Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ca48f95-35ec-4aa1-97a3-249116154b70/03efc522-b39f-3622-9a75-36cea29ac517.roa
File:                     03efc522-b39f-3622-9a75-36cea29ac517.roa (raw, json)
Hash identifier:          tFZBZEJeHuUjZc1Wis79b8dX0PhBO0txwgs+pSn5A/U=
Subject key identifier:   95:EA:0C:08:E9:32:34:55:5C:6C:6B:47:16:21:1C:3F:CF:9C:6F:D8
Certificate issuer:       /CN=6ca48f95-35ec-4aa1-97a3-249116154b70
Certificate serial:       010D0C9F4328584F2C225D86506C33FBE8A6F9C0
Authority key identifier: 45:59:1C:04:0C:8E:95:18:61:70:D0:88:51:C6:84:C1:F4:38:3E:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ca48f95-35ec-4aa1-97a3-249116154b70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ca48f95-35ec-4aa1-97a3-249116154b70/03efc522-b39f-3622-9a75-36cea29ac517.roa
Signing time:             Mon 14 Sep 2026 13:00:12 +0000
ROA not before:           Mon 14 Sep 2026 13:00:12 +0000
ROA not after:            Sun 13 Dec 2026 14:00:12 +0000
asID:                     12036
IP address blocks:        142.248.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ca48f95-35ec-4aa1-97a3-249116154b70/6ca48f95-35ec-4aa1-97a3-249116154b70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ca48f95-35ec-4aa1-97a3-249116154b70/6ca48f95-35ec-4aa1-97a3-249116154b70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ca48f95-35ec-4aa1-97a3-249116154b70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2c:22:5d:86:50:6c:33:fb:e8:a6:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ca48f95-35ec-4aa1-97a3-249116154b70
        Validity
            Not Before: Sep 14 13:00:12 2026 GMT
            Not After : Dec 13 14:00:12 2026 GMT
        Subject: CN=0365c4ea-318a-4843-b2f9-ce62758d1ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c1:80:65:93:84:22:b6:86:73:58:59:44:a2:
                    3a:72:14:f3:c7:74:4c:46:95:84:be:3c:47:3d:5a:
                    dd:20:9c:22:b5:df:f9:b2:17:b0:ec:2c:2c:d8:17:
                    2a:d8:c1:e3:86:4d:46:a7:15:aa:ce:09:3b:fa:4a:
                    37:4c:36:f4:81:2f:b1:24:20:e6:23:9a:09:1f:95:
                    0a:10:5f:39:f0:30:f0:7d:d3:e9:63:9b:c5:e9:5c:
                    d4:b5:94:03:5c:54:e9:a9:51:5d:a1:49:6f:7f:b9:
                    ae:70:17:b5:ff:6d:3c:41:94:57:f0:80:c2:a6:63:
                    e1:c6:d7:ee:a4:f1:22:d6:27:fd:49:4f:58:c1:f4:
                    9f:e1:19:4f:a5:71:e0:73:88:b5:c8:ca:e1:a6:63:
                    d6:a7:eb:81:b0:95:6b:37:48:e1:21:2a:46:92:88:
                    65:c1:2a:b9:b2:4c:a4:69:47:8e:0d:8f:6a:a5:34:
                    0b:98:37:2f:9d:cb:e1:4c:28:2e:64:42:6b:34:f3:
                    74:0b:ea:86:2c:13:50:1f:84:e1:bf:25:18:8e:7e:
                    21:10:85:3e:bb:ca:d5:a0:c0:09:10:f0:3b:3e:67:
                    8a:8b:ab:00:c8:97:96:8d:ee:2f:c9:72:e8:8d:95:
                    33:25:0f:13:13:83:29:fa:f3:b6:82:4f:24:19:87:
                    63:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:EA:0C:08:E9:32:34:55:5C:6C:6B:47:16:21:1C:3F:CF:9C:6F:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ca48f95-35ec-4aa1-97a3-249116154b70/03efc522-b39f-3622-9a75-36cea29ac517.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ca48f95-35ec-4aa1-97a3-249116154b70/6ca48f95-35ec-4aa1-97a3-249116154b70.crl

            X509v3 Authority Key Identifier:
                keyid:45:59:1C:04:0C:8E:95:18:61:70:D0:88:51:C6:84:C1:F4:38:3E:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ca48f95-35ec-4aa1-97a3-249116154b70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:4f:f8:a0:6a:95:00:31:f1:86:42:70:4c:f6:8e:55:5e:58:
         b1:be:ea:ad:d8:69:20:8b:68:27:a2:e9:cb:5b:36:94:68:71:
         30:a1:d1:6e:01:4a:5b:ea:28:f4:78:90:39:ec:29:18:e4:0f:
         c2:f7:75:04:49:59:23:03:ac:92:cf:46:74:70:39:de:6e:85:
         94:fe:13:d5:a7:bc:2a:16:7c:05:55:8f:1c:f3:c1:61:91:0e:
         ff:e0:31:f2:f3:5c:17:05:3d:17:c5:5f:cc:97:94:7c:b6:02:
         e2:76:28:3c:57:a2:33:53:11:e5:fd:f9:c9:5f:c3:1c:5f:05:
         18:69:32:e3:9d:1b:7f:2f:3e:0d:52:4c:d9:d8:e5:69:39:df:
         5d:13:ee:8f:5d:a3:d6:ba:99:fd:ca:f4:09:9c:da:27:97:33:
         65:68:35:31:00:7e:80:08:5c:6f:e2:81:2d:95:38:40:f3:a7:
         7d:76:8c:4e:03:00:7e:09:05:32:65:ae:7f:61:b7:3b:a5:c9:
         03:5f:38:49:87:67:02:f2:77:af:01:d8:5e:2d:d5:9d:2f:f9:
         ce:8e:11:b7:42:92:8e:ad:e0:73:68:ea:e7:e2:82:d3:a4:e9:
         80:5b:12:fb:27:68:cf:bb:f3:e2:b3:e7:6c:24:69:ad:74:40:
         31:e0:d9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 07:48:26 2026 by rpki-client