Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/930cac12-3e16-3d53-81df-1e764a61df53.roa
File:                     930cac12-3e16-3d53-81df-1e764a61df53.roa (raw, json)
Hash identifier:          HVNxgzgogI/cJWOZQ2jh/3n+wG1ek+PxLejJKoXUF5k=
Subject key identifier:   E5:36:2D:C5:17:DF:28:8F:4D:2E:83:0F:33:07:21:2B:5B:10:74:AA
Certificate issuer:       /CN=84facd9b-9eda-4887-bc69-899a3c3aec64
Certificate serial:       010D0C9F4328584EB9AC4C14DA22FF81F6303000
Authority key identifier: C8:97:EA:9D:92:66:CD:A8:E9:0E:91:63:B1:00:70:5F:89:81:E6:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/930cac12-3e16-3d53-81df-1e764a61df53.roa
Signing time:             Tue 04 Aug 2026 13:00:12 +0000
ROA not before:           Tue 04 Aug 2026 13:00:12 +0000
ROA not after:            Mon 02 Nov 2026 14:00:12 +0000
asID:                     63183
IP address blocks:        142.249.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b9:ac:4c:14:da:22:ff:81:f6:30:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84facd9b-9eda-4887-bc69-899a3c3aec64
        Validity
            Not Before: Aug  4 13:00:12 2026 GMT
            Not After : Nov  2 14:00:12 2026 GMT
        Subject: CN=323b70f9-7a82-44cc-8e56-a7060f733c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6b:07:22:69:76:d3:20:3c:e6:e5:28:9d:b6:
                    74:f6:08:28:0a:d4:3b:07:31:19:a0:0b:3d:a7:83:
                    05:a1:36:de:8b:91:17:bc:b0:34:d1:86:23:a9:5e:
                    b3:bc:bc:d9:53:c8:f2:4a:31:3f:eb:12:71:d7:11:
                    66:76:ac:50:fc:3c:db:b2:a3:b4:1b:58:91:1e:80:
                    6f:8f:5e:21:da:84:f6:c0:22:ac:73:ba:68:c1:a2:
                    41:55:89:1c:41:60:75:63:b7:49:e6:25:d4:25:57:
                    21:57:e3:a7:3c:ce:72:19:af:cd:46:80:bd:71:32:
                    b4:97:79:cf:da:0d:6d:c1:b3:05:d1:b3:3a:ab:16:
                    d8:67:53:b9:f3:8e:bf:5d:1f:57:5d:8f:db:bf:af:
                    47:b2:49:da:98:6e:22:63:1f:9a:cc:2e:e7:52:6c:
                    18:fc:1f:0c:40:f2:6a:77:cf:22:98:e9:03:f5:0c:
                    7f:71:0f:0a:f2:61:57:ea:ff:f8:c3:28:1a:83:b0:
                    fb:a2:92:50:f8:77:f6:dd:ff:9c:55:70:a5:55:23:
                    6a:98:6c:32:7b:84:2a:5c:a7:95:ef:a0:01:f1:3e:
                    01:44:ee:4e:7d:0e:5c:ca:b7:73:44:8e:2d:3f:0f:
                    36:87:bd:55:57:85:69:f9:24:f5:80:ea:8d:fc:97:
                    d6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:36:2D:C5:17:DF:28:8F:4D:2E:83:0F:33:07:21:2B:5B:10:74:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/930cac12-3e16-3d53-81df-1e764a61df53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.crl

            X509v3 Authority Key Identifier:
                keyid:C8:97:EA:9D:92:66:CD:A8:E9:0E:91:63:B1:00:70:5F:89:81:E6:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:ad:a6:7a:68:02:e9:c9:21:c8:3d:66:3a:f2:00:ae:a5:49:
         f3:db:2a:b3:6d:a7:c1:bf:ef:f7:37:bf:6e:7b:77:36:4c:c8:
         6e:a5:2b:0b:89:2a:3f:9a:d5:d3:4e:19:74:02:73:a1:c3:59:
         16:fe:78:fb:d9:64:ff:78:65:31:5d:45:6d:48:d6:b5:e1:55:
         ba:37:ec:b1:6b:f4:4c:bd:fa:c3:c8:55:0a:72:3e:0d:9b:3a:
         bb:ac:2e:8f:95:fd:b4:8b:16:c9:36:4f:37:96:08:b0:35:7f:
         5b:7a:26:56:0c:6c:78:f2:03:41:e8:ab:85:cf:33:61:9e:92:
         00:80:b2:50:a7:9c:d6:41:00:6c:68:fe:38:df:0e:60:fe:17:
         26:d6:69:01:ad:ba:ee:76:d2:69:b9:f4:c2:54:6a:e4:6d:7f:
         d3:48:ea:10:4c:97:03:7a:c8:89:bb:0f:bd:69:e2:e8:bd:62:
         db:5a:a4:53:3d:5d:19:3a:50:05:30:d9:a0:4e:7f:ae:b2:a9:
         1a:68:83:74:f7:6f:95:4a:f8:bd:ec:6f:d8:f6:8c:db:4f:36:
         3b:8a:3c:b6:a6:ce:5a:7f:70:c7:dc:a4:a5:74:97:ef:93:a1:
         44:b0:d3:8e:15:ce:0e:54:50:b9:f5:85:fe:4f:6b:c2:f9:00:
         c4:d1:05:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:07:39 2026 by rpki-client