Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e5dbd103-f55d-48bc-bcdd-bddd2f9a82ac/a88d6f0d-6f2a-30fe-924b-1062d69f740d.roa
File:                     a88d6f0d-6f2a-30fe-924b-1062d69f740d.roa (raw, json)
Hash identifier:          eeTLRX8qtmvNKgRi6eTorrtPK+mEuKgz+uwwYhHQKiw=
Subject key identifier:   2D:7C:CD:65:4F:73:FE:53:7A:6A:49:FA:59:08:7B:6C:D1:CA:5A:40
Certificate issuer:       /CN=e5dbd103-f55d-48bc-bcdd-bddd2f9a82ac
Certificate serial:       010D0C9F4328584D11B05EB992B37B9B5A12B480
Authority key identifier: 8A:B9:95:79:E4:34:18:36:BE:94:98:E6:13:4F:FE:DC:1E:59:71:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e5dbd103-f55d-48bc-bcdd-bddd2f9a82ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e5dbd103-f55d-48bc-bcdd-bddd2f9a82ac/a88d6f0d-6f2a-30fe-924b-1062d69f740d.roa
Signing time:             Thu 05 Mar 2026 16:05:41 +0000
ROA not before:           Thu 05 Mar 2026 16:05:41 +0000
ROA not after:            Wed 03 Jun 2026 15:05:41 +0000
asID:                     400528
IP address blocks:        142.202.124.0/22 maxlen: 24
                          192.171.112.0/23 maxlen: 24
                          2605:8a40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e5dbd103-f55d-48bc-bcdd-bddd2f9a82ac/e5dbd103-f55d-48bc-bcdd-bddd2f9a82ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e5dbd103-f55d-48bc-bcdd-bddd2f9a82ac/e5dbd103-f55d-48bc-bcdd-bddd2f9a82ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e5dbd103-f55d-48bc-bcdd-bddd2f9a82ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:b0:5e:b9:92:b3:7b:9b:5a:12:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5dbd103-f55d-48bc-bcdd-bddd2f9a82ac
        Validity
            Not Before: Mar  5 16:05:41 2026 GMT
            Not After : Jun  3 15:05:41 2026 GMT
        Subject: CN=89c2b42e-9640-41be-b90a-6be099fe0793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b3:1c:a5:3e:e9:d6:86:13:aa:71:a5:bd:ab:
                    21:69:d1:62:40:95:7f:ad:c1:f4:89:0a:c6:a8:d7:
                    6b:c0:ef:f7:eb:f1:79:5f:47:9f:a7:5d:6b:dc:19:
                    14:8a:69:0c:dc:94:ed:d8:87:c0:87:3e:67:47:2f:
                    c8:30:91:52:12:fe:21:d4:94:86:29:3a:58:f2:fb:
                    8e:05:93:00:cd:ee:b5:76:db:d3:89:b7:0d:85:2b:
                    43:a2:e2:b0:53:49:e3:f5:a8:ee:ee:a3:a0:9c:77:
                    38:77:6f:fe:97:f5:85:45:65:52:8f:02:87:d9:d4:
                    9b:67:48:0a:d4:ad:28:3b:9b:95:31:ea:3f:33:fc:
                    73:4a:44:26:f2:a4:18:5c:86:19:95:75:ea:63:fa:
                    86:12:cf:c3:08:49:ef:ce:e2:d3:b2:07:c0:73:5f:
                    cd:d6:6d:2b:86:91:56:b0:80:a4:b7:eb:6f:49:a9:
                    69:0f:f0:82:14:0e:11:d9:b5:9a:75:50:9a:01:68:
                    b0:b3:33:57:7c:eb:e8:4b:3f:f3:9c:c3:79:a0:41:
                    c3:cc:cb:4c:9c:54:3f:92:de:1d:70:f7:28:86:a5:
                    f6:9d:d2:4e:4b:20:cd:f8:dd:7d:41:b6:82:82:6c:
                    24:2e:23:de:12:0e:0e:b0:52:09:6e:b1:a9:53:97:
                    e3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:7C:CD:65:4F:73:FE:53:7A:6A:49:FA:59:08:7B:6C:D1:CA:5A:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e5dbd103-f55d-48bc-bcdd-bddd2f9a82ac/a88d6f0d-6f2a-30fe-924b-1062d69f740d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e5dbd103-f55d-48bc-bcdd-bddd2f9a82ac/e5dbd103-f55d-48bc-bcdd-bddd2f9a82ac.crl

            X509v3 Authority Key Identifier:
                keyid:8A:B9:95:79:E4:34:18:36:BE:94:98:E6:13:4F:FE:DC:1E:59:71:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e5dbd103-f55d-48bc-bcdd-bddd2f9a82ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.124.0/22
                  192.171.112.0/23
                IPv6:
                  2605:8a40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:22:56:47:8b:76:8b:70:69:88:b6:68:02:52:bf:0a:b7:ef:
         9e:33:ed:78:3d:51:0a:f7:b0:f4:14:75:a4:da:96:09:a0:14:
         92:0c:36:90:b0:ea:12:4c:b9:bc:ac:e7:19:8c:58:56:f5:e5:
         3b:ee:00:4f:49:1c:2d:3b:3d:66:38:7d:61:fe:5d:8f:fa:be:
         c5:a1:b7:b9:ab:4d:da:40:bf:6a:a3:a4:39:82:48:b5:b5:e9:
         8d:9f:a9:86:41:b0:60:8c:43:3d:33:2e:ac:38:62:3a:50:1b:
         84:9c:92:48:28:8d:56:2c:93:08:f5:28:99:22:6e:3d:81:52:
         9d:44:be:b1:bc:88:d0:34:b7:fa:2d:38:d1:d2:e8:64:90:3a:
         c3:a8:a3:94:b5:78:2c:4a:bb:0e:88:8f:cc:b0:85:62:91:30:
         f3:a8:99:75:c1:92:36:e4:8d:7a:ce:ec:e3:08:10:b2:3d:e0:
         f0:4d:42:96:ce:a8:0a:d9:67:82:f7:42:51:45:c6:31:d9:e7:
         cb:6b:ab:4c:00:e0:34:11:79:6f:db:6c:34:99:37:b8:70:32:
         0d:06:d0:48:1e:59:7b:14:0a:02:8d:63:8b:8d:83:6b:61:0f:
         98:05:2d:e0:bf:af:cd:f5:ab:a4:0d:23:6e:22:90:27:55:a8:
         7e:7b:3a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:00:15 2026 by rpki-client