Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa/6c64e825-16bf-3331-8877-9a759754bd51.roa
File:                     6c64e825-16bf-3331-8877-9a759754bd51.roa (raw, json)
Hash identifier:          Sx5IeKj0q2EHAL9sEcmj8EV6mVyWOCmIld7+FDIbpEM=
Subject key identifier:   8D:5B:CC:47:28:8B:35:28:64:EC:98:26:36:FB:2D:91:DB:D4:8A:93
Certificate issuer:       /CN=49b876c3-2c45-48fd-9b06-9930edf118fa
Certificate serial:       010D0C9F4328584F71EDA6E85CAFD2E78E8CFD00
Authority key identifier: EE:E2:29:5C:7C:0B:88:A3:24:EB:14:04:AB:80:4F:A1:52:41:83:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa/6c64e825-16bf-3331-8877-9a759754bd51.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     46626
IP address blocks:        142.20.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa/49b876c3-2c45-48fd-9b06-9930edf118fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa/49b876c3-2c45-48fd-9b06-9930edf118fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:a6:e8:5c:af:d2:e7:8e:8c:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49b876c3-2c45-48fd-9b06-9930edf118fa
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=f84105d9-e66d-4e0b-b438-8c8beb2ad95e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:55:67:e2:48:06:14:fc:f5:c3:57:35:15:65:
                    2d:76:dd:4b:1e:05:f7:d7:af:16:f6:5a:aa:4f:b9:
                    b0:b9:99:8d:f4:1a:4e:e6:42:7d:93:6e:79:3d:77:
                    f7:0c:71:63:c1:21:df:22:25:df:7d:f9:97:b2:2d:
                    cd:45:c2:a9:2f:74:28:ab:e7:24:05:92:31:c5:a8:
                    da:7c:a0:33:cd:48:2b:ee:e9:d3:56:37:32:5c:b5:
                    ba:99:65:49:24:a1:8c:77:0a:91:b7:d2:f6:a1:93:
                    ab:02:2a:c2:15:76:0f:35:fe:b3:04:35:a1:c1:41:
                    7b:12:39:19:26:5b:f4:41:b4:bc:e4:32:4b:c3:02:
                    37:92:cc:2a:db:e4:1a:fa:79:30:ac:fd:7d:89:2b:
                    b0:0f:7d:78:71:6d:de:b1:5b:94:fe:ec:e9:95:5a:
                    47:5b:8d:97:77:30:55:82:99:ad:eb:39:19:44:55:
                    d0:74:3c:ee:54:c0:cd:31:37:57:4f:8d:b3:63:71:
                    a5:54:64:cc:46:0a:b6:7a:1c:7e:27:97:c5:4b:80:
                    6f:c3:17:35:d4:aa:da:e7:c2:63:bf:06:a6:82:f6:
                    36:06:a9:8e:87:72:27:34:e6:cb:e8:b5:31:ed:14:
                    59:ef:1d:50:5e:05:87:c3:c7:2c:54:c8:30:6e:ba:
                    c4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5B:CC:47:28:8B:35:28:64:EC:98:26:36:FB:2D:91:DB:D4:8A:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa/6c64e825-16bf-3331-8877-9a759754bd51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa/49b876c3-2c45-48fd-9b06-9930edf118fa.crl

            X509v3 Authority Key Identifier:
                keyid:EE:E2:29:5C:7C:0B:88:A3:24:EB:14:04:AB:80:4F:A1:52:41:83:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.20.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:03:08:ec:a7:c2:9c:ed:7a:d0:31:05:dd:48:81:b4:ee:b0:
         07:2c:81:30:be:4d:f4:2d:4f:41:14:a6:a7:be:c8:7d:ec:64:
         0d:72:9c:24:1d:67:4e:52:26:fc:49:e6:d6:59:47:b8:a5:ec:
         2c:30:79:ed:78:c2:9b:c5:04:42:ce:0d:5c:ba:c8:23:4d:74:
         60:8d:8f:b8:ad:18:ee:6a:53:b3:90:c2:2c:36:09:5e:8a:a5:
         28:1f:cc:a8:f6:28:77:d6:60:fd:0b:3e:49:b8:10:e4:f7:7d:
         67:98:38:18:48:a7:45:eb:c6:f1:2a:08:ff:43:28:a2:16:e1:
         52:9e:c3:75:bb:ca:75:3c:91:00:ad:0b:ff:70:a5:76:1d:7c:
         a6:9c:c6:9f:30:3b:a0:be:aa:be:47:bf:0c:a4:ab:0e:a3:8d:
         fa:8f:ab:37:27:5e:39:68:cd:72:b7:ab:9e:12:37:16:bd:8d:
         e8:86:67:2f:e1:2d:33:fb:fe:db:13:f8:bd:55:29:8f:94:e5:
         a6:60:b2:2a:40:eb:ec:28:ae:62:54:9d:86:14:bc:ee:8c:60:
         6a:86:a6:66:2f:32:62:c5:f9:75:df:41:c4:31:aa:8d:d0:94:
         ff:73:fb:d3:c2:31:16:32:73:f8:38:53:09:27:57:3e:d6:39:
         94:5f:bc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:25:43 2026 by rpki-client