Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cdb05df9-c4d2-3ae6-a609-7e5f33700162.roa
File:                     cdb05df9-c4d2-3ae6-a609-7e5f33700162.roa (raw, json)
Hash identifier:          lT5yDQp49Y1z55hQDK+aN5V/moAOhLJjWAk0WT945pw=
Subject key identifier:   F1:D3:9B:27:84:8B:20:3B:48:A2:1F:DE:3C:F9:D4:BC:2E:2B:F1:1D
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584E6F3A4AF1C49E8AABDF80B700
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cdb05df9-c4d2-3ae6-a609-7e5f33700162.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     6079
IP address blocks:        142.173.48.0/20 maxlen: 20
                          142.173.96.0/20 maxlen: 20
                          142.173.176.0/20 maxlen: 20
                          142.173.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:4a:f1:c4:9e:8a:ab:df:80:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=cc8f3da1-637d-41ba-8eff-c417eaa6f091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ce:17:c0:53:4e:2d:f5:47:ac:96:c4:6d:7a:
                    a8:3b:7e:28:4f:9a:7a:96:3f:b3:ec:ae:f1:28:79:
                    97:47:cb:08:e8:e0:e7:54:d2:6e:aa:68:1f:98:94:
                    68:71:91:de:d0:07:9f:1f:a7:8e:69:88:2f:8d:68:
                    72:5f:3e:f6:8a:7a:07:e1:29:83:16:02:d1:42:85:
                    c1:ba:1e:d7:4a:65:e7:d2:30:75:cf:fc:0e:dd:c5:
                    78:c8:b5:a7:3d:5c:de:52:fa:d9:6c:bd:e4:70:eb:
                    3f:a5:88:3b:71:01:63:ea:3f:6a:3c:74:10:bc:b6:
                    43:5b:e0:99:09:e9:5b:6a:f8:04:3d:be:0a:b5:5d:
                    6f:4c:bb:b2:85:65:b2:67:b6:42:52:e1:22:f7:4c:
                    1e:94:9b:19:dc:8b:62:d3:8b:6d:ed:06:6c:74:a7:
                    ce:ad:f3:ca:79:62:e6:8e:cd:95:66:c8:9c:57:52:
                    55:bf:c1:bd:23:24:09:44:80:7b:35:1d:6c:eb:cf:
                    57:d6:cd:34:61:ca:e0:b2:46:46:33:5b:56:19:a5:
                    fd:c8:ea:2d:b0:2d:da:a2:4b:68:42:98:21:c8:77:
                    32:0b:2e:6c:9b:5d:e0:28:32:ba:6a:a4:d7:3b:56:
                    8d:3b:50:62:d3:b8:25:dd:1c:c4:49:1c:02:42:c2:
                    d0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D3:9B:27:84:8B:20:3B:48:A2:1F:DE:3C:F9:D4:BC:2E:2B:F1:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/cdb05df9-c4d2-3ae6-a609-7e5f33700162.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.173.48.0/20
                  142.173.96.0/20
                  142.173.176.0/20
                  142.173.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:93:a4:b1:7b:9e:6e:bc:21:7b:e3:cd:d5:47:ed:80:76:f0:
         f4:e9:6e:d3:f7:5c:2f:96:db:f7:14:f1:66:41:31:a2:a5:92:
         a9:8a:e1:e3:da:35:2b:68:ff:ca:0f:b0:f0:cd:0b:7d:83:4c:
         d3:f2:63:c0:da:57:4b:e1:74:f3:65:6f:7b:f4:37:7e:e0:a6:
         35:ab:61:af:76:d4:43:01:61:5b:33:f3:0b:83:01:b0:38:29:
         b9:60:ea:c2:1b:bb:31:1b:e3:a8:bd:53:0e:b8:df:12:e0:9b:
         14:e9:84:9c:a7:80:84:f6:ab:05:59:f9:6c:0e:97:d0:34:2e:
         6a:be:7b:9f:fc:e6:31:0d:e4:8f:c2:28:fc:74:4e:9d:69:a9:
         3e:09:e4:23:5a:9e:63:ae:2a:a8:f0:8d:ac:55:62:3b:ce:10:
         8f:9c:df:fe:5d:40:f9:92:aa:16:2f:90:b0:6c:c4:a8:89:2a:
         d5:81:8a:4a:b9:26:bf:60:04:fa:e2:45:1c:a6:36:66:2b:0d:
         60:98:50:e4:d6:3b:14:15:01:0e:cf:f3:52:a8:95:42:02:94:
         69:f8:ed:c6:8d:99:65:a2:2f:3e:84:15:f0:ea:9a:fa:dd:02:
         c9:c6:b9:bc:4e:62:7f:70:ed:7f:04:c3:94:78:d2:00:f6:05:
         2a:ae:3d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:14 2026 by rpki-client