Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/de23b9f9-9256-38ae-8676-20d142523057.roa
File:                     de23b9f9-9256-38ae-8676-20d142523057.roa (raw, json)
Hash identifier:          wSw+Ljta+kbpkrMy7gC5uVNSAqP7iEhilQBJaruq0OE=
Subject key identifier:   8F:84:EC:AF:50:EE:BA:AF:6E:41:6D:01:EA:33:C1:06:48:4B:DD:D2
Certificate issuer:       /CN=f7e210a1-7b8a-4256-a4d2-c01234095c68
Certificate serial:       010D0C9F4328584DC6CB150E2D85F41F09E71A00
Authority key identifier: 70:64:A6:51:04:91:5D:5C:1A:88:70:D7:6F:6C:54:2D:27:AB:63:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/de23b9f9-9256-38ae-8676-20d142523057.roa
Signing time:             Sat 09 May 2026 13:00:31 +0000
ROA not before:           Sat 09 May 2026 13:00:31 +0000
ROA not after:            Fri 07 Aug 2026 13:00:31 +0000
asID:                     29913
IP address blocks:        205.143.205.0/24 maxlen: 24
                          205.143.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/f7e210a1-7b8a-4256-a4d2-c01234095c68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/f7e210a1-7b8a-4256-a4d2-c01234095c68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c6:cb:15:0e:2d:85:f4:1f:09:e7:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7e210a1-7b8a-4256-a4d2-c01234095c68
        Validity
            Not Before: May  9 13:00:31 2026 GMT
            Not After : Aug  7 13:00:31 2026 GMT
        Subject: CN=00fb626f-17d1-4989-b2d4-c38e086b449d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cc:92:7f:b0:c3:28:c5:ca:af:da:b9:bc:21:
                    9d:99:45:ba:c6:b8:33:b9:82:1d:8e:9a:aa:5e:e0:
                    81:6e:37:1b:69:c8:75:90:43:ce:d8:ba:15:ff:6a:
                    97:b5:cd:c3:56:0c:6c:49:41:f8:d5:b8:88:9d:b8:
                    35:5a:c0:4f:b4:8e:ad:90:f8:0c:70:18:64:b7:27:
                    61:aa:0d:1e:cf:e9:7d:f3:9d:02:dc:69:4c:b2:56:
                    f0:17:e6:d3:d1:4c:14:e0:e9:24:25:1c:d6:7c:c2:
                    e8:9d:e4:9b:f9:e8:7b:40:45:4e:20:b5:77:36:fb:
                    60:f9:a0:1c:3f:59:64:49:f2:37:5f:48:95:fd:bd:
                    e6:e1:76:63:c3:f5:e4:df:20:c3:17:6e:3b:7d:bf:
                    82:2b:5c:cf:28:1b:7b:e8:8a:b2:dd:c4:5b:0b:e7:
                    7f:cf:d0:66:f3:f6:30:38:c9:ee:33:5c:69:14:44:
                    f0:c7:06:74:af:a4:0a:b4:f2:17:6e:23:ab:6d:c3:
                    2f:da:83:53:a5:01:92:d3:a2:a5:d6:52:d8:7b:21:
                    fc:c7:8b:44:ff:d7:42:c3:7e:57:4c:ef:c8:02:8b:
                    1e:4d:55:a0:7d:ef:13:7c:78:5b:4b:47:77:50:93:
                    eb:40:86:e5:23:d0:ae:8c:aa:b5:50:a8:c7:d1:36:
                    f3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:84:EC:AF:50:EE:BA:AF:6E:41:6D:01:EA:33:C1:06:48:4B:DD:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/de23b9f9-9256-38ae-8676-20d142523057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68/f7e210a1-7b8a-4256-a4d2-c01234095c68.crl

            X509v3 Authority Key Identifier:
                keyid:70:64:A6:51:04:91:5D:5C:1A:88:70:D7:6F:6C:54:2D:27:AB:63:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f7e210a1-7b8a-4256-a4d2-c01234095c68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.143.205.0-205.143.206.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:87:ed:0b:77:04:f3:4e:33:66:7a:af:ce:15:03:a0:2c:a5:
         23:a3:59:3c:42:ea:cc:2a:6d:33:3e:fe:2b:75:78:5a:be:ea:
         da:e2:d5:99:57:a1:8f:74:f8:77:8a:02:aa:28:a7:00:30:ef:
         09:0c:52:b9:b8:65:8d:d4:68:bf:bb:b9:ed:5c:c3:54:aa:98:
         d6:72:46:d8:ed:66:02:06:d7:c0:d4:27:f2:27:cd:48:b7:b6:
         44:2a:ec:b5:fa:e6:f5:0d:a3:fd:cc:94:45:b9:67:ef:fe:0b:
         6f:87:7e:b9:8e:07:31:13:ce:8d:4f:7b:e6:4c:03:9d:52:f0:
         3f:02:97:15:52:75:aa:66:44:15:bb:e5:25:64:ee:00:0c:89:
         29:ea:34:84:fc:39:13:e2:3b:fe:8b:5f:e1:2a:46:f2:89:1d:
         bd:6e:01:ec:84:06:98:9f:bc:de:9f:35:7d:65:6c:10:2c:31:
         c0:7d:96:1d:a3:a6:b8:4d:6c:a3:94:35:39:2e:76:0a:8b:84:
         e3:05:6f:eb:54:eb:c7:61:86:53:a2:46:c4:54:1c:6e:e6:c9:
         2d:8f:1f:3e:3b:04:0e:1b:fb:59:56:b1:62:a5:11:89:f0:f2:
         9c:a4:f2:93:47:0a:92:e1:22:e5:c3:0c:a6:2d:d2:5a:87:64:
         a9:fc:fe:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:10:59 2026 by rpki-client