Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/612681a6-2292-3cf2-8417-673e8da09cfc.roa
File:                     612681a6-2292-3cf2-8417-673e8da09cfc.roa (raw, json)
Hash identifier:          6EVKD8jn9G8XFiap5iq+e+RC6NIedFc6/Qr7ZS1jP/8=
Subject key identifier:   94:17:D7:7F:18:3F:63:F1:88:25:A7:C6:DA:77:64:0F:C1:70:B3:A4
Certificate issuer:       /CN=a7804dec-fd00-426f-bba4-038d9b753fc5
Certificate serial:       010D0C9F4328584D11C353CF9106FEBDE1357A80
Authority key identifier: 68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/612681a6-2292-3cf2-8417-673e8da09cfc.roa
Signing time:             Thu 05 Mar 2026 16:43:53 +0000
ROA not before:           Thu 05 Mar 2026 16:43:53 +0000
ROA not after:            Wed 03 Jun 2026 15:43:53 +0000
asID:                     54702
IP address blocks:        142.249.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:c3:53:cf:91:06:fe:bd:e1:35:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7804dec-fd00-426f-bba4-038d9b753fc5
        Validity
            Not Before: Mar  5 16:43:53 2026 GMT
            Not After : Jun  3 15:43:53 2026 GMT
        Subject: CN=0be6d2b5-d62c-43b6-ae1a-ca5821938d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e5:5a:ba:c2:2d:5b:76:7f:dc:73:1d:23:6b:
                    cc:37:f3:a1:00:9b:9e:3e:cd:8a:9d:e5:bc:ec:2b:
                    ef:ae:02:d7:b5:a8:ab:04:84:bd:91:bf:22:f9:df:
                    09:21:d0:ca:5f:d1:2e:c6:f6:e1:ca:98:30:e1:b7:
                    f2:8a:89:8f:7a:8d:36:89:49:bd:a1:ce:79:62:79:
                    eb:5c:77:65:fd:36:b8:b5:b2:ac:9f:01:d2:55:9a:
                    e4:a7:3d:93:b9:c2:79:01:db:99:a7:90:69:9e:88:
                    64:32:8a:27:4b:22:25:44:26:0f:e6:d3:0a:ac:c5:
                    5d:c3:1b:28:60:24:97:e1:18:26:42:48:31:03:54:
                    24:24:76:21:e5:2d:6d:6c:f7:9a:c0:09:ec:a8:b7:
                    ec:f4:ea:d5:b9:3b:34:a5:84:ab:ef:f8:95:a2:b4:
                    a7:13:9b:23:3b:b8:87:05:6c:c8:7d:eb:df:00:0d:
                    ee:0f:0d:5c:91:66:c7:d7:46:32:a7:7f:36:74:40:
                    4a:e0:45:c2:d4:61:bb:56:36:4f:e3:32:89:6b:67:
                    1a:ba:b1:bc:19:c2:7d:3a:37:6d:1b:c6:2c:10:7d:
                    59:de:2d:75:e9:71:52:cf:17:4a:2f:1e:e9:39:ef:
                    32:7c:d5:26:62:b0:db:de:f2:c8:47:63:dc:95:25:
                    f5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:17:D7:7F:18:3F:63:F1:88:25:A7:C6:DA:77:64:0F:C1:70:B3:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/612681a6-2292-3cf2-8417-673e8da09cfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl

            X509v3 Authority Key Identifier:
                keyid:68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:c7:ee:66:1c:6e:88:38:8f:23:e4:cd:f2:97:4a:f6:6d:fa:
         44:4c:0c:86:5f:61:71:83:1a:f8:5e:cf:fe:f8:94:7d:7a:ed:
         ee:8a:85:be:44:a2:d4:14:db:9b:d3:15:11:1e:11:e1:1d:c5:
         60:b8:f1:dd:9c:0e:32:2e:94:94:de:65:ec:d6:40:7f:fa:6f:
         ac:fe:4c:72:0d:fd:54:12:0e:df:0a:42:c5:33:23:02:03:d4:
         30:9d:7d:42:ab:8f:fd:3f:e8:e7:87:4b:62:af:22:47:02:69:
         2b:c6:de:05:5e:ce:57:f1:4d:2a:7d:45:34:df:2c:62:c7:af:
         d7:18:df:d2:05:1c:4b:1a:12:8b:08:9a:a4:92:42:e9:5d:eb:
         c6:82:1b:d1:c8:b9:4f:71:67:d0:cd:92:5b:33:92:f4:85:77:
         48:20:f0:25:23:ee:ba:c1:b4:ac:52:a6:02:ec:27:b2:ec:87:
         c5:de:12:c2:5b:94:7c:3f:d5:1c:84:aa:60:58:a3:2e:77:1a:
         7a:29:7a:b8:33:91:b2:65:9c:dd:a8:82:32:c7:a7:fb:cf:88:
         1d:19:6b:19:a1:2f:eb:83:d2:f3:10:54:80:1f:8d:9a:56:42:
         71:e2:a4:7b:ea:32:28:b5:64:a6:70:96:79:a8:cb:7c:04:e5:
         23:48:25:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:28 2026 by rpki-client