Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4e8c3eea-5290-39c2-8a92-9b920877b78a.roa
File:                     4e8c3eea-5290-39c2-8a92-9b920877b78a.roa (raw, json)
Hash identifier:          myYYAgajBWZMSt0mlomYIjrEfsc+dcCnSdj1+Mr4uFg=
Subject key identifier:   F3:A2:C0:28:9A:65:07:48:BE:D0:E4:DF:18:E0:2B:3E:18:0C:A4:98
Certificate issuer:       /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial:       010D0C9F4328584F4973EC5295AD3EB2FE2C8E00
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4e8c3eea-5290-39c2-8a92-9b920877b78a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     394354
IP address blocks:        149.112.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:ec:52:95:ad:3e:b2:fe:2c:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ac42a2a7-1da1-4927-b875-04e861caaa43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a2:50:d0:16:02:24:e9:76:11:e0:0e:8d:56:
                    0e:8f:88:25:13:0b:f2:11:a5:63:ab:ac:6e:94:32:
                    b2:3b:fa:72:9b:22:06:f3:69:b7:63:00:b7:7e:6e:
                    bd:93:75:a5:d5:78:4e:d9:65:10:2e:b3:a5:b0:be:
                    b0:05:1c:a8:49:0b:60:af:08:e7:3c:ca:f7:48:d0:
                    b3:02:d5:45:1b:28:e8:c4:2e:41:b5:5f:c5:73:41:
                    c5:43:e4:90:c9:d1:7c:79:7e:a5:af:87:8f:8c:a8:
                    87:72:46:e3:0d:fa:28:27:34:4e:33:90:82:20:58:
                    48:b9:d7:74:84:83:b8:1d:c8:a9:bf:dc:26:a2:32:
                    60:6f:77:d2:ca:37:62:d1:04:8a:c9:20:9d:24:73:
                    65:52:ee:41:99:a7:fa:fc:76:9e:74:88:71:7c:4d:
                    08:d7:ff:c0:53:5a:15:13:b5:92:44:1c:a3:8b:4f:
                    22:c0:0a:e0:71:40:43:ee:4c:d8:c1:a1:e1:c5:97:
                    eb:52:98:5a:66:9a:5a:4b:a8:87:d6:97:5d:ba:06:
                    83:76:3b:48:72:0d:d8:54:73:aa:4d:a9:06:b4:42:
                    d2:64:2e:a8:6e:8d:6b:db:93:ff:81:4f:7c:93:22:
                    c8:d3:b4:b6:1a:aa:e8:ff:64:1b:78:03:a5:d9:21:
                    fa:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A2:C0:28:9A:65:07:48:BE:D0:E4:DF:18:E0:2B:3E:18:0C:A4:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4e8c3eea-5290-39c2-8a92-9b920877b78a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:55:25:81:ee:bd:d2:9f:1e:8d:2d:93:75:08:54:2a:ed:b7:
         57:5e:8d:f5:a8:34:d3:c6:c0:a5:00:da:3a:2c:57:3c:fe:1e:
         c1:a9:a0:fe:40:34:44:da:a5:99:7a:2e:69:bf:0b:2b:1a:09:
         33:a8:e7:38:ea:e3:68:2b:a5:79:42:43:fc:2a:ad:52:bf:dd:
         41:1a:b9:1b:ff:5f:84:d8:10:64:d2:46:7d:d9:bc:9b:dd:28:
         ce:48:86:85:f5:b4:31:99:aa:6c:e9:0c:91:b4:14:bf:aa:54:
         15:f9:66:99:c2:30:78:1d:78:af:a0:5c:4d:55:8d:5d:e3:3d:
         ac:ce:10:40:b9:55:25:ad:b2:9b:4f:95:a0:87:14:8d:45:26:
         0e:f9:23:8b:10:d2:1e:1d:05:48:01:a9:1b:95:dc:a6:bd:04:
         8f:7d:8a:6d:95:71:c2:c0:2e:a4:28:c0:be:45:09:c9:44:56:
         5f:27:1a:49:7c:f0:7d:c4:2a:22:04:60:2d:46:a1:45:d2:21:
         74:70:f8:16:99:eb:f1:0d:62:7f:b2:6f:1f:78:c7:1b:c6:c0:
         4d:4d:39:c9:2a:a0:f9:4b:aa:a0:bd:b5:ae:75:8d:f0:7b:bf:
         67:32:8d:21:c1:40:89:6f:e9:d0:2f:25:9f:aa:88:fe:8e:bd:
         86:4a:a7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:22:14 2026 by rpki-client