Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/ecd43020-0d5e-37ef-84e8-4f27ae8e32f3.roa
File:                     ecd43020-0d5e-37ef-84e8-4f27ae8e32f3.roa (raw, json)
Hash identifier:          pzZib2mBPktttHS/au/TMGsfsZmpqU6hDehUSQrUYe4=
Subject key identifier:   E5:92:20:7B:86:8A:C1:58:08:8C:B9:85:96:D5:AE:02:24:62:EF:C6
Certificate issuer:       /CN=e951b522-4f4b-4128-b8a6-8e3f69803993
Certificate serial:       010D0C9F4328584EA793C01662D5ED881C42C680
Authority key identifier: 76:6B:E9:E2:30:D7:EC:3E:AD:78:6A:8F:64:27:95:99:DD:16:83:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/ecd43020-0d5e-37ef-84e8-4f27ae8e32f3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     26658
IP address blocks:        142.202.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:c0:16:62:d5:ed:88:1c:42:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e951b522-4f4b-4128-b8a6-8e3f69803993
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4b7d9ece-d54b-42ac-834a-3e9b07f39ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c6:1d:11:60:cf:2c:ef:84:44:6a:d3:ba:ec:
                    b7:16:29:95:0a:4a:9d:88:7b:ad:de:d6:3c:03:07:
                    40:f9:3d:97:90:f6:d5:3a:68:08:a1:b1:c8:d2:fa:
                    f6:73:c7:9c:91:b4:bb:09:e4:6b:67:a0:72:b8:36:
                    a1:d4:0b:31:48:f3:b4:4a:fb:1a:db:ad:37:74:1f:
                    0f:d2:93:19:a0:0c:cc:87:79:1e:7f:af:09:cc:d3:
                    62:c2:a1:eb:b7:22:62:5a:ae:a4:cc:0d:8c:f9:62:
                    23:23:9b:a6:bd:c3:dc:1b:26:24:ef:8e:3a:dd:84:
                    77:4e:f9:d6:84:f9:e2:ff:73:77:3c:e9:53:e0:f6:
                    f3:a9:5c:92:de:81:4f:65:ed:88:55:12:50:af:c5:
                    63:ed:d7:fd:1d:02:07:d1:a5:96:9b:59:53:73:03:
                    f7:ba:58:be:80:c0:ff:0a:1b:a4:48:ba:f9:11:ad:
                    c3:1e:61:69:c0:fa:29:2d:01:a8:06:8e:25:c7:90:
                    03:7d:55:bc:3b:8a:73:d3:43:5d:e1:dd:da:b8:29:
                    1d:df:83:cf:2e:62:5c:ce:3c:d7:c5:89:19:95:8d:
                    07:9b:97:cd:d6:1b:c3:33:4f:0b:b4:b3:91:1e:0e:
                    3f:e4:5a:10:64:ab:8b:8d:77:48:73:4b:29:42:a2:
                    29:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:92:20:7B:86:8A:C1:58:08:8C:B9:85:96:D5:AE:02:24:62:EF:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/ecd43020-0d5e-37ef-84e8-4f27ae8e32f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.crl

            X509v3 Authority Key Identifier:
                keyid:76:6B:E9:E2:30:D7:EC:3E:AD:78:6A:8F:64:27:95:99:DD:16:83:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:a5:9c:4e:e9:ff:7b:79:96:49:fe:23:fc:c9:9d:d9:fb:d0:
         81:a5:b2:08:dc:75:d4:e5:77:94:74:f4:90:59:85:39:0e:07:
         00:a3:06:9f:69:20:d6:20:1b:10:26:e6:ae:07:16:ef:48:dc:
         a4:46:bb:1b:8a:36:39:74:8e:97:ec:9b:46:75:c1:83:58:59:
         9f:24:6b:49:2c:9b:b7:45:b0:b2:48:bc:c8:ab:10:ed:db:f2:
         cc:89:b9:0f:25:4e:b9:ff:72:c2:ee:3b:4c:10:55:b9:5e:20:
         dc:ac:3a:c2:45:e4:f1:73:0d:0d:4d:d7:33:36:f4:fb:76:f7:
         32:93:90:65:80:1a:e3:e2:35:35:99:fa:fa:15:ec:cd:6f:46:
         c9:b8:ea:5d:67:23:dc:a6:3a:a8:01:8a:48:ca:7c:f5:6e:4a:
         ab:39:79:81:3a:58:f4:ef:67:d0:7a:28:0b:8a:85:cf:84:c8:
         98:33:2c:f8:91:db:80:05:3e:f5:0f:c6:f9:38:43:b2:33:34:
         3a:c2:00:10:7c:77:3e:04:2b:c4:1f:8f:3e:40:c8:fb:70:cd:
         8b:b5:b2:ea:33:b8:11:6b:30:6c:b9:79:23:79:71:0c:4f:c6:
         d2:de:a5:b0:ab:9c:27:44:d0:b0:6b:12:a7:d8:b3:a0:06:79:
         68:bc:a2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:38:50 2026 by rpki-client