Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/6dcb689f-d0b3-3633-a9b0-43104f85ca2b.roa
File:                     6dcb689f-d0b3-3633-a9b0-43104f85ca2b.roa (raw, json)
Hash identifier:          hKn5wjBeZRX8ZJ4Wwx8vJw7P0bW1PfsoMWzOMY5Bc8Q=
Subject key identifier:   5D:3F:26:03:71:05:E2:9E:B0:E4:93:65:10:82:A2:61:7E:BC:97:95
Certificate issuer:       /CN=946cb195-9b9a-4836-9152-b97e9e831144
Certificate serial:       010D0C9F4328584F119CF523FCF017B68301B380
Authority key identifier: D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/6dcb689f-d0b3-3633-a9b0-43104f85ca2b.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     15395
IP address blocks:        142.54.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:f5:23:fc:f0:17:b6:83:01:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=946cb195-9b9a-4836-9152-b97e9e831144
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=d4d9ca3a-3231-4900-aeae-dbb66f582d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cc:fb:9a:6f:40:7a:ce:6f:c8:9b:c5:3f:6b:
                    8e:13:80:51:fc:b9:a5:74:ce:aa:65:af:6e:05:9a:
                    8b:44:8c:24:46:7e:4d:b1:1d:2f:7e:9e:20:73:3b:
                    e8:6f:36:20:a6:de:68:9f:5c:54:fd:d5:67:eb:13:
                    5c:f4:3a:84:89:2c:2e:de:f7:95:a3:6e:87:c5:d3:
                    c2:7c:7b:ed:03:86:b6:38:cb:01:5e:56:3a:37:ed:
                    48:5c:80:32:89:7f:30:1d:f2:1d:94:1d:a6:6b:c5:
                    04:e1:d2:89:75:8a:af:af:08:ab:cd:48:f1:4f:f4:
                    d6:20:9a:87:56:75:4b:db:6c:26:04:70:56:66:1a:
                    2e:87:be:01:21:60:69:5c:ac:02:53:c8:be:1c:b6:
                    c3:f5:35:73:1e:ad:24:c3:49:5b:69:fe:c0:e0:9e:
                    37:f1:ef:06:da:10:23:9e:30:65:ad:af:52:c1:49:
                    e3:d0:27:1e:c7:14:86:07:a8:9f:31:6c:ff:73:07:
                    15:f3:4d:f4:91:f4:ae:e3:6b:6c:05:46:a8:c6:df:
                    1c:0b:7f:50:a3:cb:68:17:03:f2:4a:bf:e5:40:09:
                    2f:b4:86:75:1a:9b:4c:00:41:43:f0:9f:77:aa:1f:
                    33:02:48:0a:b6:6e:0c:70:ec:15:f4:c7:a5:e2:ae:
                    b3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:3F:26:03:71:05:E2:9E:B0:E4:93:65:10:82:A2:61:7E:BC:97:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/6dcb689f-d0b3-3633-a9b0-43104f85ca2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl

            X509v3 Authority Key Identifier:
                keyid:D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:d7:a7:c2:0a:98:26:93:3c:de:44:91:51:34:0c:8f:74:2a:
         e9:02:89:9d:61:ef:ee:8a:76:ba:e8:cd:ce:51:76:46:12:f2:
         2b:a2:0e:cb:fd:95:0b:59:91:02:6a:75:3f:b4:4d:6a:e2:63:
         9d:8a:65:88:10:69:b6:90:54:1b:37:5f:b0:18:df:41:f8:de:
         ba:c0:74:53:aa:d3:72:00:72:0b:ab:89:bb:d6:95:c2:a5:00:
         5a:14:97:c6:4c:34:7f:4a:f2:f7:d3:2e:a8:f8:18:c0:73:6d:
         c7:b1:34:58:f4:20:13:f6:33:8f:f4:91:05:f5:cc:83:52:b8:
         ca:24:a2:ab:1f:a8:17:cc:0b:24:47:d9:22:53:07:50:47:ad:
         bd:7a:39:01:e8:03:f9:b4:5d:f2:54:94:44:22:fd:96:43:f1:
         34:1a:ba:df:ff:0f:9b:12:ed:42:0a:27:00:84:bc:9a:f6:36:
         9c:17:77:4a:16:e2:ae:0c:03:e7:0d:4f:8b:55:d4:c8:05:12:
         ea:b6:c0:c1:8b:f3:01:94:99:dd:b5:8b:46:4e:76:dc:27:bd:
         5a:09:e4:9e:ea:9e:27:76:dc:5b:05:21:bf:73:d1:9d:0a:95:
         84:60:8b:bf:8b:c5:4d:2b:0c:9a:9d:6c:8e:20:ad:92:70:e8:
         ea:f6:8e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:32:39 2026 by rpki-client