Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/4c26a934-3e5e-3711-990b-a055eb96a2a7.roa
File:                     4c26a934-3e5e-3711-990b-a055eb96a2a7.roa (raw, json)
Hash identifier:          0Pi3/ChukiSqgS3eCwC1z8IzIO/8D296Gd5UkwKLnvg=
Subject key identifier:   86:38:6A:F0:24:6C:3E:EE:44:13:D1:A1:1C:2A:4B:54:BE:4F:A1:F9
Certificate issuer:       /CN=32652e19-5988-41fb-a45a-66b23c523f3b
Certificate serial:       010D0C9F4328584DBBA037092E1B073769925000
Authority key identifier: AD:62:7B:72:F7:89:87:43:6D:64:C2:53:C2:E3:85:D1:6C:F2:B5:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/4c26a934-3e5e-3711-990b-a055eb96a2a7.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     22773
IP address blocks:        142.248.112.0/22 maxlen: 22
                          142.248.112.0/24 maxlen: 24
                          142.248.113.0/24 maxlen: 24
                          142.248.114.0/24 maxlen: 24
                          142.248.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:37:09:2e:1b:07:37:69:92:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32652e19-5988-41fb-a45a-66b23c523f3b
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=44188296-1c42-491e-bc6a-abbed0773031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e7:d6:06:76:79:86:34:84:e5:d6:6e:a9:6b:
                    ee:96:90:6a:2f:72:d9:77:f8:8b:89:d2:4a:a9:06:
                    39:bd:c3:10:72:cf:41:1e:a5:83:a4:c8:e5:a3:cf:
                    07:c9:c1:31:4c:af:fd:2f:96:60:25:f8:c0:00:34:
                    0d:e6:ec:b8:52:ce:08:86:60:b0:a7:31:7e:7c:ac:
                    97:90:30:06:49:cc:35:b6:52:cc:6a:cc:df:2d:d9:
                    a2:bd:2b:3a:29:d3:99:af:bf:97:42:b0:44:ae:f3:
                    68:c6:df:56:09:20:f6:ca:b1:d9:4e:ab:75:ca:a9:
                    a4:af:f2:43:cf:85:58:c4:ba:63:17:f1:92:d5:2b:
                    d0:e1:30:99:2d:e9:7a:c6:0a:c4:50:51:76:d5:18:
                    f7:6b:2d:f2:93:45:3e:59:67:07:a8:81:a5:de:bf:
                    55:39:d5:ad:6c:73:bf:e1:2e:76:87:ae:bf:01:4d:
                    5c:0f:78:e3:85:f5:b5:35:26:59:5f:8d:4c:e3:d3:
                    db:c4:d3:28:bc:ec:e4:7b:ee:76:fe:81:76:43:ba:
                    98:b0:69:5e:d5:f6:25:07:5c:74:1c:3d:73:ad:f2:
                    e9:b9:a1:8c:71:8d:23:86:b1:e2:06:80:82:8c:15:
                    77:62:0b:5d:cc:31:d5:af:8a:96:ae:37:a5:db:d4:
                    b1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:38:6A:F0:24:6C:3E:EE:44:13:D1:A1:1C:2A:4B:54:BE:4F:A1:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/4c26a934-3e5e-3711-990b-a055eb96a2a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.crl

            X509v3 Authority Key Identifier:
                keyid:AD:62:7B:72:F7:89:87:43:6D:64:C2:53:C2:E3:85:D1:6C:F2:B5:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:08:5b:ab:93:d8:f2:84:c5:59:fc:83:99:b9:21:6f:af:df:
         48:fe:db:90:ec:71:1b:26:37:f2:67:f6:55:0b:14:06:f8:6f:
         e4:38:9c:a8:a2:bf:7b:3b:49:ab:c1:3d:fe:59:31:8c:61:f6:
         d4:fb:e6:39:39:b0:bd:25:db:88:3f:c6:43:91:30:23:36:f0:
         ed:6b:52:33:c7:f2:b4:25:b3:a7:78:ab:d1:03:10:2e:4e:db:
         4c:3a:98:c9:eb:21:3b:34:89:85:8c:2e:c6:c9:c6:35:53:d8:
         07:5b:ea:e6:66:79:17:2d:a3:c0:50:89:8e:8d:0e:14:18:74:
         5b:fd:0b:6b:90:e6:54:81:c0:92:c1:37:57:c1:8f:52:47:b4:
         55:a9:5d:dc:b4:da:8a:d7:8c:a9:9c:a9:ff:79:b0:01:04:7d:
         97:46:ab:06:f2:29:8d:2d:31:aa:e3:be:61:00:91:b5:73:31:
         e0:6f:e6:20:8c:2e:6e:96:f4:9f:21:23:1a:20:d8:a0:fc:ed:
         72:87:4b:95:41:69:9f:d6:60:1f:93:ac:b3:14:98:88:26:b3:
         fe:7b:67:ed:6f:35:8a:9c:d0:6e:91:ce:b8:1c:ed:42:25:e8:
         6a:cb:89:37:3f:88:80:97:28:be:1c:07:63:9d:59:62:06:a1:
         6d:fc:de:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:06:11 2026 by rpki-client