Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/1063c667-f4fc-3073-8598-e2cff8a348cc.roa
File:                     1063c667-f4fc-3073-8598-e2cff8a348cc.roa (raw, json)
Hash identifier:          Jo4kvHWG+SAWO3vlLNYO/y1IsgUVmvPch0RA1HfI8dg=
Subject key identifier:   96:D0:00:C6:82:4F:C3:AA:19:1C:9C:D7:DE:96:47:71:62:D0:5F:EF
Certificate issuer:       /CN=94f623e7-c6be-4c3b-b554-6ad6acb0850b
Certificate serial:       010D0C9F4328584D37B3423CA7C4D82D52D83A80
Authority key identifier: 91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/1063c667-f4fc-3073-8598-e2cff8a348cc.roa
Signing time:             Thu 19 Mar 2026 06:52:13 +0000
ROA not before:           Thu 19 Mar 2026 06:52:13 +0000
ROA not after:            Wed 17 Jun 2026 06:52:13 +0000
asID:                     40115
IP address blocks:        142.248.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:37:b3:42:3c:a7:c4:d8:2d:52:d8:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94f623e7-c6be-4c3b-b554-6ad6acb0850b
        Validity
            Not Before: Mar 19 06:52:13 2026 GMT
            Not After : Jun 17 06:52:13 2026 GMT
        Subject: CN=f7eac022-c5d7-4af3-b5c5-1292e3b1142e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:13:aa:8d:56:a0:ea:5f:cf:27:15:5e:1c:4a:
                    e5:d0:7d:6a:e6:33:50:b7:2f:4d:4d:29:27:d4:25:
                    30:a7:d2:5e:44:03:3e:d3:92:80:21:41:11:ac:d3:
                    59:9b:6c:be:7e:9b:17:30:50:80:21:87:a2:62:a3:
                    68:3a:7d:d4:42:66:2c:6b:ab:13:cb:e5:7e:9f:86:
                    5d:de:27:53:ba:a4:a5:82:66:b9:5f:d7:21:ee:eb:
                    9b:b2:12:5a:c4:19:a5:ec:80:57:8f:ab:6e:5f:ce:
                    2d:bb:88:0a:a5:fc:10:1f:87:69:47:77:06:cc:40:
                    01:c0:12:59:49:fe:cb:84:26:89:56:28:7c:cd:19:
                    f3:b0:e9:4b:97:c2:82:b7:ea:9e:ce:3f:49:9d:d3:
                    5a:7b:a1:e8:01:5d:da:da:d1:db:89:34:a6:62:9b:
                    a9:5a:07:ef:f6:50:ff:61:c7:f5:0f:fb:a2:95:57:
                    14:80:a3:05:e5:ac:5a:a5:b4:a1:09:f7:f1:65:da:
                    86:52:7f:16:39:08:15:49:99:ce:47:fd:b1:0a:38:
                    3f:e1:5e:16:61:49:c0:f4:6c:9f:77:1c:c1:bb:57:
                    0a:4f:ca:24:d5:63:71:21:8e:35:41:78:19:34:14:
                    cf:42:e3:b3:90:17:a3:56:c9:37:27:53:da:79:9f:
                    55:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D0:00:C6:82:4F:C3:AA:19:1C:9C:D7:DE:96:47:71:62:D0:5F:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/1063c667-f4fc-3073-8598-e2cff8a348cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b/94f623e7-c6be-4c3b-b554-6ad6acb0850b.crl

            X509v3 Authority Key Identifier:
                keyid:91:C5:DB:1E:DC:A5:61:2B:84:0B:A0:AE:A4:8D:64:C5:05:C8:10:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/94f623e7-c6be-4c3b-b554-6ad6acb0850b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:12:22:ed:70:88:ec:af:8f:c9:19:cb:a0:77:9d:bb:82:f7:
         25:8e:05:95:37:c9:5b:49:e2:79:9c:22:f6:01:01:95:fa:0f:
         a7:a7:24:88:a7:9c:26:61:3e:bf:51:9b:f5:80:de:9e:48:44:
         5d:3e:8c:1d:37:50:da:06:91:92:63:e8:bb:75:74:70:ab:02:
         d0:82:7d:3c:c2:dd:f8:f4:52:af:37:e4:9c:a0:fa:bd:29:aa:
         c5:4e:7a:db:41:44:36:5b:13:47:13:32:2f:51:94:ac:e7:2d:
         3a:37:93:ab:87:18:f6:6a:85:a4:d2:f3:f4:e4:24:c7:bf:66:
         b7:65:23:72:51:9b:5c:f6:a1:94:1d:67:d2:f8:bb:ad:5d:8d:
         f6:d9:86:9a:58:cf:6e:90:0f:11:29:b4:e1:a2:82:26:16:bf:
         aa:a9:f7:9c:30:72:96:9b:06:60:9b:02:f8:bf:4f:6c:06:7b:
         18:f3:06:53:0d:25:e6:22:68:fd:17:30:4e:3a:64:98:01:6f:
         6f:c6:01:a4:b7:45:02:9e:5e:94:eb:e3:67:39:70:cc:f2:d6:
         76:33:61:1c:d2:c1:87:ef:cf:9a:33:d1:2c:66:00:69:af:18:
         83:37:83:3e:e1:6c:4b:d1:72:66:19:d8:52:26:fc:60:d6:be:
         e8:a8:4b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:07:00 2026 by rpki-client