Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/875cb8ee-e815-3d4b-8fc0-e36a9de59822.roa
File:                     875cb8ee-e815-3d4b-8fc0-e36a9de59822.roa (raw, json)
Hash identifier:          2iU6KdoUvM6Yh58gWAUN0/HKDKftIsr8hOeJEnpWsW8=
Subject key identifier:   50:88:02:E8:35:CB:7F:7E:29:02:04:AE:05:35:AA:C7:74:9A:50:B1
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F5E62D4D7669D9CC11B019A80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/875cb8ee-e815-3d4b-8fc0-e36a9de59822.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     20115
IP address blocks:        142.173.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:d4:d7:66:9d:9c:c1:1b:01:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=58a73adf-5403-49df-a7e4-a0952066b5a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9c:09:be:28:1b:bd:ff:ae:d0:5a:0e:d4:46:
                    81:7c:c2:b5:9d:18:b5:6d:0b:24:97:46:23:3f:9c:
                    66:59:e0:44:ae:e4:1a:6c:41:55:4f:1e:57:41:e6:
                    99:71:fa:a6:08:e2:c0:26:99:93:20:ce:f3:e5:86:
                    e8:38:2d:1f:06:29:c8:b7:33:2b:e1:3a:b9:9c:ec:
                    f5:1f:76:94:d8:be:fd:89:4e:95:4d:06:4a:4b:96:
                    55:44:34:33:93:36:f4:49:df:e9:f3:81:f7:88:b4:
                    04:af:71:92:1f:f3:36:7b:4b:0c:10:2f:72:73:b4:
                    3d:2f:08:9a:f8:e7:9f:39:9c:58:4a:0a:86:cc:4b:
                    60:a8:76:25:04:ba:b2:b5:3c:52:6a:4b:d9:9c:90:
                    aa:79:fa:2b:dc:c9:e8:f0:08:c2:79:f3:3c:34:ff:
                    7a:2c:f8:97:e9:f5:87:c9:d8:6c:3e:6c:f1:30:1e:
                    b0:dc:6e:e9:ee:06:5b:e2:4f:95:8f:77:dd:dc:47:
                    b8:d7:dd:80:1c:77:46:4c:0c:5e:f9:aa:e0:b8:7f:
                    ca:82:2d:8d:96:b6:e3:5b:de:72:d3:6a:2e:dc:db:
                    8c:f4:5b:ba:11:ce:6a:3d:8a:06:67:f2:e1:14:86:
                    76:09:5f:7f:58:f0:e0:f4:b5:02:75:63:e1:ae:fe:
                    1d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:88:02:E8:35:CB:7F:7E:29:02:04:AE:05:35:AA:C7:74:9A:50:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/875cb8ee-e815-3d4b-8fc0-e36a9de59822.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.173.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:a4:52:2d:52:c1:64:49:14:c2:72:df:51:42:ca:18:d6:71:
         c4:06:6a:f5:23:d2:fb:09:37:4f:95:30:e4:ee:92:24:9d:d0:
         65:5f:4a:f2:4a:26:b1:cc:54:13:c7:c6:00:94:f6:e9:7b:ed:
         7e:08:3d:0c:c8:fc:ec:35:a2:88:d2:47:1a:ac:9c:2e:e7:d8:
         f1:7a:9f:4c:06:1f:57:7f:4b:72:dc:f3:c7:80:18:bb:cb:ff:
         14:94:cd:de:c9:ab:75:78:24:82:23:65:8e:2a:35:3a:5a:be:
         2b:29:55:bb:fd:4c:36:22:c5:bd:eb:aa:51:2a:9c:bf:95:40:
         fd:b7:a5:c4:44:e4:a1:37:f7:e2:04:7d:de:fd:26:52:50:19:
         af:8b:f2:71:2e:fb:e1:d3:9e:12:31:68:b1:1c:b9:44:02:a2:
         94:a3:16:03:96:97:74:aa:52:c8:f3:3a:59:54:8d:66:00:18:
         3c:46:96:ff:09:71:b6:36:f8:cb:5a:85:b6:5a:32:f4:42:c0:
         ed:b9:11:9c:dc:0c:5d:c6:35:f8:b3:ff:09:58:b5:5b:44:3c:
         cf:d0:5a:a4:f9:0d:e4:6c:91:51:b5:3f:1f:59:76:48:2c:23:
         fe:28:a1:a7:0d:c9:dd:c8:c8:e4:df:03:f4:21:db:88:9d:a6:
         a0:42:d9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 03:25:44 2026 by rpki-client