Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa/6c64e825-16bf-3331-8877-9a759754bd51.roa
File:                     6c64e825-16bf-3331-8877-9a759754bd51.roa (raw, json)
Hash identifier:          6BlYnQqwY4fIcNA6NyVsQ15nK9CDYf6S0Vk9GU5JhNQ=
Subject key identifier:   A4:22:70:EB:B0:11:FD:3E:AD:55:AE:70:FD:4A:BC:8A:12:79:D0:6A
Certificate issuer:       /CN=49b876c3-2c45-48fd-9b06-9930edf118fa
Certificate serial:       010D0C9F4328584AADF127910DEE390A2D01B900
Authority key identifier: EE:E2:29:5C:7C:0B:88:A3:24:EB:14:04:AB:80:4F:A1:52:41:83:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa/6c64e825-16bf-3331-8877-9a759754bd51.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     46626
IP address blocks:        142.20.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa/49b876c3-2c45-48fd-9b06-9930edf118fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa/49b876c3-2c45-48fd-9b06-9930edf118fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:27:91:0d:ee:39:0a:2d:01:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49b876c3-2c45-48fd-9b06-9930edf118fa
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=ea0cbbf0-6363-440e-b6c3-2df5758555a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8a:c4:5b:45:82:5d:7e:ba:9d:55:db:4e:ce:
                    d0:01:dd:ed:82:33:7a:02:ae:ae:f5:36:f0:b0:e6:
                    6a:78:40:b9:9c:06:85:4d:58:6a:87:ee:1a:87:64:
                    c6:7e:72:33:ac:64:6f:32:e9:12:a1:9a:41:e9:b3:
                    c2:a2:8f:15:57:4e:af:7c:ff:39:7e:a2:c6:c1:90:
                    b9:69:32:05:57:34:ff:31:d9:a5:ec:0f:ee:a4:dd:
                    c6:79:a0:e5:7d:b7:ec:ee:2a:bc:18:75:21:33:af:
                    c6:da:6e:c6:7d:54:d2:ca:15:dd:49:30:b5:43:7f:
                    0e:7e:91:a9:5e:96:fc:c5:a3:fb:50:f1:7d:e7:0b:
                    8d:3e:6f:39:4e:f1:81:b4:8f:41:36:2c:a0:36:9a:
                    78:57:a3:6f:ac:db:d7:3b:da:f3:f1:dc:a3:de:13:
                    f6:94:0a:f9:72:db:ef:51:ea:f4:1b:21:c2:10:13:
                    16:ac:96:3b:27:41:fc:78:21:dc:ec:48:e1:be:d4:
                    41:d9:d5:e8:1c:44:5e:7b:d3:53:11:de:71:67:3e:
                    26:94:e0:16:e9:73:48:b9:a6:09:20:87:8a:94:3f:
                    db:98:7e:a8:a2:30:39:30:4a:c4:a8:31:2e:95:13:
                    53:13:c1:1b:af:57:2b:93:00:b0:b3:67:6c:cc:57:
                    de:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:22:70:EB:B0:11:FD:3E:AD:55:AE:70:FD:4A:BC:8A:12:79:D0:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa/6c64e825-16bf-3331-8877-9a759754bd51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa/49b876c3-2c45-48fd-9b06-9930edf118fa.crl

            X509v3 Authority Key Identifier:
                keyid:EE:E2:29:5C:7C:0B:88:A3:24:EB:14:04:AB:80:4F:A1:52:41:83:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.20.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:61:63:a8:d7:ca:d6:96:bb:ac:18:c0:1c:79:e2:8e:5e:79:
         53:d1:a4:a5:d6:86:ac:4c:18:01:e2:6a:73:07:d6:2d:31:8f:
         9b:93:aa:28:e4:28:fe:ea:76:fb:03:0b:85:91:b6:e4:e8:6e:
         e2:26:ad:ff:7b:98:f4:9e:ff:bd:9e:27:c9:10:82:f2:37:e4:
         d6:3b:aa:ff:9f:74:5a:9a:21:c1:61:92:e5:92:1f:aa:82:ac:
         74:0b:88:34:45:ba:23:87:75:7a:e1:e4:bb:97:d8:33:af:fb:
         12:d0:eb:b3:94:35:b4:56:9a:04:45:e2:a9:6f:cc:ce:f4:ea:
         83:fc:0b:cb:ef:ed:e4:1f:e7:a1:7f:8d:9b:5c:c2:f4:8d:aa:
         c9:43:11:22:2a:1b:a2:99:84:48:77:f8:c0:4b:78:b8:b8:6c:
         02:42:ce:47:12:7a:94:f9:75:e5:2d:0f:8f:26:6d:17:4e:df:
         96:8a:59:4a:a8:46:3f:da:71:0f:1c:17:0e:ee:03:7f:87:55:
         8d:2e:4c:19:0f:0d:13:6a:75:0d:90:11:65:62:13:22:b4:94:
         ba:e8:2e:73:75:bb:f5:f5:dc:67:ee:ec:e4:b1:bf:c7:3e:21:
         0b:39:10:38:bb:d4:98:a6:cf:f5:66:a2:dd:9c:78:66:df:3a:
         6a:69:2e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:56:37 2025 by rpki-client