Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4ecf06cb-52e5-39b0-a843-5bed771c2761.roa
File:                     4ecf06cb-52e5-39b0-a843-5bed771c2761.roa (raw, json)
Hash identifier:          dTJ6YAwwFAQMAXJpnTioDJCy7Q96BBubXEvhWO9MAws=
Subject key identifier:   98:27:C6:8B:1F:F7:DA:98:AB:A7:BB:83:E5:B3:19:78:2C:D1:64:D7
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584F331D121D95CEEEDC6854C300
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4ecf06cb-52e5-39b0-a843-5bed771c2761.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     27823
IP address blocks:        149.34.224.0/20 maxlen: 24
                          149.78.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:12:1d:95:ce:ee:dc:68:54:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=15401be3-5aef-423d-9e38-419cfe6c67b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c8:4f:4c:21:6f:28:e5:c3:7c:03:ba:f6:a8:
                    50:e1:4e:75:e0:bd:31:c4:e6:76:14:cb:be:19:ed:
                    99:26:9c:a7:c6:5d:ab:6e:c7:aa:b0:ad:8b:1f:c7:
                    be:82:a5:ed:dd:50:74:00:b8:3d:09:4c:27:22:71:
                    9f:5b:12:da:f9:d1:b0:8d:6e:13:ff:f3:ab:ec:57:
                    98:85:94:c2:bf:41:21:31:cb:47:13:d3:44:92:a2:
                    db:58:48:9e:d0:fa:89:53:d0:61:c3:6d:06:de:c9:
                    d1:51:f1:19:a1:0b:b0:6a:ac:08:7b:4c:d4:68:d1:
                    8c:18:ef:09:c5:c6:21:94:db:b9:27:93:3a:af:74:
                    d5:31:b8:6c:2d:bc:bc:f7:92:78:40:73:b6:05:0d:
                    c8:88:33:8e:68:70:3a:8f:ca:86:9d:df:74:3d:3c:
                    d1:74:02:42:d9:f1:88:b3:12:f0:eb:b0:5e:b2:50:
                    17:eb:3e:c2:c5:c0:7f:82:c0:5e:05:d0:88:c5:2e:
                    d1:c0:79:2d:14:f6:92:fa:8f:9e:1d:11:d2:bc:d5:
                    1a:5e:6a:8e:3c:1b:46:b1:fa:d3:f1:0b:85:d1:54:
                    65:49:9b:be:05:74:b9:1a:ba:cb:e9:3c:4f:42:7f:
                    a0:aa:26:87:22:77:00:71:a3:d9:33:ba:52:04:78:
                    ad:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:27:C6:8B:1F:F7:DA:98:AB:A7:BB:83:E5:B3:19:78:2C:D1:64:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4ecf06cb-52e5-39b0-a843-5bed771c2761.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.34.224.0/20
                  149.78.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:01:e6:b2:4d:d0:17:06:10:cf:b9:15:c3:44:fc:f8:d5:cd:
         21:57:76:5d:e1:12:f1:c4:bc:ec:ab:f4:3f:46:5e:66:40:56:
         0b:0c:19:aa:26:8d:64:a9:bd:89:0d:6e:75:eb:03:95:dc:26:
         16:be:f9:c8:8a:26:d8:dd:ab:b0:25:bf:fc:1b:be:ad:26:81:
         01:c5:d4:ce:bb:bc:d5:5e:73:4b:f6:9f:64:6c:fc:16:16:8d:
         82:76:4f:02:57:89:4d:12:98:3f:7b:37:72:b9:9b:1d:22:d0:
         aa:c4:c0:68:6a:62:b4:f3:33:b9:76:09:b7:fd:9f:cb:29:ab:
         a8:78:13:fb:c2:2e:b5:01:ca:e2:03:ed:a5:7f:d4:25:19:0c:
         ff:fa:1b:a6:11:da:5e:84:18:4c:31:90:ec:c0:38:d1:9a:c2:
         14:55:9b:79:4f:d6:20:79:79:9e:21:8c:f8:a7:5b:29:4d:2c:
         a6:b9:45:97:5e:19:d9:a6:e4:7d:70:f4:a9:ee:c6:14:d9:98:
         e7:c4:49:93:52:c9:a2:74:e7:7d:79:ae:9e:cc:4c:25:e1:03:
         9d:2e:ef:0b:80:5b:26:56:dd:e3:cb:88:d3:d9:d5:e9:07:cd:
         cb:57:fa:e4:a9:0f:be:40:91:18:b4:84:e0:02:af:20:b2:46:
         a9:5f:34:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:48:24 2026 by rpki-client