Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/adfadf67-2677-3af4-b32b-232839c742e3.roa
File:                     adfadf67-2677-3af4-b32b-232839c742e3.roa (raw, json)
Hash identifier:          hMnfuPdR4B9tFgN5cgDgDohPD/xZMXpe/hmb9JKuS1E=
Subject key identifier:   E0:B1:C4:CA:28:96:D8:40:97:32:E0:CE:C3:05:D9:F3:1E:E9:11:D5
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584F46A7D95BE34F57CFE6F27B40
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/adfadf67-2677-3af4-b32b-232839c742e3.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     198949
IP address blocks:        142.4.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:d9:5b:e3:4f:57:cf:e6:f2:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=99947368-7025-4832-bf8e-d72a4e4ebd3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e0:5a:13:48:07:15:99:d5:5c:57:4f:b4:4c:
                    9c:66:9f:63:ff:a2:2a:70:b9:54:1c:c8:7f:90:49:
                    58:b3:69:d2:40:a9:1a:c1:7a:d3:06:a1:a1:ca:e6:
                    68:b3:bc:c9:44:8e:2c:ef:42:18:70:1b:77:1d:b9:
                    89:59:b4:43:ad:12:b7:27:d9:c6:3c:fa:39:66:4a:
                    95:7b:e2:46:9c:85:52:c3:33:0a:87:48:ea:bf:76:
                    af:54:8e:f7:23:89:cb:13:c0:6b:76:3c:70:f7:db:
                    f9:a1:ed:32:3d:f5:5f:d1:28:d4:b6:4b:eb:2f:5c:
                    90:19:3d:26:71:0a:a3:73:80:fb:b4:3f:14:f7:9a:
                    8d:66:38:86:b3:80:ba:48:8a:2f:6c:1d:29:79:a5:
                    c9:a4:4b:c9:34:fd:d1:a4:87:b1:dc:84:a4:65:25:
                    19:c0:e9:9d:f2:17:14:ad:0f:cb:27:6c:2e:da:51:
                    a3:3e:6f:93:2b:54:04:95:82:bb:41:d7:39:35:93:
                    55:1d:86:b3:eb:47:60:4d:67:fb:79:6d:31:92:ff:
                    b4:2c:64:5f:c7:52:0f:7e:ec:85:7b:c6:82:e2:ec:
                    f6:2b:ed:98:43:a6:fb:74:a6:69:ec:d2:e5:f1:2c:
                    73:6f:5b:99:f6:c9:d6:ab:05:7a:c4:1f:be:4b:90:
                    aa:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B1:C4:CA:28:96:D8:40:97:32:E0:CE:C3:05:D9:F3:1E:E9:11:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/adfadf67-2677-3af4-b32b-232839c742e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.4.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:b9:d6:89:43:59:29:d5:be:27:50:b3:7f:fc:c3:2a:b6:55:
         13:e7:5d:c6:e8:30:38:f5:d5:ae:d9:7f:dd:2b:93:b5:47:98:
         c5:65:84:22:f9:70:72:0b:c9:8a:25:a0:f6:17:d8:26:fb:e2:
         d8:ee:72:9e:6b:48:b5:73:05:42:ff:a6:ef:64:dd:f3:ff:e0:
         82:ec:7e:a7:22:7f:cd:5e:67:11:5b:82:e4:bd:de:5c:71:14:
         e4:09:eb:21:35:01:5a:0c:3f:e4:a0:96:09:40:72:be:9b:cb:
         88:af:f0:cf:bd:43:22:1a:c4:7c:14:cb:10:e5:ac:19:4b:d7:
         59:5d:49:a7:85:ae:1b:c2:ca:8f:14:2e:fb:dd:95:c0:a4:bc:
         6b:81:b3:60:b5:1a:0b:bd:05:d0:0c:62:b3:5a:9b:7f:b1:5f:
         27:cd:44:72:1f:4a:63:01:8c:84:14:00:67:49:d6:8d:7c:38:
         11:03:85:8f:cb:fb:11:f7:d7:7e:88:59:2f:61:62:6b:4a:4b:
         c4:54:0f:66:eb:2a:c0:03:58:fb:f2:e4:be:90:b1:1d:6d:d6:
         a2:01:0b:90:e1:0e:0a:2e:db:a4:69:0b:4d:38:37:ac:5d:a1:
         f1:fd:43:1e:c8:31:2f:4b:1b:15:74:b0:8a:e5:0d:8b:9f:62:
         7b:a9:1f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:26:11 2026 by rpki-client