Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/303e9955-d68e-32c2-a271-3e5a2b3464ba.roa
File:                     303e9955-d68e-32c2-a271-3e5a2b3464ba.roa (raw, json)
Hash identifier:          xWnulM/vVBAZ+kXZIfTVTg+wb/cteFrBNbHXKi9aUHw=
Subject key identifier:   F3:7A:17:69:B7:C7:98:7F:8C:25:23:DE:38:31:F2:B4:CA:97:C8:10
Certificate issuer:       /CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
Certificate serial:       010D0C9F4328584EC4D7084EFCA019EF0AD5C6C0
Authority key identifier: C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/303e9955-d68e-32c2-a271-3e5a2b3464ba.roa
Signing time:             Sat 08 Aug 2026 13:00:11 +0000
ROA not before:           Sat 08 Aug 2026 13:00:11 +0000
ROA not after:            Fri 06 Nov 2026 14:00:11 +0000
asID:                     36734
IP address blocks:        148.64.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c4:d7:08:4e:fc:a0:19:ef:0a:d5:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
        Validity
            Not Before: Aug  8 13:00:11 2026 GMT
            Not After : Nov  6 14:00:11 2026 GMT
        Subject: CN=5cf05001-28c0-4b88-b3fb-0ebc80892428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7a:f0:14:cb:c7:c3:0c:8d:24:03:45:dd:2c:
                    b8:54:f3:66:9c:62:fb:13:8d:a6:17:e4:d4:93:f6:
                    ae:d3:a9:da:48:60:12:5d:69:18:4e:c0:aa:bd:1d:
                    3b:2f:64:44:0e:39:d8:fd:73:43:18:10:c7:0c:97:
                    c8:a7:93:92:94:ec:a5:b4:d1:a4:96:e8:cc:15:3d:
                    23:b2:02:aa:7f:f0:d2:0f:48:72:cd:d6:bf:c2:80:
                    1b:f7:9f:16:b5:62:6b:b2:63:2e:4e:14:22:51:57:
                    e9:4b:d5:f1:b8:dd:db:29:71:d8:30:5a:78:9c:1e:
                    05:2b:6b:ff:7d:ed:b4:e5:a7:a7:99:09:ea:24:bb:
                    ee:38:2d:78:7b:db:32:26:24:da:87:82:24:b7:30:
                    dd:9a:ec:b5:1c:ed:00:93:86:10:d3:fe:f9:40:0c:
                    a1:e9:70:0d:3b:ce:3a:df:7d:74:af:22:14:c1:9d:
                    7d:5d:3d:35:e8:78:83:bb:c1:9f:69:c6:01:d5:4f:
                    b5:8e:54:2d:72:40:b4:8f:d8:96:fc:84:d2:af:96:
                    54:06:05:f2:d3:10:f9:e2:b3:5c:07:63:45:6c:32:
                    2f:b6:0a:4a:d1:00:84:4f:39:eb:5c:cc:ae:52:97:
                    95:55:d1:b1:ce:47:33:11:11:a9:f9:e7:ed:9c:68:
                    84:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7A:17:69:B7:C7:98:7F:8C:25:23:DE:38:31:F2:B4:CA:97:C8:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/303e9955-d68e-32c2-a271-3e5a2b3464ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl

            X509v3 Authority Key Identifier:
                keyid:C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.64.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:97:b5:63:1b:bf:c2:ec:e6:14:de:86:cf:4d:e0:f0:40:38:
         68:63:80:ee:09:3a:ea:51:84:f3:46:62:8c:8b:f4:3c:5d:87:
         b6:06:3a:aa:d5:3f:56:27:5f:65:ed:68:92:c9:99:d5:03:cb:
         35:b7:e0:83:36:39:35:bd:b5:27:5a:85:12:cf:9d:8c:79:bb:
         04:1e:f4:40:96:f5:b0:c3:c2:81:41:a5:38:34:2b:b1:5f:9d:
         cf:ff:0d:c3:9c:ef:40:93:ef:e7:a9:70:21:6b:44:eb:5e:c8:
         85:4a:87:ed:2d:7a:9e:eb:a1:8a:bf:4d:88:30:ab:f2:28:36:
         df:4b:7e:3f:5f:a0:40:09:79:64:5f:96:10:35:9e:f0:db:61:
         02:a0:c7:44:b4:16:af:eb:de:bf:4e:a9:29:0f:6d:ce:c3:c7:
         5c:3a:87:6a:06:90:d7:35:b6:14:9f:d0:84:1f:9f:6e:37:25:
         3f:90:a8:73:b3:d6:ce:d2:e9:e4:62:4e:71:7c:eb:3f:f5:3a:
         b1:8c:d3:c3:72:0b:27:3a:54:a6:4d:b8:38:a8:ee:b3:0e:77:
         a5:90:93:ea:a4:23:d4:d3:5b:13:3d:63:4b:34:ba:05:78:fc:
         dc:d7:c1:4e:ae:4d:4f:01:bf:ee:7b:d7:5c:41:c8:56:36:d8:
         de:c6:ad:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 17:25:30 2026 by rpki-client