Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fb715346-d322-3fdf-aa33-f8aa09418dab.roa
File:                     fb715346-d322-3fdf-aa33-f8aa09418dab.roa (raw, json)
Hash identifier:          HkbJk11VWklbKlMEqfBadB261xMntTz4qBfvh5Op57g=
Subject key identifier:   CF:0E:3C:8E:0D:73:D1:E3:80:51:26:35:3D:58:22:D4:CB:11:95:63
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F00DCC2CCDB1DF672963B5C00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fb715346-d322-3fdf-aa33-f8aa09418dab.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     20001
IP address blocks:        149.20.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:c2:cc:db:1d:f6:72:96:3b:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=1e4ece76-59a6-48f2-9ae6-07d4f4d43764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:df:7e:09:f4:c0:03:1b:4a:9f:01:2b:8e:30:
                    7a:92:31:bd:e9:b0:e6:54:86:85:56:d6:b8:38:5b:
                    fd:bc:ee:24:a3:27:54:2d:5c:31:03:77:2b:83:42:
                    27:86:c2:18:67:db:d7:3a:87:e8:2d:95:19:83:7a:
                    54:d6:44:7f:db:cd:7d:8d:44:a8:78:d6:8b:bd:33:
                    31:70:9d:37:30:eb:42:18:c1:4e:67:f6:37:49:4b:
                    bf:43:0d:6f:f0:33:dc:65:6c:a4:92:41:fa:68:79:
                    ed:1c:4a:df:a4:b7:24:71:ec:41:35:dd:e0:6a:2c:
                    d2:01:bd:1a:07:b7:fd:83:51:71:87:b0:32:fa:ae:
                    2b:ce:47:ae:5f:17:d6:6b:64:87:fb:4b:ec:fd:b1:
                    f1:98:e4:6b:1c:f9:d1:05:68:20:a0:77:e5:29:63:
                    cc:5d:3a:85:56:1b:d3:39:4e:67:53:32:b1:ca:a6:
                    21:c5:ff:cc:01:83:39:71:b7:a6:2d:ac:be:23:7d:
                    0c:e8:d5:73:a5:68:59:47:67:37:44:33:f5:32:32:
                    fb:db:68:cb:cd:ad:7c:70:67:13:ea:1e:dc:17:03:
                    c5:ed:2c:db:2e:77:87:db:82:56:43:1a:31:49:b5:
                    24:3b:b5:9a:27:10:90:3f:b5:d2:34:84:2d:88:7b:
                    37:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0E:3C:8E:0D:73:D1:E3:80:51:26:35:3D:58:22:D4:CB:11:95:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fb715346-d322-3fdf-aa33-f8aa09418dab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:ba:c4:02:f3:ad:c4:fa:88:cc:fa:6d:e3:77:bf:be:b2:2f:
         a9:40:06:84:1e:14:78:a3:eb:6b:e5:04:b4:1e:59:b8:5f:55:
         52:2a:fe:2d:54:24:b9:46:6f:be:ee:11:0a:b6:b6:3f:0e:64:
         6a:74:e7:29:08:0b:67:4f:b0:0d:61:ee:ad:14:cf:6f:b6:78:
         6b:ba:85:a3:96:ee:72:b5:b1:67:38:25:02:42:96:e7:3c:ef:
         14:c3:d0:94:59:ca:a7:38:f8:07:bd:cf:3d:c3:21:06:28:1b:
         21:45:ee:d9:5b:1a:1b:4c:8e:73:c7:24:8e:1f:c0:2a:30:20:
         a5:ae:43:86:b5:5e:f0:e4:04:71:69:d0:d2:85:43:e0:86:92:
         f2:ba:dc:93:4b:8c:d9:40:8e:ea:18:7c:00:f2:b2:48:fe:44:
         02:82:22:ec:bd:0b:6e:14:3a:5f:c0:6e:bf:db:28:2c:a9:0e:
         21:ac:4b:f0:dd:55:95:22:fb:3a:30:0e:97:c1:ea:d4:11:75:
         ed:3d:64:df:d4:9d:70:0a:b7:a7:aa:7a:09:a4:4b:3b:da:d7:
         2d:21:c1:bc:39:f3:54:9c:fd:c9:5c:a8:7b:d6:5c:86:50:03:
         c2:61:a9:c1:93:1f:da:d0:b9:a3:06:d1:97:bd:69:8c:25:c4:
         fc:d8:62:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:42:51 2026 by rpki-client