Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/f2c1b709-4fda-38fb-8576-82e9bfcec303.roa
File:                     f2c1b709-4fda-38fb-8576-82e9bfcec303.roa (raw, json)
Hash identifier:          oqXwr8/P+pjnGMVbxTFTKNVWv4PA/KWxgEGePJDH7aM=
Subject key identifier:   69:7E:01:23:97:21:F0:07:58:50:1F:3C:6F:C3:9A:56:5A:17:C6:FE
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584F4973D89EDB3CFC21E3C5CC60
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/f2c1b709-4fda-38fb-8576-82e9bfcec303.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13760
IP address blocks:        142.190.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:d8:9e:db:3c:fc:21:e3:c5:cc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=d32e2290-f194-4263-af5c-27276e578b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ef:8f:3b:da:8f:22:31:d1:87:a0:dd:59:a2:
                    70:b6:eb:b3:1b:15:29:91:2f:24:80:b6:3c:18:83:
                    80:ea:81:2d:b9:17:15:d0:d5:a2:8f:59:75:6d:5c:
                    21:56:d2:73:93:44:cd:41:ad:47:dc:b4:5a:5b:87:
                    97:05:d3:c7:47:3f:96:43:2a:48:e5:63:0e:5e:85:
                    b2:fa:a3:7e:60:a9:42:6e:90:9b:cf:16:af:90:1b:
                    e4:b9:b4:40:87:bd:43:4e:83:15:cf:22:ab:28:9d:
                    c1:47:a4:2a:4f:00:39:02:b5:a2:37:5b:34:42:ef:
                    54:79:35:52:de:66:a4:f9:5a:0c:00:7a:c7:58:be:
                    26:79:f6:fc:d8:cd:c9:b1:49:58:39:18:5c:2a:d3:
                    94:e2:b6:a0:34:da:13:4d:fd:14:14:b6:d5:f5:1c:
                    47:ca:10:40:ee:df:7f:29:8d:02:ab:9f:49:f6:8d:
                    e5:25:64:81:84:b1:37:46:fb:16:31:25:fc:6a:e0:
                    11:97:79:1f:a1:00:c2:09:e6:54:78:40:db:d6:66:
                    92:b6:1c:56:91:0e:a6:ed:f3:e5:a0:10:80:bd:4c:
                    8e:9e:4d:05:6b:f3:59:fa:62:b2:8b:95:fb:a4:a1:
                    1a:52:da:03:ab:ed:29:78:5a:6b:a0:e9:bc:27:b8:
                    37:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7E:01:23:97:21:F0:07:58:50:1F:3C:6F:C3:9A:56:5A:17:C6:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/f2c1b709-4fda-38fb-8576-82e9bfcec303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.190.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:99:a0:ed:83:f0:cb:80:03:57:7f:28:20:4c:9e:a8:37:8e:
         79:53:3e:b7:fa:a0:23:72:8e:64:77:e5:25:f7:72:6c:7a:70:
         ca:c1:b8:98:43:91:9a:8c:1d:d2:99:03:a4:27:d2:87:dd:80:
         01:36:c3:dd:a3:62:f6:a9:68:0d:6a:00:d4:51:34:51:3b:84:
         f9:c5:34:73:2f:74:61:ff:3c:d8:0c:e6:ac:33:52:ac:c2:34:
         1b:66:59:6e:3c:b3:a5:06:cb:fb:bf:16:e6:9e:6e:bc:39:5e:
         8c:86:41:ae:04:64:42:bd:7e:b2:21:93:a3:a6:c3:b6:43:26:
         06:73:8c:b2:88:af:c5:09:6a:f7:f6:56:31:eb:bc:dd:01:90:
         15:53:b3:94:49:f4:64:26:ff:e2:a1:8b:87:5e:ba:f9:29:23:
         c4:85:9f:22:b7:44:bc:c6:9c:68:d1:3f:8c:7b:91:81:61:25:
         10:d1:07:d5:39:15:dd:4b:64:ef:bf:e2:f0:41:a8:c1:2b:82:
         7b:df:a0:21:16:03:92:20:77:c9:58:84:15:ed:6d:85:6b:0b:
         b8:23:a3:90:02:e0:54:98:47:e5:f9:1e:b3:60:09:0d:68:7d:
         fc:40:ab:47:fe:22:bb:c5:f0:67:d1:80:df:ae:b2:7c:1f:b8:
         e3:4d:1d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:53:17 2026 by rpki-client