Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/f5a751ed-d298-3318-831c-84607a833ea2.roa
File:                     f5a751ed-d298-3318-831c-84607a833ea2.roa (raw, json)
Hash identifier:          dTNQa+F3Ww9phB6QRM9/C0uNanS2n/1px6k6oMyPPSg=
Subject key identifier:   CB:61:9E:F4:CD:CD:DF:97:D6:A0:21:F4:C6:62:C8:CA:19:E9:2C:1D
Certificate issuer:       /CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
Certificate serial:       010D0C9F4328584D1B1A17863C201637CB145A00
Authority key identifier: 36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/f5a751ed-d298-3318-831c-84607a833ea2.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     23341
IP address blocks:        143.55.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:17:86:3c:20:16:37:cb:14:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=8499cfa4-b5e3-47c0-b143-ab2f2aa6b341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c4:3a:26:bb:dc:dc:65:b8:1f:35:e2:cc:e7:
                    fb:bf:a9:ef:26:ff:62:d3:4f:c0:d3:93:66:5a:0d:
                    52:52:f9:d9:45:f7:46:87:e9:86:ed:04:59:74:c6:
                    22:14:ed:1b:f1:c7:ba:7e:73:6f:cc:f9:e2:e7:52:
                    71:60:35:fc:0a:0a:69:70:22:a1:87:90:50:4c:c8:
                    9e:92:a4:27:15:03:b8:78:43:a8:6b:d8:98:11:57:
                    06:82:e5:16:51:01:99:7c:00:e6:4d:99:87:02:63:
                    5d:bd:13:f9:02:9b:67:21:6a:39:15:2a:b7:86:d3:
                    b3:6a:93:4c:1e:fe:5a:ea:18:10:85:df:c3:3a:f1:
                    df:f9:2a:6d:d7:ad:94:94:30:5b:a8:b0:51:d2:7d:
                    bd:3a:32:59:3a:48:01:89:ea:99:3f:84:67:56:cb:
                    e2:f2:f4:a5:40:47:b6:28:09:71:95:25:1f:b6:db:
                    f3:1f:f5:33:58:2a:15:7d:4b:8a:6d:8d:09:00:85:
                    77:6b:5c:50:fa:5c:9b:f4:3d:50:a4:e8:10:81:99:
                    48:53:dd:fa:fa:4e:52:2c:e6:7e:42:5c:ff:3a:98:
                    3b:34:cf:a9:9f:5c:54:29:49:fa:75:ea:94:d6:7a:
                    44:b4:b1:ff:69:a0:b2:ca:58:1b:f1:2b:e3:4d:fc:
                    61:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:61:9E:F4:CD:CD:DF:97:D6:A0:21:F4:C6:62:C8:CA:19:E9:2C:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/f5a751ed-d298-3318-831c-84607a833ea2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl

            X509v3 Authority Key Identifier:
                keyid:36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.55.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:28:62:26:80:f3:0e:bb:42:57:81:30:7e:de:da:7a:5e:e4:
         a9:ea:02:5a:68:31:01:b0:6c:55:a0:ac:36:5a:1e:f5:11:d4:
         3d:35:18:92:93:86:c7:37:f5:fc:44:52:23:81:4b:e9:37:78:
         40:0c:b3:0e:fe:36:f2:91:48:73:47:fa:88:28:af:cf:5d:fb:
         66:e8:08:65:26:8f:be:a6:f7:aa:ab:44:cd:c9:e3:80:d9:b7:
         69:cd:84:34:50:e1:d3:87:af:a6:72:4d:22:27:8f:6d:3b:f7:
         80:1f:b2:87:1d:ea:ec:35:30:0d:86:df:b4:a0:78:31:69:01:
         fb:03:13:f3:b3:0d:76:01:f2:b4:c4:14:b4:aa:3a:d8:a0:a0:
         82:e6:22:cc:4f:40:dd:f3:35:de:d0:55:14:13:18:7f:a4:13:
         df:f2:6a:d6:d7:68:57:bf:21:c4:ca:7b:b9:75:13:99:e6:f0:
         f6:d0:b3:ae:ce:c2:d0:0c:5c:f0:7f:f6:c2:60:47:c0:ed:7b:
         e6:7c:4d:21:57:4b:4b:74:2f:67:42:1f:69:d8:df:9b:af:15:
         3d:a7:0d:15:af:55:e6:60:26:b6:aa:9c:11:9f:05:ff:c6:d6:
         05:06:d8:a7:74:92:d7:ed:be:43:5a:f5:64:d9:6d:a6:7c:15:
         8a:e8:48:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:20:31 2026 by rpki-client