Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/4441ff3c-c221-3537-bf3e-3bc0c6240173.roa
File:                     4441ff3c-c221-3537-bf3e-3bc0c6240173.roa (raw, json)
Hash identifier:          pc3lOz0YfKfN7dW8VxgSZHcGTxvQbdKOa02OAXYNcfM=
Subject key identifier:   A0:5B:01:D9:32:89:5E:F3:C0:43:09:C9:A7:4A:77:10:C5:28:22:56
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584F89A84EFF54FE9E4D74642FD0
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/4441ff3c-c221-3537-bf3e-3bc0c6240173.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     36178
IP address blocks:        12.20.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:4e:ff:54:fe:9e:4d:74:64:2f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=c4dc0986-f2b1-4d1b-8820-8c01a64255c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:81:ea:2d:e4:09:b8:f1:75:ef:d4:71:81:a7:
                    e9:9d:98:02:9d:cc:aa:a4:bf:68:a9:4e:b7:0c:65:
                    76:5f:15:94:b6:09:6d:59:6a:bd:d9:02:16:a1:92:
                    08:6d:a3:39:f1:c1:74:0d:ac:6a:78:76:18:67:ba:
                    b5:75:55:c9:88:79:66:39:be:69:33:89:ed:07:4d:
                    97:0b:36:9d:47:89:2e:35:55:5d:4d:73:98:8d:4c:
                    f2:c4:d3:a0:36:25:15:19:c2:1b:bb:4c:4d:d7:0f:
                    29:a9:b2:bf:fb:d5:1a:8f:95:7b:b1:a6:41:87:4b:
                    97:86:b9:38:01:4c:ce:06:9f:ff:6e:83:36:c8:8b:
                    cd:08:ae:14:45:30:db:f7:9c:46:f8:ef:d5:35:0a:
                    38:08:71:34:3e:ad:98:bf:2f:f8:df:41:e4:c7:c8:
                    2d:a6:10:90:22:44:db:60:58:63:09:09:f1:18:4b:
                    8e:6a:34:b2:6d:0f:2a:f8:c0:cd:ee:4d:b8:91:7f:
                    83:b0:96:16:64:fd:e8:6f:61:40:59:1a:5e:19:65:
                    40:e2:4d:b1:12:59:18:f1:75:dc:fc:65:23:69:15:
                    d7:0f:32:07:7c:4f:de:3a:34:f1:76:47:4a:6a:a7:
                    39:e6:1e:40:31:a0:3c:d1:80:33:74:ce:eb:8b:14:
                    72:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5B:01:D9:32:89:5E:F3:C0:43:09:C9:A7:4A:77:10:C5:28:22:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/4441ff3c-c221-3537-bf3e-3bc0c6240173.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  12.20.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:bc:6d:3e:39:3d:41:70:55:17:cc:c0:ad:4e:6d:15:f6:4b:
         21:71:9b:67:b5:86:05:d5:1d:5f:48:fe:12:7c:33:9b:de:e0:
         23:22:04:36:db:5f:51:5d:18:bc:6f:78:5d:ed:b3:38:0d:d3:
         72:00:4e:6e:ee:77:dd:5f:5a:b0:ab:14:3f:95:29:2b:0d:8f:
         76:21:26:2d:f3:97:13:2c:71:5b:b6:c9:29:4b:94:3e:02:a9:
         8b:01:90:9c:6e:db:9b:c9:a0:17:7f:ec:71:5a:c1:83:b3:f3:
         d7:9e:4d:b2:9c:7b:0a:10:d4:1a:c0:7b:ec:bf:72:3c:81:29:
         9b:00:e9:ed:c7:e9:ae:df:9e:d4:28:71:35:c7:e3:b2:4f:17:
         92:5d:02:4c:c0:f8:1e:6b:82:dc:74:e4:89:a4:b7:09:d4:27:
         19:ea:32:f5:4e:9d:35:39:07:4c:ec:8f:2c:11:14:e7:f7:53:
         a2:91:e1:ca:05:4a:d2:80:6b:4a:65:22:4e:a8:a3:75:10:99:
         9f:b2:fc:a6:9a:74:a8:79:9f:3c:8e:65:df:3b:38:97:3b:c7:
         e9:29:73:62:a9:98:d3:6e:fa:07:4b:a5:10:c9:b7:09:71:69:
         ef:ca:b2:54:63:12:40:06:27:6b:cf:ad:ef:6a:61:27:7b:f5:
         f4:0f:9d:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JqE7/VP6eTXRkL9AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzE0MTg2ZGYtODdiYS00ZGQ1LWFkYmYtMWM2YzJiYmUw
NGE4MB4XDTI2MTAxODAxMDAxM1oXDTI3MDExNjAyMDAxM1owLzEtMCsGA1UEAxMk
YzRkYzA5ODYtZjJiMS00ZDFiLTg4MjAtOGMwMWE2NDI1NWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IHqLeQJuPF179RxgafpnZgCncyqpL9oqU63
DGV2XxWUtgltWWq92QIWoZIIbaM58cF0DaxqeHYYZ7q1dVXJiHlmOb5pM4ntB02X
CzadR4kuNVVdTXOYjUzyxNOgNiUVGcIbu0xN1w8pqbK/+9Uaj5V7saZBh0uXhrk4
AUzOBp//boM2yIvNCK4URTDb95xG+O/VNQo4CHE0Pq2Yvy/430Hkx8gtphCQIkTb
YFhjCQnxGEuOajSybQ8q+MDN7k24kX+DsJYWZP3ob2FAWRpeGWVA4k2xElkY8XXc
/GUjaRXXDzIHfE/eOjTxdkdKaqc55h5AMaA80YAzdM7rixRyPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKBbAdkyiV7zwEMJyadKdxDFKCJWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQx
ODZkZi04N2JhLTRkZDUtYWRiZi0xYzZjMmJiZTA0YTgvNDQ0MWZmM2MtYzIyMS0z
NTM3LWJmM2UtM2JjMGM2MjQwMTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzE0MTg2ZGYtODdiYS00ZGQ1LWFk
YmYtMWM2YzJiYmUwNGE4LzMxNDE4NmRmLTg3YmEtNGRkNS1hZGJmLTFjNmMyYmJl
MDRhOC5jcmwwHwYDVR0jBBgwFoAUUhXIm1E3DpTxq8Kvfcj2u+Hy5W8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zMTQxODZkZi04N2JhLTRkZDUtYWRiZi0xYzZj
MmJiZTA0YTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBDBQ8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACi8bT45PUFwVRfMwK1ObRX2SyFxm2e1hgXVHV9I/hJ8M5ve4CMiBDbb
X1FdGLxveF3tszgN03IATm7ud91fWrCrFD+VKSsNj3YhJi3zlxMscVu2ySlLlD4C
qYsBkJxu25vJoBd/7HFawYOz89eeTbKcewoQ1BrAe+y/cjyBKZsA6e3H6a7fntQo
cTXH47JPF5JdAkzA+B5rgtx05ImktwnUJxnqMvVOnTU5B0zsjywRFOf3U6KR4coF
StKAa0plIk6oo3UQmZ+y/KaadKh5nzyOZd87OJc7x+kpc2KpmNNu+gdLpRDJtwlx
ae/KslRjEkAGJ2vPre9qYSd79fQPnS8=
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:09:51 2026 by rpki-client