Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c6a526ac-3ad6-3b43-b045-a9847b2d937a.roa
File:                     c6a526ac-3ad6-3b43-b045-a9847b2d937a.roa (raw, json)
Hash identifier:          0z6t7bWv+InBh4hn8QimiXB55f1ilSNczKajau3G2rw=
Subject key identifier:   7A:6C:58:F5:AB:1A:DE:28:B8:C9:41:96:CE:A7:AE:0C:7E:3C:48:78
Certificate issuer:       /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial:       010D0C9F4328584D8EF54C227DE3EB255293F140
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c6a526ac-3ad6-3b43-b045-a9847b2d937a.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        144.25.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:4c:22:7d:e3:eb:25:52:93:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=7f0e7758-1ed4-437a-bd3f-b36167d118cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cc:b8:21:0c:bc:a4:ec:d9:2f:6b:e4:77:de:
                    b0:35:ce:f6:63:07:ca:8b:71:24:ce:9c:f6:4d:f6:
                    ac:a0:ac:da:c2:a5:39:a3:cf:aa:f5:61:15:aa:72:
                    64:70:f9:39:1e:3a:e1:e0:31:73:55:3a:3f:14:de:
                    cc:8a:60:ad:91:ca:68:b7:88:38:b8:a2:38:13:da:
                    6f:89:51:e1:8b:43:0f:da:4e:56:13:b1:43:ce:53:
                    b9:5c:09:a9:3b:9b:ab:ce:20:13:2c:4a:63:17:6e:
                    c8:34:6c:f1:57:11:5a:ef:15:50:4b:83:35:91:b7:
                    c1:45:d5:dc:26:f4:00:35:6a:64:58:aa:ee:d0:23:
                    73:32:1d:9e:67:84:ad:a9:77:6d:99:34:8f:54:9c:
                    ba:f1:1a:8f:87:00:d3:0c:62:1b:91:11:b9:06:65:
                    55:e7:e1:22:a9:9b:35:79:3b:37:98:a2:6f:b2:88:
                    bd:55:13:2c:41:b3:28:47:c8:11:b1:23:c0:59:93:
                    95:b4:8f:7d:ab:8f:94:bc:03:c9:c3:e7:81:81:c3:
                    d4:e2:71:92:81:f3:09:20:a6:f1:0c:c9:2e:ea:c3:
                    b7:16:4c:59:a4:ab:7e:c4:d6:f9:5b:14:a0:51:e6:
                    a9:a1:2a:a5:81:86:91:15:6a:7c:ad:9e:f6:2d:0a:
                    5f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6C:58:F5:AB:1A:DE:28:B8:C9:41:96:CE:A7:AE:0C:7E:3C:48:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/c6a526ac-3ad6-3b43-b045-a9847b2d937a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl

            X509v3 Authority Key Identifier:
                keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.25.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:68:3b:bb:a6:00:f5:6a:8a:18:91:2c:ff:60:75:3d:b1:96:
         69:2a:85:94:c3:de:dd:34:93:61:46:8c:fd:0f:02:8e:72:3f:
         e9:77:04:14:f9:33:be:25:ea:6c:75:ce:e2:64:2f:28:2a:6f:
         88:91:4b:14:13:25:a8:39:e8:72:eb:82:9a:7e:98:0f:27:96:
         db:7b:82:52:7c:35:4e:bf:78:26:b3:20:d6:20:79:e8:ea:c8:
         b6:db:1a:61:60:a1:22:7f:af:de:0d:05:89:42:6b:77:05:00:
         38:78:11:5d:e0:27:13:72:eb:d3:fd:79:79:77:01:1b:6c:1d:
         24:8b:dd:ba:4f:e2:ff:0f:a3:ba:f1:f0:f0:99:77:e1:28:fa:
         ca:2e:cc:d1:d3:4d:8b:df:0d:bc:28:23:90:17:0c:8e:92:bf:
         cc:01:6a:dc:81:a9:55:fe:27:1f:64:c1:08:d9:71:52:f1:50:
         30:97:52:cb:bf:f2:07:2d:3a:9d:6d:7a:ce:e2:42:c1:53:42:
         5b:5b:1b:06:b7:e2:92:39:bd:8f:1a:81:c2:b2:a2:b3:ef:88:
         c5:c7:ef:6d:60:13:77:42:e3:93:49:ce:d0:f3:c2:c4:42:71:
         04:2b:15:0c:eb:0e:f7:ab:ef:17:5a:ba:f1:0a:ee:3a:59:d3:
         e2:ee:74:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:58:50 2026 by rpki-client