Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aa5b9167-5ff6-3584-ba19-e2f08e01ecb7.roa
File:                     aa5b9167-5ff6-3584-ba19-e2f08e01ecb7.roa (raw, json)
Hash identifier:          f2UgZ1/R+jxIoNyuyXoDk4ctehSR2FDhASd3tOtlax0=
Subject key identifier:   39:85:17:A0:93:BF:04:20:F9:DF:DE:96:D5:EF:95:94:44:4C:69:FC
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D7E353EF76B247C1693F8D940
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aa5b9167-5ff6-3584-ba19-e2f08e01ecb7.roa
Signing time:             Mon 13 Apr 2026 13:00:30 +0000
ROA not before:           Mon 13 Apr 2026 13:00:30 +0000
ROA not after:            Sun 12 Jul 2026 13:00:30 +0000
asID:                     20001
IP address blocks:        149.20.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7e:35:3e:f7:6b:24:7c:16:93:f8:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 13 13:00:30 2026 GMT
            Not After : Jul 12 13:00:30 2026 GMT
        Subject: CN=c5a40b31-3e1e-4167-b94e-5e3171f8cc71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:92:14:db:11:8b:0b:d1:d8:4d:ed:75:9d:08:
                    29:8a:df:7a:20:ce:83:18:a2:89:44:f3:1a:2e:03:
                    65:56:ac:80:b5:b5:b7:d9:72:fa:92:32:1e:98:0a:
                    62:9f:fb:8c:56:8a:bb:7a:af:ff:48:94:92:8b:69:
                    1a:bd:20:6a:a3:e3:ff:26:a8:d1:5e:5b:49:ae:22:
                    29:58:14:76:82:3c:c6:c2:fb:a1:82:79:55:46:19:
                    7a:12:1c:c5:ab:93:ea:e7:5c:d6:81:67:3c:a6:c1:
                    c4:47:03:ad:3e:d9:aa:f7:e9:24:d0:a9:cb:02:ff:
                    be:2d:0d:7c:c2:34:6f:82:0e:12:53:45:ae:31:5d:
                    72:13:1c:03:3e:ad:2a:0f:68:df:c7:c5:bf:58:98:
                    72:dd:2e:f6:29:4c:05:71:f6:81:8d:69:35:5e:1c:
                    58:b5:5a:a4:20:7d:41:5c:53:cb:14:3a:20:86:14:
                    ef:30:20:ce:94:35:21:b7:79:26:d9:94:6d:5f:f3:
                    49:fb:55:0b:88:2f:c5:64:1e:ba:f0:45:58:fc:8c:
                    6f:03:29:e5:3a:fe:f8:2e:04:a7:85:28:82:42:c3:
                    74:70:2d:1e:00:87:f9:f7:df:ca:20:52:f6:02:04:
                    d5:7a:c4:7e:2d:0e:4e:99:04:cf:91:7e:fb:f3:63:
                    08:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:85:17:A0:93:BF:04:20:F9:DF:DE:96:D5:EF:95:94:44:4C:69:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/aa5b9167-5ff6-3584-ba19-e2f08e01ecb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:75:d0:9d:cc:bb:3d:fa:64:52:e5:ee:4a:2d:f7:c4:19:70:
         f8:c8:c0:54:01:3e:0f:fd:1f:98:6f:79:c1:49:10:9c:a2:fa:
         dd:81:5f:47:e8:8f:c3:7c:ce:c6:a5:e9:da:f3:12:1b:43:d3:
         6e:40:65:88:b2:01:dd:5c:4e:d9:fc:eb:c0:d4:f5:c3:c5:9e:
         12:b4:13:68:d4:28:98:c4:04:82:72:5c:50:0e:27:eb:4e:f8:
         0a:85:51:c7:97:87:b9:82:b5:bd:5e:c6:40:9f:64:7b:59:f6:
         76:ae:03:3f:ca:a4:2b:0a:1d:48:97:41:20:09:0f:ca:a0:47:
         52:0c:54:9f:eb:4c:69:49:98:f6:b0:94:75:b7:a3:da:e2:01:
         a9:1a:16:48:fb:53:93:a0:18:dc:de:b8:92:9c:ff:9f:de:8d:
         c6:20:c8:06:3b:b1:4b:1e:66:f9:2f:97:78:96:1e:35:2b:22:
         0d:77:89:94:96:8a:a9:f2:53:4e:ac:2d:3e:a4:fc:33:52:ca:
         ea:c5:fa:dc:a2:93:a1:09:c7:e2:1e:1e:b4:85:48:cd:bf:b4:
         c5:16:e0:38:e0:bb:ea:b3:0c:48:d7:49:6b:eb:0a:4d:88:c4:
         03:50:e6:f4:82:28:a1:b3:c7:cc:bb:34:d2:b1:f4:23:d6:cb:
         bf:4b:14:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:32:11 2026 by rpki-client