Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/20b01dc2-482d-37a6-94dc-539807497318.roa
File:                     20b01dc2-482d-37a6-94dc-539807497318.roa (raw, json)
Hash identifier:          HnFIMmSVf4tET6gFUAE3Bj4QsbYc6tdPs45xGmFRBgk=
Subject key identifier:   C5:3F:1C:D2:B0:C0:FF:B1:2D:7C:3F:BB:5C:CF:7D:8F:03:94:88:E8
Certificate issuer:       /CN=3ebba851-73dc-4c81-9c85-edb63b33b305
Certificate serial:       010D0C9F4328584F3E47D81FB5A3F57C123D71C0
Authority key identifier: A3:42:73:1D:17:E0:73:0A:39:C2:4C:9E:F9:F5:EA:8E:BC:C5:71:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/20b01dc2-482d-37a6-94dc-539807497318.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     20115
IP address blocks:        192.41.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:d8:1f:b5:a3:f5:7c:12:3d:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebba851-73dc-4c81-9c85-edb63b33b305
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=52e79e43-a9e5-4fa3-892f-e00f6603f3c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c1:35:a3:b3:c4:3a:27:b5:4f:5a:44:6d:84:
                    d7:cf:28:e3:1d:f5:1b:e1:c8:b7:b7:bc:b1:af:16:
                    88:c7:61:dd:ce:e0:64:16:a3:fe:32:07:87:fc:8e:
                    29:00:71:cf:f9:60:fb:4d:a0:39:90:c9:1a:d9:99:
                    2e:4c:1c:e0:de:aa:66:d0:d3:d9:9e:23:1c:b1:6b:
                    c6:cd:3c:28:a2:18:f4:d8:5b:ce:6d:a2:80:71:0c:
                    28:7f:bf:2b:34:f3:6e:b2:49:ad:3c:f0:32:5f:51:
                    17:00:fd:a6:a1:3a:c9:9b:4e:c9:bb:ec:1c:af:ac:
                    b2:d3:31:f7:45:d2:77:4e:31:41:aa:01:ec:bb:94:
                    2c:3c:7f:ba:e5:c5:26:81:db:ec:96:1b:33:5e:31:
                    57:7d:68:2b:ea:98:67:b2:1d:ee:4e:cc:13:eb:ae:
                    ca:86:7a:e1:fb:11:56:9f:de:cb:5c:05:24:ee:bf:
                    b7:e3:f2:79:b7:0d:35:49:88:dd:f3:1b:ac:c4:16:
                    06:a8:b1:1b:ba:9a:ff:4d:eb:39:00:34:3a:f1:3b:
                    c9:90:2b:51:f0:a1:e0:6f:c0:a7:9c:5e:a0:f2:3e:
                    8a:b7:1d:99:39:a9:1b:93:34:c1:49:9c:3a:05:50:
                    e6:93:3e:ab:59:d5:53:27:73:eb:49:a7:cc:09:eb:
                    bd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3F:1C:D2:B0:C0:FF:B1:2D:7C:3F:BB:5C:CF:7D:8F:03:94:88:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/20b01dc2-482d-37a6-94dc-539807497318.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.crl

            X509v3 Authority Key Identifier:
                keyid:A3:42:73:1D:17:E0:73:0A:39:C2:4C:9E:F9:F5:EA:8E:BC:C5:71:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:5b:87:29:2d:db:01:cb:55:ca:25:99:a2:c9:c7:1a:68:83:
