Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/28c1eeab-c5dc-30c5-b684-5d677df94974.roa
File:                     28c1eeab-c5dc-30c5-b684-5d677df94974.roa (raw, json)
Hash identifier:          3bL1MZV760i0vahKNAYmkG3Qq5Jg0wb4e1K/RsGF5nk=
Subject key identifier:   67:BC:16:E2:5B:68:7B:A6:51:73:03:84:73:A1:F4:B0:E1:89:D8:E8
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584DCAFAFB977AF4BA525D090900
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/28c1eeab-c5dc-30c5-b684-5d677df94974.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     13760
IP address blocks:        142.190.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fa:fb:97:7a:f4:ba:52:5d:09:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=31c06eab-94d3-41a5-b2f6-12da2f590e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4b:c4:14:fe:b3:43:69:c8:60:71:7c:08:f7:
                    77:c7:9b:7f:cc:aa:b5:90:26:df:ce:da:b4:40:c8:
                    2c:b6:6d:60:65:46:73:41:03:b0:7e:0f:0e:28:50:
                    72:98:51:eb:2a:76:d2:83:31:19:10:90:63:47:5e:
                    cf:10:a8:25:2c:b0:a9:51:7e:51:88:95:85:4c:64:
                    7a:fc:d4:90:65:c8:2c:ef:fb:35:e8:2c:02:88:a9:
                    33:d4:1c:f3:6f:ea:33:39:9f:74:15:b2:d4:47:07:
                    e8:17:64:5c:64:73:78:6d:4b:81:b3:fa:30:98:d7:
                    40:ee:9f:0f:5f:7e:49:8a:f6:05:55:b8:7f:ed:72:
                    bd:06:ee:94:c5:3c:55:b8:0c:e3:b0:87:a4:e5:0c:
                    f0:17:5a:3d:f7:1c:fd:1f:a4:dd:97:91:f9:b0:d7:
                    1a:22:20:d1:86:80:e2:48:d8:5d:6a:23:1c:16:1a:
                    4c:7a:09:cb:85:ee:e2:0f:3b:2a:8a:1c:98:da:79:
                    10:98:8f:23:b9:7a:ab:ff:4f:27:6d:58:cd:93:85:
                    50:fb:a9:ab:37:a8:8a:31:42:6e:27:44:40:d4:cd:
                    f7:b8:23:1d:6a:cb:cd:03:53:c8:30:b8:6b:8d:c0:
                    93:29:b9:e9:3d:75:00:14:42:8e:e4:a6:5d:bf:96:
                    36:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BC:16:E2:5B:68:7B:A6:51:73:03:84:73:A1:F4:B0:E1:89:D8:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/28c1eeab-c5dc-30c5-b684-5d677df94974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.190.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:57:63:c9:cf:bb:16:20:c3:df:6e:9c:d1:84:53:d6:f7:fb:
         b2:09:78:04:d5:fd:ab:e8:23:2e:df:68:9f:a3:c2:46:b4:71:
         a7:a3:79:91:4c:59:c2:d6:07:6a:4f:30:88:8f:45:a4:68:79:
         44:b1:67:9a:a7:d3:34:f9:27:e7:94:fb:fb:b5:29:0c:28:26:
         5d:03:db:bd:98:b1:63:2a:63:a4:ad:50:09:6d:b9:59:8e:f3:
         2b:f9:3a:ec:35:6c:e6:b2:65:98:19:03:cb:89:92:ee:69:9c:
         39:35:a4:f8:54:fa:30:43:ce:3e:66:0e:3e:24:0e:84:dd:00:
         95:58:fc:18:45:56:a5:20:b3:3a:e0:a3:74:68:49:31:00:6c:
         df:ad:7e:c2:68:19:43:15:07:12:7f:e5:9f:7b:b3:83:29:e9:
         5b:26:38:61:af:a3:08:38:fe:25:f8:72:e5:6e:2c:a1:f8:97:
         70:6b:f9:11:cb:0a:6e:4b:1a:40:a2:15:fd:1f:76:2a:46:3b:
         bc:4e:e9:03:b7:72:ef:fa:cc:9f:b2:c4:3a:da:9d:af:91:21:
         f1:3b:ce:38:00:d6:54:f8:cc:2a:52:fe:2a:f5:b4:b1:66:af:
         b3:6c:a8:34:b3:22:12:c7:e7:90:6f:63:d8:87:c8:d6:d4:92:
         36:ee:8a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:49:34 2026 by rpki-client