Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/b42b3b4a-f500-3aa9-9ab3-84fa74904d70.roa
File:                     b42b3b4a-f500-3aa9-9ab3-84fa74904d70.roa (raw, json)
Hash identifier:          e7pyBkdQ2QAQgIjfgG0Jn3shPED6CqHjNuWVz1XMhOw=
Subject key identifier:   BE:1C:C7:C1:52:30:23:09:C5:FF:E2:0F:D5:53:0C:59:A4:F7:46:62
Certificate issuer:       /CN=346617ca-4f52-474c-98c9-d2f2abe7bf8d
Certificate serial:       010D0C9F4328584F391710A277B61477B4176280
Authority key identifier: 91:7D:DE:F2:23:FE:A4:86:60:27:5B:D9:11:0F:6E:26:F5:2E:A1:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/b42b3b4a-f500-3aa9-9ab3-84fa74904d70.roa
Signing time:             Sat 19 Sep 2026 04:23:00 +0000
ROA not before:           Sat 19 Sep 2026 04:23:00 +0000
ROA not after:            Fri 18 Dec 2026 05:23:00 +0000
asID:                     19977
IP address blocks:        143.58.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/346617ca-4f52-474c-98c9-d2f2abe7bf8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/346617ca-4f52-474c-98c9-d2f2abe7bf8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:39:17:10:a2:77:b6:14:77:b4:17:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346617ca-4f52-474c-98c9-d2f2abe7bf8d
        Validity
            Not Before: Sep 19 04:23:00 2026 GMT
            Not After : Dec 18 05:23:00 2026 GMT
        Subject: CN=e31dbcb5-4908-485b-95ec-21d5c149f423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:25:6a:c1:f0:7a:c3:5c:9a:2a:ae:95:aa:0c:
                    6a:f1:6d:31:80:39:45:1a:75:80:b3:af:6e:ab:d4:
                    e9:36:fd:6c:42:d9:f1:ff:bc:29:6d:ff:da:8b:62:
                    49:db:b5:6b:4d:3f:52:83:a4:9d:b1:5a:88:b8:23:
                    a8:80:f3:58:5e:2c:dd:06:b0:fe:c5:8c:ad:bc:d8:
                    65:f9:3c:1f:58:24:98:02:85:f7:f4:e0:96:50:eb:
                    37:65:4e:52:5c:b1:e6:46:ce:0d:d6:79:ad:35:42:
                    e4:42:d5:ee:e5:39:9b:2f:d9:40:78:4e:99:a2:a2:
                    da:a5:64:f3:09:cb:53:b8:a4:5c:98:a5:b3:76:26:
                    d8:b9:0a:2d:42:0a:27:66:e1:b4:19:90:6e:a2:bb:
                    d3:ac:16:3d:db:01:b4:55:e8:82:48:7f:aa:12:5a:
                    79:1c:26:11:6c:ca:6d:b0:7c:d5:3e:96:92:72:ac:
                    54:79:5a:91:fa:b6:7c:86:44:ff:33:fb:7c:03:a1:
                    6e:7e:5a:fe:3e:42:7b:9d:ca:cc:a1:8c:38:2e:68:
                    e6:fe:de:6a:8e:dd:37:c8:f4:bc:e1:f8:d1:83:26:
                    09:10:ed:e4:d2:6d:cb:d0:3b:3c:d9:cd:e0:ff:e8:
                    a8:30:58:d2:a5:7d:2b:46:b8:1d:18:4e:41:7c:dc:
                    16:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1C:C7:C1:52:30:23:09:C5:FF:E2:0F:D5:53:0C:59:A4:F7:46:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/b42b3b4a-f500-3aa9-9ab3-84fa74904d70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d/346617ca-4f52-474c-98c9-d2f2abe7bf8d.crl

            X509v3 Authority Key Identifier:
                keyid:91:7D:DE:F2:23:FE:A4:86:60:27:5B:D9:11:0F:6E:26:F5:2E:A1:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/346617ca-4f52-474c-98c9-d2f2abe7bf8d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.58.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:6c:9a:3b:48:b2:94:82:29:43:df:50:6b:21:2f:f5:09:51:
         0e:5e:d6:6d:63:d9:f2:48:f9:ef:a0:ea:d1:a1:b0:5f:f6:48:
         7e:4d:bf:72:cd:03:db:0f:51:b5:dc:c9:a8:f2:1b:3b:e3:70:
         5c:1e:90:59:c2:c5:a7:0f:55:33:94:38:c9:2c:5a:cd:7f:86:
         27:c4:64:31:b2:30:dd:2f:7a:87:29:aa:b7:79:ca:b6:37:14:
         ff:0d:ac:a8:c1:98:d8:90:5f:bf:1c:2e:8f:46:06:bb:c7:f0:
         22:be:3f:ef:3e:b2:7d:72:0a:00:97:53:be:03:f3:d6:c9:52:
         3d:22:2a:99:25:37:9e:21:62:81:0c:16:3d:de:8d:fe:91:d1:
         7c:d6:0e:d2:9d:47:c8:db:09:60:76:69:ed:9a:8f:6d:77:f5:
         03:9f:f2:a1:6a:a1:7d:5e:64:2c:db:6e:dd:c4:7d:55:cf:9b:
         3c:03:c9:ef:ae:8e:04:47:7f:9b:9f:e2:12:0a:61:04:4c:9e:
         a6:42:76:cd:9f:b9:be:dd:69:1a:cf:58:72:87:45:d1:4c:ea:
         dc:58:7a:c6:5a:6e:f7:b6:d3:dd:dc:30:06:0d:29:96:48:f1:
         81:ac:60:fd:de:0e:92:d6:76:21:40:e3:79:50:e2:76:79:0e:
         77:71:9c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:55:00 2026 by rpki-client