Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/20301c12-2042-3b25-aeb9-f2187e8460ee.roa
File:                     20301c12-2042-3b25-aeb9-f2187e8460ee.roa (raw, json)
Hash identifier:          g+jJKHKxP+SGxUC5FUYCqyDMKGWyw+mn3QYm70lzOso=
Subject key identifier:   83:23:F7:00:D1:BE:4C:7D:1E:D5:08:7C:10:54:2A:1D:14:09:CA:2D
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584EA78897002B9704D881C9B930
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/20301c12-2042-3b25-aeb9-f2187e8460ee.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13760
IP address blocks:        142.190.170.0/23 maxlen: 23
                          142.190.172.0/23 maxlen: 23
                          142.190.174.0/23 maxlen: 23
                          142.190.176.0/23 maxlen: 23
                          142.190.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:97:00:2b:97:04:d8:81:c9:b9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b7f0fa0b-96ca-40b6-be6b-e98ac41081b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9b:ef:a0:42:4c:db:cb:0c:89:e3:06:d2:a2:
                    47:5e:64:1c:52:46:f7:48:9f:0a:10:c6:0e:b2:33:
                    81:6c:20:a7:8c:f9:a0:b3:5c:2a:a2:1d:59:57:45:
                    ba:64:1a:ca:cd:72:27:fd:cb:b5:11:ab:a5:f9:f7:
                    32:d5:96:23:1f:b8:03:d4:91:ca:a0:43:09:f9:a9:
                    7c:0a:9c:a9:b6:ad:cd:3d:b2:29:c5:ec:da:a2:c4:
                    21:5b:40:9b:8f:54:e4:1e:e0:a8:90:a3:00:b1:14:
                    ba:fd:f6:b3:2d:91:38:c7:92:11:9a:d9:f4:08:2d:
                    f3:fe:c8:9b:53:38:df:3e:e3:43:33:33:d4:0e:26:
                    1a:2d:0d:99:78:03:45:51:e7:8c:29:af:62:f9:03:
                    b3:16:46:27:d0:d5:74:f2:d0:0f:10:91:d7:ed:c0:
                    fa:b4:a5:8e:97:fa:f5:9d:3c:64:19:2d:47:07:ae:
                    e5:57:ca:dd:27:74:f3:63:2a:ea:41:da:c3:f0:8f:
                    d7:89:fb:b0:af:c6:2f:07:0a:a9:4e:03:7b:1b:48:
                    16:0d:a2:42:95:b1:38:d0:f1:7e:74:4c:98:70:f0:
                    5c:71:b5:23:8e:a8:d5:d4:fe:49:11:13:6a:b1:0b:
                    d7:2f:87:9e:1e:15:e6:20:a5:32:91:5c:cd:2c:95:
                    91:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:23:F7:00:D1:BE:4C:7D:1E:D5:08:7C:10:54:2A:1D:14:09:CA:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/20301c12-2042-3b25-aeb9-f2187e8460ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.190.170.0-142.190.179.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ad:b3:bd:92:a3:ae:ef:9e:39:a2:62:f2:65:bc:c8:77:84:
         8d:0c:50:27:4e:66:4c:e1:1d:64:2b:58:f3:c9:a7:73:ab:90:
         c5:e9:32:53:b3:4c:46:1a:3f:4f:c4:3a:dc:e1:66:b8:14:61:
         f3:7f:82:2f:74:0c:d4:da:44:7b:4d:cb:6d:e8:44:dc:fc:1d:
         97:23:b4:0d:26:a5:c7:d5:92:ff:1c:aa:c6:95:b7:bd:60:d8:
         31:42:c0:be:28:8e:52:c2:38:52:9d:c9:93:4c:1d:d5:2c:14:
         d7:24:1c:95:8a:de:66:eb:e0:7d:49:42:32:36:96:6d:3b:42:
         ed:b4:41:11:4b:e8:61:18:a7:29:76:9a:56:1b:39:6b:5d:5e:
         93:90:78:fa:be:70:65:34:19:0a:47:ac:b7:90:2a:58:77:aa:
         7a:2d:c0:85:31:92:ed:b7:80:cb:0c:5e:48:d8:2e:25:4a:63:
         91:5e:9d:87:b9:2e:83:26:09:e0:41:75:91:25:f2:7a:60:41:
         0e:4c:b9:23:b1:1d:32:1d:ce:af:45:2e:de:e2:6e:ad:48:45:
         59:1a:3a:f4:6f:6f:f3:7d:48:1a:d1:b3:62:7c:fa:21:df:53:
         ea:24:f0:4f:89:bf:a0:29:c7:a8:fc:c0:4f:4d:36:ed:ba:6b:
         d5:2b:a7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:40:04 2026 by rpki-client