Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8bfe350f-c2d9-3a81-a6c7-f83189858b48.roa
File:                     8bfe350f-c2d9-3a81-a6c7-f83189858b48.roa (raw, json)
Hash identifier:          QJDDvEJomAHjNj/AnV619g5KFnJAfsFie8aqDQrMllI=
Subject key identifier:   32:E9:D6:70:1C:90:34:6D:CC:EE:92:80:C0:25:DB:08:8C:10:B7:9A
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D3F64F2790F960EB757CE3DC0
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8bfe350f-c2d9-3a81-a6c7-f83189858b48.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     64267
IP address blocks:        141.164.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:f2:79:0f:96:0e:b7:57:ce:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=b02db4f1-65a6-4f82-988f-63984d273834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fd:f6:c8:b3:53:7c:39:2f:db:50:fb:4e:c2:
                    49:62:dc:21:82:8d:2f:ad:ba:55:3d:68:87:0a:0a:
                    83:df:06:a5:72:91:b4:51:2e:57:48:e8:5d:be:eb:
                    fa:06:c4:78:18:cc:37:af:93:b7:9c:a9:cb:8c:66:
                    fe:5f:6c:34:b4:c1:98:3c:06:11:c5:f0:ff:13:16:
                    67:76:d7:91:b3:c4:9b:c5:f2:72:df:5c:8a:fe:01:
                    55:1a:0c:43:0a:28:17:3e:0c:cf:db:4b:9c:8f:6b:
                    ac:82:5b:d2:1f:71:bf:79:0f:5b:57:47:44:99:b3:
                    c0:8c:cf:bc:5b:11:71:1f:81:a8:ff:fb:11:c8:30:
                    f9:cf:76:bd:f2:26:13:c2:a1:e6:46:34:13:96:ca:
                    a9:eb:e2:14:4a:6a:96:2e:48:8d:4c:1a:76:ad:86:
                    33:8c:13:d1:99:62:a3:ee:f8:66:4e:e8:b9:a2:43:
                    c1:4e:15:37:49:eb:9a:8f:e7:6a:4c:23:9f:e1:8a:
                    ea:32:a4:63:9e:c7:88:03:6c:37:13:59:97:c7:d9:
                    c6:4f:4f:59:3b:e9:10:2f:66:52:8d:75:a8:56:50:
                    c5:52:21:d2:00:fa:5a:18:6e:fb:4e:6e:4d:76:0f:
                    9c:01:74:31:26:6b:eb:31:c2:b1:e0:01:85:4e:13:
                    a4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E9:D6:70:1C:90:34:6D:CC:EE:92:80:C0:25:DB:08:8C:10:B7:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8bfe350f-c2d9-3a81-a6c7-f83189858b48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.164.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:50:1e:0c:36:98:e6:16:c4:30:a7:1d:db:0b:b8:5c:65:c2:
         62:4e:95:d6:4a:09:5c:81:13:a4:df:21:76:68:0d:ed:51:fd:
         10:89:0c:1e:8c:5f:17:a7:44:2a:04:5f:2c:1c:24:8b:26:41:
         66:6b:2d:9e:6b:de:f0:f4:8e:5f:eb:bc:96:a8:5d:6f:fa:31:
         8f:26:22:05:bb:ee:e7:6c:15:1a:07:ad:ba:56:43:c2:b9:62:
         bb:30:e6:2e:06:e9:28:ed:a9:d3:6d:02:60:40:91:3c:cc:8a:
         24:fa:98:8d:ee:b7:2a:77:2f:71:86:d8:d2:97:8e:d1:12:53:
         ff:fe:51:1f:af:66:24:35:57:1e:77:82:dd:18:70:4a:4a:38:
         f9:c2:52:c5:86:8c:18:19:c7:b9:e7:32:18:5a:21:63:c2:a3:
         3e:62:59:89:64:79:3f:bd:61:f4:9c:f8:4c:74:14:77:99:80:
         38:85:0c:65:d1:89:cf:42:40:cb:9f:7b:3b:e6:3e:d0:68:bc:
         6f:76:83:83:02:57:89:bd:c1:ec:7d:99:a5:8c:03:e6:c5:0c:
         17:79:69:b1:29:35:31:30:ca:eb:5e:5e:33:23:a0:1c:d0:cc:
         28:d8:46:eb:68:b7:05:f3:46:fa:0b:ca:a4:d5:eb:c3:5e:c8:
         03:3d:08:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:37:02 2026 by rpki-client