         b1:e5:74:73:8b:2a:77:b2:20:b6:42:98:cb:fe:1f:6e:20:85:
         22:27:7f:ef:f1:23:b6:a2:c2:e1:01:77:42:25:74:87:c7:07:
         03:7e:a6:db:8e:5c:94:d4:e2:70:d9:aa:9d:3f:56:9f:44:4f:
         f4:43:f0:01:df:d5:2a:3b:b7:f8:6c:20:41:99:cb:39:8c:32:
         57:b5:14:2d:fc:fb:67:05:ec:b9:56:35:0f:21:ab:b1:38:d6:
         af:c6:b4:36:a4:1f:60:ec:53:70:11:bf:a7:d3:bc:b7:d7:83:
         07:22:7d:f3:ed:dc:0a:62:cc:39:7b:a0:4e:ca:42:88:e4:66:
         79:7c:18:2b:22:2b:cf:96:94:bb:25:d3:2b:e2:a9:92:1c:80:
         9f:cf:ae:ab:1e:af:e8:cb:1d:81:25:c1:d9:f0:af:d4:92:67:
         9b:29:9b:82:b8:67:98:c5:7c:59:78:d4:53:38:01:e3:67:e5:
         c8:be:d0:84:7b:17:2a:11:4f:8e:a9:06:81:f0:83:e0:aa:c0:
         58:48:31:84:3d:2c:4f:a6:41:61:ad:c1:29:4b:fc:ea:9e:4c:
         08:97:17:43:72:a1:99:3b:28:89:c9:5f:ad:96:49:ab:2b:b6:
         21:67:e2:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R9gftaP1fBI9ccAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2ViYmE4NTEtNzNkYy00YzgxLTljODUtZWRiNjNiMzNi
MzA1MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk
NTJlNzllNDMtYTllNS00ZmEzLTg5MmYtZTAwZjY2MDNmM2M0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqME1o7PEOie1T1pEbYTXzyjjHfUb4ci3t7yx
rxaIx2HdzuBkFqP+MgeH/I4pAHHP+WD7TaA5kMka2ZkuTBzg3qpm0NPZniMcsWvG
zTwoohj02FvObaKAcQwof78rNPNuskmtPPAyX1EXAP2moTrJm07Ju+wcr6yy0zH3
RdJ3TjFBqgHsu5QsPH+65cUmgdvslhszXjFXfWgr6phnsh3uTswT667Khnrh+xFW
n97LXAUk7r+34/J5tw01SYjd8xusxBYGqLEbupr/Tes5ADQ68TvJkCtR8KHgb8Cn
nF6g8j6Ktx2ZOakbkzTBSZw6BVDmkz6rWdVTJ3PrSafMCeu9kwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMU/HNKwwP+xLXw/u1zPfY8DlIjoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZWJi
YTg1MS03M2RjLTRjODEtOWM4NS1lZGI2M2IzM2IzMDUvMjBiMDFkYzItNDgyZC0z
N2E2LTk0ZGMtNTM5ODA3NDk3MzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2ViYmE4NTEtNzNkYy00YzgxLTlj
ODUtZWRiNjNiMzNiMzA1LzNlYmJhODUxLTczZGMtNGM4MS05Yzg1LWVkYjYzYjMz
YjMwNS5jcmwwHwYDVR0jBBgwFoAUo0JzHRfgcwo5wkye+fXqjrzFcQEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZWJiYTg1MS03M2RjLTRjODEtOWM4NS1lZGI2
M2IzM2IzMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCmxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK1bhykt2wHLVcolmaLJxxpog7HldHOLKneyILZCmMv+H24ghSInf+/x
I7aiwuEBd0IldIfHBwN+ptuOXJTU4nDZqp0/Vp9ET/RD8AHf1So7t/hsIEGZyzmM
Mle1FC38+2cF7LlWNQ8hq7E41q/GtDakH2DsU3ARv6fTvLfXgwciffPt3ApizDl7
oE7KQojkZnl8GCsiK8+WlLsl0yviqZIcgJ/Prqser+jLHYElwdnwr9SSZ5spm4K4
Z5jFfFl41FM4AeNn5ci+0IR7FyoRT46pBoHwg+CqwFhIMYQ9LE+mQWGtwSlL/Oqe
TAiXF0NyoZk7KInJX62WSasrtiFn4hI=
-----END CERTIFICATE-----
Generated at Sun Sep 27 04:06:20 2026 by rpki-client