Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/66b5b82a-36b3-3a97-a9d7-81ea8dad7eb5.roa
File:                     66b5b82a-36b3-3a97-a9d7-81ea8dad7eb5.roa (raw, json)
Hash identifier:          Q0z7XNBp0aNduAt//V4Hgjry9ofLm3v2xrgOYR/T0d0=
Subject key identifier:   60:EE:80:8F:AB:B9:2F:34:A0:24:B7:22:13:65:B9:CA:BE:8C:C1:21
Certificate issuer:       /CN=5cf06829-25a9-43c5-8a21-38599a1fb23f
Certificate serial:       010D0C9F4328584F4112B427889552DBB00F4600
Authority key identifier: 1F:D9:E9:E3:A1:33:F1:2A:E1:D0:E5:46:B8:F3:20:DB:A1:1B:6D:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/66b5b82a-36b3-3a97-a9d7-81ea8dad7eb5.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     397376
IP address blocks:        142.202.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:b4:27:88:95:52:db:b0:0f:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cf06829-25a9-43c5-8a21-38599a1fb23f
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=e273ea04-6444-42be-8fba-9f4abe1137db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:66:2d:1f:bd:66:06:c8:7d:69:e3:fd:39:35:
                    b2:70:4d:93:ce:87:b6:54:52:2b:c9:e0:ab:6e:00:
                    6c:70:a0:06:ed:c2:b3:c2:e9:fd:de:3a:23:2a:84:
                    0f:30:d6:99:0f:f9:08:ec:20:0e:29:32:d6:8f:dc:
                    58:9f:20:c9:76:b0:19:a8:b3:db:95:de:82:b9:86:
                    e0:ff:c6:34:3e:ca:28:25:60:9c:22:19:54:64:62:
                    fc:f9:b2:33:34:57:2d:5a:b2:58:bd:c5:ef:22:23:
                    00:4b:ea:a7:4b:fa:33:c5:8b:bf:9d:d2:95:e2:d7:
                    a0:de:ec:26:92:d4:8f:19:af:6e:db:a2:de:79:2d:
                    cc:9f:5e:6a:51:4b:02:fa:77:41:d2:f7:62:18:05:
                    d6:8c:d8:27:47:c7:3c:fc:39:43:73:92:05:e4:37:
                    32:6b:ec:dd:78:a6:0c:1a:3a:cb:02:ed:88:57:41:
                    10:dd:66:60:06:f2:04:43:af:c3:6f:4f:02:68:fa:
                    56:32:4f:b2:c4:c7:db:0d:d2:d0:b8:fe:cc:e7:a0:
                    a2:b2:6a:da:a4:cc:b1:0b:7c:36:4e:0d:85:28:e6:
                    d3:72:37:e9:93:8e:09:14:f9:60:44:c1:81:d0:ad:
                    50:5b:2b:39:88:5a:e9:33:7f:bf:b9:e3:f8:d7:bc:
                    f5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EE:80:8F:AB:B9:2F:34:A0:24:B7:22:13:65:B9:CA:BE:8C:C1:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/66b5b82a-36b3-3a97-a9d7-81ea8dad7eb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.crl

            X509v3 Authority Key Identifier:
                keyid:1F:D9:E9:E3:A1:33:F1:2A:E1:D0:E5:46:B8:F3:20:DB:A1:1B:6D:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:8d:73:d9:a4:83:a6:0a:a0:b9:f9:19:56:c7:9a:f3:12:5c:
         0b:93:3e:e7:4d:eb:18:15:ab:9c:f1:a8:ea:ca:57:94:52:2e:
         d7:39:e2:fa:7a:5a:00:e6:59:5b:bd:78:d5:0d:9e:60:4b:89:
         20:73:8b:7a:70:9c:f1:ce:d6:da:53:8a:4d:d7:2b:91:6f:d7:
         85:ca:f4:c7:9f:3c:d0:76:08:1b:b3:6c:e5:21:19:32:08:ab:
         90:af:cb:e6:36:a4:42:f6:d2:4d:e3:fd:cf:68:d2:c1:b0:06:
         c7:12:9a:4f:35:eb:96:be:4b:76:86:aa:9f:17:2a:07:54:70:
         5f:6a:26:7a:9b:aa:d2:d4:52:85:16:ff:59:00:e0:af:77:3d:
         4e:45:34:1f:ae:ca:4d:2e:a9:51:24:4f:64:6a:ec:fd:fc:22:
         b3:4c:3c:ff:53:18:5a:05:f0:9b:15:aa:c0:2b:d1:13:03:04:
         ec:df:6d:e5:4d:92:73:6c:ab:de:d6:f4:3e:f3:52:9e:bf:75:
         63:c0:7c:dd:54:9e:19:02:9b:79:de:b3:8b:25:a1:51:fe:a9:
         8a:57:f6:82:60:5a:cb:dc:a7:3f:f7:74:82:9e:db:d6:e6:3e:
         03:0c:c3:c4:b6:bc:37:b8:80:6f:8e:cb:55:7d:1b:67:40:0e:
         17:ff:2f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:58:17 2026 by rpki-client