Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/48aa2ac1-aac8-3382-92a2-8a030207b08b.roa
File:                     48aa2ac1-aac8-3382-92a2-8a030207b08b.roa (raw, json)
Hash identifier:          H+guoR2RNGo8EprPo8aTfVskOtUEM6+LMkwyrjZRwJ8=
Subject key identifier:   74:0E:1A:F1:E8:B2:BE:0A:BA:B2:EC:53:1C:83:90:95:36:EA:F1:C3
Certificate issuer:       /CN=20c4af79-cdcf-4640-ab4e-f0f33648cc55
Certificate serial:       010D0C9F4328584E4AEF31D58BA2A20CE8855C00
Authority key identifier: 54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/48aa2ac1-aac8-3382-92a2-8a030207b08b.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     12186
IP address blocks:        199.168.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:31:d5:8b:a2:a2:0c:e8:85:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c4af79-cdcf-4640-ab4e-f0f33648cc55
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=05a62744-0d7c-49eb-ad20-aac462cfd268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6c:43:21:a5:56:8a:12:e1:11:05:25:9a:89:
                    db:5a:a4:bf:67:9c:da:dc:bb:d3:01:6a:8f:7b:15:
                    55:de:09:81:fd:84:45:b6:f6:63:97:26:91:8e:bd:
                    e0:cd:34:ad:80:22:57:d0:3f:5c:42:de:7d:14:ab:
                    93:fd:6d:d7:63:a8:29:24:9f:58:11:8d:91:4a:bd:
                    b9:ce:57:92:bd:06:8a:f3:8a:fa:26:61:ff:83:e6:
                    0b:be:a0:7e:72:00:e7:d5:a3:db:7c:36:40:11:af:
                    06:04:f1:fe:77:4c:40:4d:f5:4d:ef:6e:d1:36:fc:
                    ec:87:d9:b9:27:98:33:5b:13:f8:4c:a6:0c:fe:e4:
                    fa:65:d0:0d:5b:fc:6f:7f:3a:2e:8e:7e:66:86:0a:
                    f4:a4:02:59:5b:d6:e4:ba:0b:ce:d9:5c:41:6c:79:
                    19:81:e1:81:47:d0:c1:d8:66:c1:62:d0:16:63:70:
                    97:5b:67:75:1e:2e:b1:5b:f7:9d:d7:22:3a:f6:49:
                    66:58:32:af:79:d6:98:84:2f:c8:7b:77:e2:8e:e6:
                    d7:11:c8:3b:e6:b0:9d:c1:1f:0a:be:3b:5a:aa:58:
                    ba:a9:46:11:97:00:7d:dc:e6:50:53:06:c5:27:32:
                    80:ab:d5:2f:a9:d7:27:53:09:63:74:7a:cf:76:ef:
                    52:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0E:1A:F1:E8:B2:BE:0A:BA:B2:EC:53:1C:83:90:95:36:EA:F1:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/48aa2ac1-aac8-3382-92a2-8a030207b08b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55/20c4af79-cdcf-4640-ab4e-f0f33648cc55.crl

            X509v3 Authority Key Identifier:
                keyid:54:9B:21:17:72:B9:2D:EC:3D:5D:62:81:0A:6C:CF:F7:A7:62:43:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/20c4af79-cdcf-4640-ab4e-f0f33648cc55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.168.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:51:fd:bb:dc:83:57:05:45:80:1e:51:88:f8:9c:92:98:ba:
         38:22:38:13:aa:ac:e9:5f:86:b7:a3:f3:52:76:c1:84:da:95:
         8e:cc:51:79:3d:92:a7:47:0e:da:52:ca:89:64:72:80:1f:ed:
         d8:31:e1:75:27:9b:a5:8b:66:69:a9:ee:30:f7:26:a1:50:88:
         95:03:e7:05:6b:8a:69:11:57:3e:bf:13:cc:3c:be:ea:1d:de:
         58:fa:61:6a:05:04:28:6a:c6:9d:03:a7:eb:61:63:ad:70:41:
         a7:40:ad:67:c0:f9:86:a1:4f:6d:d0:54:aa:ce:17:a1:f8:03:
         31:7c:60:9f:70:34:da:d2:c7:ac:dc:2e:82:37:43:c9:42:f0:
         b7:ed:86:a6:ed:6e:7a:93:56:34:fa:66:dd:83:57:1f:7f:76:
         5e:8d:52:5a:a0:20:19:43:d5:0a:3b:9c:21:6e:e4:40:62:cd:
         de:54:f3:56:bf:5a:b3:af:2d:01:17:4c:d6:1d:c4:07:24:7d:
         8e:c5:87:f9:f9:94:70:0d:06:c4:a6:68:3d:dc:f8:07:dd:82:
         e0:a1:19:c0:21:0b:bd:d0:6f:ce:06:35:ce:3b:5a:69:2e:88:
         f8:5e:a7:8e:de:f2:e1:eb:8f:03:6e:7c:c3:60:cb:53:3c:4b:
         18:19:42:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 22:01:50 2026 by rpki-client