Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f4876b7b-e753-3c1c-a3ee-6749a1495184.roa
File:                     f4876b7b-e753-3c1c-a3ee-6749a1495184.roa (raw, json)
Hash identifier:          knnHZxu8o6yUXLMq/3GcD0dQKh7TXemrFZAqhScL5gc=
Subject key identifier:   FA:4A:B3:3C:B9:24:0F:F1:41:1B:43:17:C4:1F:C9:35:87:14:F3:F9
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F506D502CF38AB763EB751E00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f4876b7b-e753-3c1c-a3ee-6749a1495184.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     64267
IP address blocks:        149.20.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:50:2c:f3:8a:b7:63:eb:75:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=6da915df-52c2-44ae-aa7f-1045b75afa17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4d:d3:0c:93:23:5e:67:e7:4c:77:52:7f:c2:
                    e4:aa:2b:27:dc:c9:7e:2e:40:1e:01:0d:39:3d:bb:
                    88:ee:93:58:fa:db:b9:3d:76:fc:01:99:ed:7a:8e:
                    f0:fd:47:14:3e:cb:ea:6d:f0:af:d6:cd:46:c9:f9:
                    92:46:e0:9a:68:d3:fd:a0:00:54:87:cf:e3:98:81:
                    10:07:15:1f:84:62:9d:36:e8:83:c1:f0:28:54:a2:
                    d8:76:b4:ea:7b:b2:82:cc:f3:ba:82:58:ab:43:a8:
                    d3:ea:3a:f6:31:26:15:4c:a6:1d:22:e0:2d:a5:17:
                    57:ed:25:15:b5:1e:cd:92:92:bb:1b:51:db:1a:53:
                    c8:61:23:a4:9e:63:11:7c:41:1e:9f:70:05:87:ce:
                    2b:aa:46:d6:06:5a:bb:b7:e1:80:74:11:16:f3:28:
                    6e:90:12:32:21:44:55:02:c4:89:25:4d:21:3f:6b:
                    bb:e3:6e:df:37:a0:6c:1f:c3:32:6a:1b:57:f8:6a:
                    cc:9f:8e:d0:b0:31:dd:12:74:b8:b6:33:a9:1d:52:
                    db:d9:79:01:9a:b3:ac:08:24:bb:e9:9d:39:b2:6f:
                    8b:da:fd:19:34:74:82:48:8c:0a:f7:d8:34:97:e5:
                    29:c5:04:d1:b5:48:52:5d:d1:6e:8a:02:18:26:49:
                    84:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:4A:B3:3C:B9:24:0F:F1:41:1B:43:17:C4:1F:C9:35:87:14:F3:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f4876b7b-e753-3c1c-a3ee-6749a1495184.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:70:e4:9e:ae:01:64:59:59:35:de:c1:58:17:ef:d2:01:d8:
         19:c4:76:c8:4e:22:c9:3d:89:9b:85:d2:70:61:f1:66:51:54:
         c8:e8:d1:0d:e8:cb:a5:75:8e:fe:2e:49:bd:ec:c5:33:33:4a:
         ed:02:89:6a:bd:94:f8:44:f2:db:6a:5b:c3:50:19:21:6c:c2:
         6c:32:ae:07:66:f5:b3:48:69:48:46:e6:21:5b:4b:c1:71:20:
         f2:3e:04:4d:fe:8e:64:42:d7:76:e6:84:4a:d4:00:f5:18:bc:
         58:f8:b9:5f:5b:1e:3e:15:8b:05:fd:9e:2d:07:34:71:21:30:
         8a:c2:78:85:cd:3c:ad:fd:78:35:d5:e1:b3:fc:52:c6:de:c5:
         0b:33:a2:11:e0:ca:f5:97:b2:64:89:a7:ad:fa:12:41:68:e5:
         1f:cc:1d:e7:37:a7:33:54:81:7b:ba:e8:23:be:73:1e:ee:ad:
         59:fb:36:21:68:4e:4f:ee:a8:fb:f4:32:96:42:8e:34:5b:e4:
         1f:c8:88:36:b4:90:ee:4d:3f:dc:98:53:d0:4a:41:b9:4d:8e:
         63:3e:2e:e7:d3:0f:91:0b:f0:64:30:3d:0c:6e:52:cc:55:2e:
         de:11:18:a6:5f:d4:19:5a:82:fc:1c:9b:11:7f:ca:59:3f:b7:
         b4:f1:f1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:54:57 2026 by rpki-client