Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/7279c7ac-845f-3cff-b79d-76fdd6654213.roa
File:                     7279c7ac-845f-3cff-b79d-76fdd6654213.roa (raw, json)
Hash identifier:          wGslW5j6CC9WK3216nU/1OKRjVEu6KveXY6hGyfpmOs=
Subject key identifier:   7A:15:51:3D:87:06:55:44:7A:9A:A5:EA:24:F8:4A:79:7C:51:4B:02
Certificate issuer:       /CN=268f6692-999f-4dd3-86b7-32b134a18d56
Certificate serial:       010D0C9F4328584DCAFB1FEBBE0B86C065145B80
Authority key identifier: 99:81:0F:AE:8E:AD:4B:BE:1C:28:C7:AB:DB:FC:FA:25:5D:EE:47:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/7279c7ac-845f-3cff-b79d-76fdd6654213.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     401459
IP address blocks:        142.248.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/268f6692-999f-4dd3-86b7-32b134a18d56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/268f6692-999f-4dd3-86b7-32b134a18d56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:1f:eb:be:0b:86:c0:65:14:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=268f6692-999f-4dd3-86b7-32b134a18d56
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=c93ff8e4-05cb-4945-9ce6-30493b9de017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4f:4a:c8:8d:53:ec:b3:b5:54:90:fd:45:a9:
                    56:88:7a:2f:4f:98:82:4a:8f:b3:0e:2a:54:49:87:
                    5e:cd:c3:14:10:de:a3:0e:f2:02:18:b8:94:50:27:
                    22:00:44:1c:11:f0:96:20:fe:f7:77:33:50:65:ac:
                    e0:60:41:63:71:28:d1:4c:92:c1:e1:61:2a:5b:69:
                    d8:3d:eb:47:ba:df:fe:2e:8b:28:e5:04:f7:ec:04:
                    ee:7d:33:2a:ea:9c:40:f5:c3:1e:bd:93:f4:ea:99:
                    73:e1:ff:d5:b5:16:79:7c:7b:98:37:d1:a7:81:9d:
                    57:91:ae:ef:43:4a:74:2b:6f:cb:5e:1a:9a:1e:40:
                    89:05:0b:1f:e4:22:19:f4:52:13:dd:ab:d4:39:99:
                    64:39:ab:51:69:a2:23:bc:e1:bf:e9:a6:e9:9b:3d:
                    8c:70:e1:75:05:82:8d:c9:9e:0f:5f:79:33:bf:c7:
                    23:dd:1e:4f:42:d2:9f:a0:d0:06:42:b4:5b:28:47:
                    6f:4f:3d:2e:41:a3:73:d4:a8:a6:29:ff:03:3b:23:
                    3c:b6:cc:c7:e7:17:a1:2f:0c:26:09:48:d3:1b:06:
                    49:62:e4:1a:ff:37:ce:6d:2f:7b:03:b7:b9:d6:02:
                    bc:d2:28:c0:ac:8e:25:1a:ea:4e:ec:17:ec:b5:82:
                    3a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:15:51:3D:87:06:55:44:7A:9A:A5:EA:24:F8:4A:79:7C:51:4B:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/7279c7ac-845f-3cff-b79d-76fdd6654213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56/268f6692-999f-4dd3-86b7-32b134a18d56.crl

            X509v3 Authority Key Identifier:
                keyid:99:81:0F:AE:8E:AD:4B:BE:1C:28:C7:AB:DB:FC:FA:25:5D:EE:47:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/268f6692-999f-4dd3-86b7-32b134a18d56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:14:89:4f:7c:d7:c1:82:a7:e7:62:20:cb:c7:c6:b5:21:03:
         9f:3b:48:c9:83:db:39:5e:f5:e2:e1:86:a7:c8:b9:ed:67:7c:
         94:4d:14:fb:aa:1d:f2:63:4f:f6:83:3b:cd:15:c7:b8:30:95:
         cd:cd:0f:e9:2b:0e:07:28:52:cf:b6:5f:2c:78:b0:79:31:7b:
         70:41:bd:cf:d7:1e:e8:54:91:c6:9e:77:c3:e5:fb:22:b1:53:
         7f:44:11:c1:73:8e:ab:de:70:d7:2d:ce:09:3a:7c:4d:13:79:
         d3:d0:8e:5e:9f:45:63:61:ff:b1:71:17:49:57:d2:1d:c8:13:
         d1:dd:28:e3:a4:63:c8:50:4e:2c:e4:fd:07:bf:3b:33:fd:53:
         b7:2b:17:f5:2e:1f:cc:ef:cd:6a:2f:0a:0c:93:ee:bf:e7:ac:
         e8:14:1c:14:59:74:d8:cf:3a:b4:f5:ce:3a:7a:86:97:9a:c9:
         f0:c0:c8:ca:b7:ad:3d:f6:4e:41:7d:6f:b3:c1:54:11:27:32:
         e1:ab:bc:da:1f:80:b9:6d:4c:00:a7:f5:a5:ea:47:1a:ae:c1:
         3a:9a:c4:41:44:73:06:12:3b:0c:fd:86:d4:f6:a8:69:ae:f3:
         ed:33:0b:cc:7d:d9:6d:56:a7:86:e5:1d:cb:ed:4f:d8:31:8b:
         9f:9d:9b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:09:56 2026 by rpki-client