial:       010D0C9F4328584E6F3EADE56B4EBEB897603FC0
Authority key identifier: 52:80:D5:17:A7:55:89:70:B3:36:F8:F7:3F:6A:F7:60:23:F8:E1:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dad115b4-de3c-4a3c-8279-70a2d0d0f78d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dad115b4-de3c-4a3c-8279-70a2d0d0f78d/cb4646ec-2856-3a1e-8d61-9e7dd18164e9.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     23307
IP address blocks:        142.227.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dad115b4-de3c-4a3c-8279-70a2d0d0f78d/dad115b4-de3c-4a3c-8279-70a2d0d0f78d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dad115b4-de3c-4a3c-8279-70a2d0d0f78d/dad115b4-de3c-4a3c-8279-70a2d0d0f78d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dad115b4-de3c-4a3c-8279-70a2d0d0f78d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3e:ad:e5:6b:4e:be:b8:97:60:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dad115b4-de3c-4a3c-8279-70a2d0d0f78d
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=d5095f95-a1b1-4970-9f2a-7592a29d9f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e7:4a:ab:fb:11:91:66:b5:eb:99:da:88:4f:
                    fc:12:7b:98:f2:5c:30:a3:60:a9:e6:bb:1f:8a:25:
                    98:cb:5e:61:41:de:2f:56:dc:22:4f:0c:52:28:b3:
                    d2:07:3f:8d:11:3d:07:51:bc:b5:88:e3:b1:98:dc:
                    9f:ee:70:da:57:ca:41:de:c8:fa:14:58:ca:c5:76:
                    a3:ff:c3:38:4b:d5:ff:47:d6:66:f1:cb:92:e8:55:
                    49:8c:71:a2:87:3c:8e:5b:eb:eb:ad:4a:f9:11:ac:
                    c6:0b:22:e2:f2:bc:53:5c:f8:8c:e1:61:d1:bc:3f:
                    c8:c9:83:74:b6:90:bc:80:1a:1b:39:d4:f1:5e:21:
                    a4:fe:16:01:97:a5:24:51:8f:6e:05:6c:b2:4c:2a:
                    71:79:83:f5:e2:54:6b:b5:08:72:4a:9b:e3:1d:96:
                    98:eb:8f:ed:cb:33:2c:ee:05:5f:c5:a1:52:74:94:
                    4a:73:77:42:f7:1a:1b:70:c1:9e:52:72:4c:f8:5c:
                    ff:ab:b5:97:14:2b:4b:fc:0d:2a:bc:e1:90:13:32:
                    7f:7d:a5:8a:51:d1:2d:d8:ce:c3:8b:12:01:ad:e9:
                    aa:5c:e8:7d:e0:b3:ef:aa:20:c1:04:b8:c3:06:ce:
                    aa:74:09:42:83:a3:84:46:10:ff:f9:a0:18:0a:e4:
                    38:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1A:19:47:33:55:B8:FE:8F:C7:B7:72:0D:EF:FA:6D:D1:7B:72:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dad115b4-de3c-4a3c-8279-70a2d0d0f78d/cb4646ec-2856-3a1e-8d61-9e7dd18164e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dad115b4-de3c-4a3c-8279-70a2d0d0f78d/dad115b4-de3c-4a3c-8279-70a2d0d0f78d.crl

            X509v3 Authority Key Identifier:
                keyid:52:80:D5:17:A7:55:89:70:B3:36:F8:F7:3F:6A:F7:60:23:F8:E1:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/dad115b4-de3c-4a3c-8279-70a2d0d0f78d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.227.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:53:63:70:64:22:5c:93:0a:92:d5:f6:50:16:1e:00:74:63:
         2d:04:0f:d8:ec:de:b6:1c:ce:eb:25:ea:fc:71:55:72:4f:24:
         de:88:5e:b8:a8:24:d9:23:6a:13:62:c6:da:24:17:b5:c0:53:
         cd:8c:06:d9:1a:06:75:a4:cf:ad:b9:d9:da:f2:22:91:db:a0:
         d3:4d:ee:ed:3f:42:bc:dd:ed:47:3f:a0:02:07:66:e9:7b:cf:
         8a:c8:34:18:f1:3b:54:3b:18:57:1d:84:9e:86:3a:39:45:55:
         46:db:c7:af:75:fb:19:91:4f:95:30:2f:e2:80:9f:a6:07:2f:
         f1:d9:10:64:98:9c:18:06:9b:3f:08:24:80:c0:a5:bb:a0:79:
         16:3c:b1:62:06:87:b0:94:56:de:d4:ac:f5:66:1e:f6:72:e5:
         38:cb:ad:c3:ce:e5:9d:39:8d:a7:dd:c2:41:0c:88:18:94:63:
         b2:dd:ca:46:a0:e3:c7:de:0b:d0:c9:c9:5c:a5:c0:c3:5f:aa:
         52:fe:65:97:96:ee:6f:1d:14:2a:f5:13:74:99:a5:52:52:96:
         a4:9c:3e:f7:05:a2:75:7b:d8:13:69:ca:0d:81:b5:f2:28:37:
         87:79:8c:54:f5:c3:32:5e:5e:ac:a3:35:91:1c:55:f3:7d:db:
         fb:af:56:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 21:04:36 2026 by rpki-client