Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/7eb728b8-600f-398d-a319-350273e33ff1.roa
File:                     7eb728b8-600f-398d-a319-350273e33ff1.roa (raw, json)
Hash identifier:          V4eqdTTvdPAqepj3uOhUVyUbqshxZv+oRTw6ncxR6W0=
Subject key identifier:   84:6D:15:A6:AC:9A:60:ED:E0:83:22:03:F0:46:72:3D:82:68:89:FD
Certificate issuer:       /CN=32652e19-5988-41fb-a45a-66b23c523f3b
Certificate serial:       010D0C9F4328584DB278B06A786BE4E6A0314880
Authority key identifier: AD:62:7B:72:F7:89:87:43:6D:64:C2:53:C2:E3:85:D1:6C:F2:B5:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/7eb728b8-600f-398d-a319-350273e33ff1.roa
Signing time:             Sat 02 May 2026 06:18:38 +0000
ROA not before:           Sat 02 May 2026 06:18:38 +0000
ROA not after:            Fri 31 Jul 2026 06:18:38 +0000
asID:                     13875
IP address blocks:        142.248.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b2:78:b0:6a:78:6b:e4:e6:a0:31:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32652e19-5988-41fb-a45a-66b23c523f3b
        Validity
            Not Before: May  2 06:18:38 2026 GMT
            Not After : Jul 31 06:18:38 2026 GMT
        Subject: CN=93680f92-838a-4087-97e3-a6adb096fd56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e8:e9:c0:24:13:7e:42:da:28:b4:f3:26:51:
                    06:8d:ea:9a:f3:c6:fd:d1:2e:4e:a1:0f:bc:88:27:
                    44:43:f8:cf:9e:f2:46:6c:33:0c:f7:35:d8:6b:20:
                    f6:be:e1:ea:6a:68:06:d9:ec:97:45:75:61:2a:45:
                    eb:3a:52:ae:3b:34:d0:8f:46:e5:8c:27:74:2e:47:
                    b2:d1:53:b5:50:1e:c2:ef:ea:44:37:e7:12:c1:05:
                    8b:44:c4:cb:22:c3:9f:2f:70:da:c4:62:d7:7e:72:
                    42:3f:6c:c8:36:3c:62:f7:12:85:68:6d:5b:46:76:
                    e2:5e:17:d6:ca:bc:66:65:e4:47:82:7f:f7:f1:9b:
                    05:d8:8c:07:72:e2:54:46:d5:34:4a:c5:8d:3f:20:
                    f6:65:e7:0e:38:fd:66:6f:96:23:83:21:19:08:12:
                    21:66:ee:43:98:db:be:b4:0a:6c:9a:d3:e3:ce:b7:
                    b2:be:53:2c:39:05:c0:20:98:f1:49:10:df:b9:7e:
                    ff:c8:9e:ca:8f:01:58:7d:94:4b:67:29:13:66:f3:
                    60:56:c1:2d:aa:6d:8a:0f:1f:f5:92:e9:84:0c:e4:
                    ce:d3:76:7c:6b:7b:29:e2:84:10:b2:9d:23:a0:88:
                    4c:d3:33:69:b4:85:ac:ae:de:44:52:68:54:5c:6a:
                    08:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6D:15:A6:AC:9A:60:ED:E0:83:22:03:F0:46:72:3D:82:68:89:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/7eb728b8-600f-398d-a319-350273e33ff1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.crl

            X509v3 Authority Key Identifier:
                keyid:AD:62:7B:72:F7:89:87:43:6D:64:C2:53:C2:E3:85:D1:6C:F2:B5:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:a3:c2:eb:3d:f6:14:1d:ac:81:01:76:3a:15:c0:91:3b:c1:
         94:df:04:10:b4:bf:c9:34:f4:ad:6a:7d:88:02:3e:fd:07:6b:
         d4:41:34:a8:bc:a6:84:6c:bd:3c:7a:aa:f0:eb:60:c6:16:fe:
         be:c4:79:5d:ac:55:16:7e:0e:4c:d7:0a:ef:19:ff:e4:78:7a:
         69:1d:3c:c1:de:67:ee:66:1a:22:74:ec:ff:a7:77:83:1c:65:
         7f:28:58:d2:e4:6a:8d:13:f8:74:dd:57:20:83:a9:b9:2b:ec:
         a9:0a:86:e1:3b:75:cc:96:c2:3e:11:6e:03:6f:49:46:e2:f6:
         f7:e5:23:b8:86:cd:64:48:16:b8:89:91:4e:12:b4:eb:14:25:
         af:1c:c7:31:20:99:dc:bc:5d:99:5a:bf:3d:4c:01:b9:86:00:
         b0:06:43:34:93:f0:eb:a0:17:fc:9e:ac:61:70:7d:8b:db:94:
         a7:04:fe:c9:66:4c:f4:c2:0f:cc:f8:a5:eb:f0:1b:0b:15:ee:
         61:d2:cd:79:fd:e0:ff:9c:9f:e9:64:70:c6:ec:34:a4:19:91:
         6b:5d:d4:9f:4d:43:6f:78:95:99:4d:ac:6c:cf:04:51:5c:80:
         a3:01:55:9f:61:ca:70:4e:f5:5b:1b:f1:48:ad:5e:8d:76:2b:
         21:5d:bc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:22 2026 by rpki-client