Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/120d1dc0-4f5e-3c15-805b-514c3a3c278f.roa
File:                     120d1dc0-4f5e-3c15-805b-514c3a3c278f.roa (raw, json)
Hash identifier:          GmI4NyXqmEbxxY+bmsTPvg6lWL2DsDdtQDUgCIqDN+0=
Subject key identifier:   56:1B:63:9C:90:CF:C7:59:E1:79:9E:03:8C:25:A4:5F:74:E7:2F:77
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F4328584F480D3BC629390A305003BC00
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/120d1dc0-4f5e-3c15-805b-514c3a3c278f.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     55195
IP address blocks:        149.112.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:3b:c6:29:39:0a:30:50:03:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=7fca1524-024f-491c-979d-bb0ad56c0f6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fd:4e:92:71:d8:7d:d6:64:85:74:5b:d2:c6:
                    a4:94:b3:1f:38:6f:68:78:bc:b9:f4:3e:01:5a:b5:
                    1a:b5:23:15:d7:a9:3f:e2:5a:78:29:ed:e1:0f:91:
                    55:f6:48:18:5f:12:f0:16:a6:98:0e:c9:f2:4f:98:
                    5d:76:97:ae:dc:08:f1:28:5f:a7:82:7c:d5:bc:d1:
                    b3:0b:82:29:06:0a:6a:0d:7c:ad:12:12:60:13:b5:
                    c5:43:15:d4:ad:ce:c8:33:23:a0:6f:4d:9a:0b:70:
                    9d:6b:07:20:8f:1a:7c:37:d2:00:40:a4:c2:85:4a:
                    1f:b0:b0:43:ed:b1:28:4d:43:bb:6e:60:cb:42:f7:
                    49:9d:17:35:f4:83:03:a2:6b:09:df:df:76:e4:a2:
                    2e:7b:1c:bc:04:07:81:33:9d:2a:33:61:65:24:bd:
                    c4:60:17:ce:e2:a1:4e:e1:4e:c6:eb:33:3c:9e:26:
                    cc:e2:e4:59:e9:4e:fe:d3:56:41:81:6c:f0:d5:57:
                    e6:bc:32:a3:2c:75:a5:43:77:4a:ec:41:85:57:d2:
                    1b:1e:23:89:ca:b1:1a:76:36:5f:19:35:4c:69:d0:
                    74:50:cd:75:10:9b:88:ee:e5:ce:64:89:94:0f:2a:
                    ee:32:25:4c:b6:1f:7d:ec:65:7d:08:57:ca:e7:96:
                    a8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1B:63:9C:90:CF:C7:59:E1:79:9E:03:8C:25:A4:5F:74:E7:2F:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/120d1dc0-4f5e-3c15-805b-514c3a3c278f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:c4:bf:fd:e2:2e:eb:50:24:6d:58:97:07:ac:5d:0d:f1:15:
         8a:e2:02:12:98:62:84:63:71:72:90:f4:ea:e3:35:02:fc:cd:
         af:1c:ab:0c:91:c9:28:d9:6b:b7:db:79:89:cd:80:97:a2:17:
         01:12:39:52:e4:68:5e:c1:ad:41:c9:d2:64:dd:82:88:a9:61:
         1d:a1:e0:01:8f:7f:b3:cf:17:d2:40:92:23:28:e9:c0:38:64:
         6f:df:a9:4e:4a:3d:13:e5:5b:56:e0:4c:6b:43:77:66:42:d1:
         a3:b1:82:03:f7:38:d8:e9:e5:45:d0:bb:ce:19:3e:80:f3:d0:
         ac:de:a7:bd:00:98:ff:21:ed:4b:ed:71:50:60:d3:c7:6e:28:
         0d:47:1a:6f:48:35:dd:23:59:c4:91:fe:4e:47:90:e7:5b:3e:
         8c:40:24:fb:dd:c3:73:4d:d1:8b:35:57:f7:67:2d:1c:a7:a2:
         23:3b:c3:0c:ed:06:f1:77:2f:bf:22:8d:a6:2f:12:8c:86:61:
         88:68:da:df:6e:57:d1:f0:38:14:e0:cd:31:34:2b:9b:31:35:
         97:f3:dc:8d:84:36:4a:4c:b8:39:22:b8:4a:19:31:8a:2c:d6:
         71:29:ff:ca:ae:ab:4c:99:4e:4e:ea:24:6f:58:7d:17:dd:51:
         98:83:6b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:02:19 2026 by rpki-client