Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/12b1ecb8-b779-358d-a49a-235a7e7cdfbb.roa
File:                     12b1ecb8-b779-358d-a49a-235a7e7cdfbb.roa (raw, json)
Hash identifier:          Lb4lB+fFemFtOXTrgfR0JiedUNkHT1Azo/RdqDK4Cug=
Subject key identifier:   C9:95:CC:0F:91:4A:17:DF:94:74:2B:EB:D3:52:66:F1:13:02:7E:EC
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584D19B4AC2A19A6E5323F62D3C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/12b1ecb8-b779-358d-a49a-235a7e7cdfbb.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     852
IP address blocks:        209.20.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:ac:2a:19:a6:e5:32:3f:62:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=7c3e22e4-52ff-4213-ab38-5e19cb3fd33d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ff:45:8d:51:b4:d4:94:72:06:94:8c:77:cf:
                    14:fd:27:f2:6c:a0:5e:14:4e:26:b7:06:1a:78:ab:
                    59:50:06:4a:e3:87:dc:b7:0d:f1:61:1a:b0:5c:ee:
                    02:db:e0:a5:ea:05:02:9c:7a:3e:22:c7:b0:d2:d4:
                    71:25:bc:0c:72:14:9d:30:4e:ed:9b:20:f0:5e:4c:
                    74:6f:a0:35:36:26:1f:fe:37:8c:db:d0:b4:20:79:
                    7a:4d:33:90:aa:84:4f:04:d9:d9:4d:9a:bd:8f:1b:
                    5d:93:3a:39:a2:a9:dd:04:a8:6e:56:d4:f5:23:97:
                    8c:7f:72:d0:bc:5d:0c:22:23:e4:50:fe:d0:9d:77:
                    42:07:07:33:29:51:d9:54:97:23:4d:6b:bb:12:77:
                    a9:e3:fa:bc:75:88:78:6d:58:11:4f:f1:51:b3:51:
                    a4:e8:d3:4b:e7:05:70:67:35:92:54:30:87:9b:bf:
                    41:cc:7e:0a:e0:eb:c4:3d:c3:d1:59:cb:a5:1a:4a:
                    0d:75:6b:d6:98:a8:7d:e7:85:72:f3:11:4b:b8:d6:
                    7c:5d:3d:94:8c:34:74:b0:74:c7:1e:64:5d:bb:38:
                    f2:27:73:93:8b:c2:32:82:9c:25:25:eb:fe:a6:ab:
                    d8:df:27:54:e1:36:3c:f9:7b:20:89:e6:97:3b:9a:
                    1e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:95:CC:0F:91:4A:17:DF:94:74:2B:EB:D3:52:66:F1:13:02:7E:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/12b1ecb8-b779-358d-a49a-235a7e7cdfbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.20.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ff:a3:e2:74:0d:65:e7:5f:21:6b:9c:8e:d0:cc:2e:17:bc:
         f8:9e:28:57:ea:fe:43:1c:0a:d1:23:a3:08:29:ec:af:ef:09:
         8b:9a:0f:51:fd:8f:95:52:f7:39:42:a0:64:76:3a:2b:7e:f3:
         f3:52:b7:40:80:10:00:3f:dd:e8:78:f7:f1:50:45:a6:de:6d:
         c2:12:ba:47:89:28:80:11:c8:46:66:1b:4a:fc:e5:8e:74:46:
         81:ad:39:b0:f5:04:da:28:07:f6:e5:0b:0a:e5:c7:f9:14:b4:
         15:8d:d7:08:2e:58:92:53:00:3a:fe:3c:16:e5:50:b1:4a:a9:
         95:3a:4f:bb:45:6b:41:0f:df:52:8d:05:c2:41:bf:7a:6d:f4:
         34:4f:62:3a:e1:d6:ae:d0:88:4b:b6:d8:7d:be:96:1a:6e:36:
         5d:a2:58:0b:60:ad:65:ee:7f:ed:27:4e:ae:c4:64:b4:b6:90:
         c3:2f:66:3f:0b:13:55:a9:c4:72:96:86:23:37:1e:21:27:38:
         b8:8c:c3:c0:ab:8e:e6:45:83:cb:6d:6b:68:8d:71:30:37:85:
         b5:d7:1e:0b:77:6d:ef:dd:ce:3e:16:b2:6d:7f:6b:09:c5:34:
         b8:8a:0d:c2:07:9c:ce:97:61:4c:cf:ea:18:e8:af:d0:44:e1:
         f6:78:82:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 23:53:06 2026 by rpki-client