Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/395836d7-7ac0-3422-900d-ad01ff5b0964.roa
File:                     395836d7-7ac0-3422-900d-ad01ff5b0964.roa (raw, json)
Hash identifier:          6gftEdpeTTIajJtQNQZEtF1ZypUi634KWAAZfMfguo0=
Subject key identifier:   57:CC:05:8D:D0:ED:85:B1:07:47:A5:3E:E6:AF:38:B5:2F:4C:6B:FB
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CBDB213FAAB020357AD04B200
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/395836d7-7ac0-3422-900d-ad01ff5b0964.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     31898
IP address blocks:        142.0.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b2:13:fa:ab:02:03:57:ad:04:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=593aab86-0a29-4d55-a8a5-d9d6ff2b5232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d4:d8:30:e6:6b:5e:2c:49:e7:df:aa:7e:fe:
                    e5:cf:3b:c2:e7:7b:81:74:7e:c2:d6:10:90:08:2f:
                    24:cc:d6:b6:6b:d9:22:00:f6:ac:f8:49:ce:78:19:
                    54:ef:ea:81:ed:6e:37:9e:e6:0e:57:02:50:ac:a3:
                    78:e2:3b:03:3d:0c:68:b0:12:a4:9e:5b:63:95:eb:
                    66:7b:f2:d0:1e:81:82:e6:03:b1:a2:7e:60:f5:0f:
                    cf:9e:ad:ca:2e:e7:69:88:c5:a5:d6:00:6f:98:f5:
                    74:25:c9:a1:90:50:a9:d8:23:06:62:78:1f:58:37:
                    dd:f7:53:28:ab:fe:a2:7e:2a:6d:23:14:37:ba:43:
                    9a:fb:dd:fc:73:c7:ac:f0:b3:80:b8:c6:f4:c7:cd:
                    a3:1a:de:da:e3:8a:5c:89:d6:c4:9c:c5:b5:62:03:
                    4d:7c:62:64:72:c7:f7:8b:d4:3d:05:ed:3e:62:82:
                    f1:f5:c6:84:13:4b:73:75:1b:5d:d9:fe:b8:da:0d:
                    86:02:eb:31:6a:68:e3:c5:13:3d:d6:df:12:a9:80:
                    54:94:7d:fc:c8:8d:ca:ef:45:89:59:34:df:02:c4:
                    35:9f:a9:5c:08:20:cc:29:f3:85:96:df:8c:49:8a:
                    ba:45:fb:1e:8b:f1:94:13:c4:a8:16:9c:4f:99:6c:
                    31:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CC:05:8D:D0:ED:85:B1:07:47:A5:3E:E6:AF:38:B5:2F:4C:6B:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/395836d7-7ac0-3422-900d-ad01ff5b0964.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.0.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:b9:c6:5a:5d:9b:e7:44:76:e6:28:71:a4:e3:75:e3:8a:2e:
         d6:f7:7c:7f:2c:d7:74:59:ce:44:92:32:38:22:b8:f5:09:a9:
         6e:68:91:27:25:74:46:99:1d:91:31:8a:15:68:e6:0f:31:62:
         3c:56:81:0f:b2:4b:96:37:88:4e:e3:ae:d6:8d:21:65:76:28:
         f3:de:b3:98:3a:12:ff:26:49:22:a2:34:b6:66:c0:c3:e9:5d:
         6b:1f:be:2c:7f:0d:8f:61:57:6a:7d:9d:10:03:7b:3e:c6:bf:
         09:c7:32:94:d7:8d:fe:df:75:41:50:0e:02:27:57:45:5d:13:
         b9:b8:ed:9a:a3:ed:be:08:ea:6a:27:b8:4d:40:58:14:ca:fc:
         89:0d:54:ff:16:b1:07:06:b0:da:77:c5:1d:3a:10:c9:08:19:
         e2:c9:19:4e:c3:7a:85:d9:16:89:94:2d:b5:93:e6:35:84:18:
         c3:0d:de:6c:4b:ce:c1:68:35:01:75:d4:9c:2e:8f:e5:2d:d4:
         d6:6b:6f:8d:bc:88:4c:e6:d9:61:83:d4:f3:be:4b:08:76:1a:
         c6:6a:e1:a6:c7:ce:39:64:09:ec:97:80:38:98:ac:c4:76:a7:
         19:cb:49:a1:3c:b8:6c:00:d4:db:66:54:a0:13:cb:8c:bf:4f:
         41:ca:97:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:30:30 2026 by rpki-client