Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0c70fded-1a6f-39b3-b65b-066b3dda1966.roa
File:                     0c70fded-1a6f-39b3-b65b-066b3dda1966.roa (raw, json)
Hash identifier:          jEgedYTEBtCbvCeAcVQGrrzuW1medqZWUaCSydkcqjk=
Subject key identifier:   6C:D7:6A:76:65:EC:2E:92:D7:F3:20:73:58:11:E1:8B:B8:EB:46:92
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584FB0BDDF2D1D3DDDD32D28B380
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0c70fded-1a6f-39b3-b65b-066b3dda1966.roa
Signing time:             Sun 01 Nov 2026 01:00:13 +0000
ROA not before:           Sun 01 Nov 2026 01:00:13 +0000
ROA not after:            Sat 30 Jan 2027 02:00:13 +0000
asID:                     22773
IP address blocks:        142.173.32.0/21 maxlen: 21
                          142.173.40.0/21 maxlen: 21
                          142.173.160.0/21 maxlen: 21
                          142.173.168.0/21 maxlen: 21
                          142.173.208.0/21 maxlen: 21
                          142.173.216.0/21 maxlen: 21
                          142.173.240.0/21 maxlen: 21
                          142.173.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b0:bd:df:2d:1d:3d:dd:d3:2d:28:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Nov  1 01:00:13 2026 GMT
            Not After : Jan 30 02:00:13 2027 GMT
        Subject: CN=0e5d6583-92f2-43b2-bf8e-19fbb795913e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7e:39:e1:d8:10:16:e8:0d:9a:e3:72:ed:e7:
                    7a:73:31:01:ca:3c:11:0e:06:98:c0:26:bf:f1:bd:
                    f8:00:08:f8:6e:1c:67:0e:3d:36:dd:0a:b7:d8:01:
                    ff:fd:c8:89:67:ea:97:4b:c6:00:7e:6b:55:38:4b:
                    93:47:86:97:2d:88:ac:49:f2:8a:9d:1b:16:60:7b:
                    12:79:85:ba:c3:40:a0:e7:b3:d7:41:b3:78:ef:6c:
                    f7:d8:e3:1d:d3:e7:45:2e:82:5d:84:2b:93:83:33:
                    49:e5:99:a8:92:bb:5e:ce:90:a2:cd:27:1b:c1:79:
                    2f:4b:79:50:86:60:d4:77:6b:72:a2:24:ad:3e:6f:
                    57:19:03:81:1c:90:91:ca:db:f4:6c:bf:fd:83:6f:
                    14:6d:58:90:59:4f:01:92:cc:e1:07:ba:2c:28:9d:
                    e5:75:2a:94:b3:ca:2c:7a:c2:64:c5:c9:54:c6:a5:
                    86:06:20:ac:92:1a:59:2e:43:f2:6f:63:c2:de:c0:
                    6c:0b:ca:e0:c6:6d:e8:4d:f6:17:76:21:65:18:ad:
                    52:17:08:24:0d:f7:d1:cc:ae:ad:12:fd:57:02:de:
                    f6:90:cf:a5:d0:3c:5c:40:91:94:cd:c2:51:7d:f7:
                    78:48:ed:ea:f5:51:6c:c1:e2:8b:2a:34:c6:35:f5:
                    c4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D7:6A:76:65:EC:2E:92:D7:F3:20:73:58:11:E1:8B:B8:EB:46:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0c70fded-1a6f-39b3-b65b-066b3dda1966.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.173.32.0/20
                  142.173.160.0/20
                  142.173.208.0/20
                  142.173.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:21:45:d4:d8:0f:60:45:5f:56:a3:8a:35:fb:0f:e9:99:2c:
         98:2b:cc:c4:25:68:cf:03:22:37:29:30:9b:e5:97:58:3b:6a:
         60:d7:cd:86:43:be:45:ea:82:63:3c:c0:89:a1:97:00:39:a5:
         cb:fa:63:7e:d7:f6:a1:04:05:26:8a:26:a9:83:f3:55:bf:3f:
         d0:19:9a:1c:e7:b8:c5:37:93:76:e5:e0:f3:02:aa:da:90:0d:
         a9:a0:d3:de:8a:32:f1:0a:98:fd:66:2a:de:a5:1f:41:ac:4c:
         14:b7:85:44:fd:80:ed:da:4a:0a:43:93:2d:c0:83:5c:20:4d:
         85:1d:28:69:3c:55:02:35:a5:f3:b7:35:89:ad:17:4f:78:49:
         1f:d1:6f:df:0f:c8:b8:7f:6d:03:ee:75:c9:d9:b4:c5:d4:b7:
         77:19:fa:e5:51:a6:de:ec:16:16:34:a8:1c:be:2f:ca:75:62:
         d4:66:ca:85:f0:3c:55:08:c0:a8:c4:73:06:fe:0d:3b:c0:c7:
         be:f0:66:47:52:cf:21:33:07:38:bf:1d:e4:b4:02:c5:82:a0:
         42:8f:6f:75:b8:9f:b6:cd:9b:04:ea:2d:d6:6e:ac:61:98:90:
         33:a4:2c:45:6b:71:9e:1f:22:2d:ee:75:69:d3:15:25:63:0b:
         d8:6d:a7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 06:59:43 2026 by rpki-client