Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/ef582aa2-89d3-3629-b20f-33c8ef81de65.roa
File:                     ef582aa2-89d3-3629-b20f-33c8ef81de65.roa (raw, json)
Hash identifier:          NX2k9sXA9MMKycMTYpNzbkurAtFxh7MZdl9p20AHKeE=
Subject key identifier:   89:35:83:FF:2A:BD:47:0D:81:AC:E5:53:F2:BF:56:9B:17:40:51:67
Certificate issuer:       /CN=457522b0-cf44-4757-ac16-6215c2516e52
Certificate serial:       010D0C9F4328584E3B948C57DA66025B39763780
Authority key identifier: 90:D3:82:56:32:E3:87:FD:7A:E2:9F:B6:CD:23:DB:D6:F6:3A:F8:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/ef582aa2-89d3-3629-b20f-33c8ef81de65.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     401890
IP address blocks:        142.99.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:8c:57:da:66:02:5b:39:76:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457522b0-cf44-4757-ac16-6215c2516e52
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=37388dac-88ad-4033-ad62-b734a9552376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:36:2a:7c:c0:12:6b:af:2e:80:ab:ee:29:66:
                    39:8a:a3:79:e3:3a:77:84:0c:00:8c:35:0b:31:f5:
                    06:fd:e0:51:47:0c:c7:c7:b9:7b:24:d0:01:31:4b:
                    70:a4:e1:23:3c:f9:19:5b:05:b6:d9:f9:c9:2b:fa:
                    fc:1e:88:c1:86:64:ab:31:c8:c7:77:76:56:4f:dd:
                    32:09:ea:0e:11:b8:09:77:96:63:aa:f9:79:06:28:
                    95:6b:be:cb:f4:a1:89:23:e0:e4:9b:68:88:01:ac:
                    12:55:60:e8:40:54:0b:d2:2f:37:86:57:a6:db:13:
                    57:a6:c7:2f:38:47:08:85:46:bd:fa:5d:4a:3e:da:
                    8d:aa:f9:54:ff:ed:df:43:32:c9:bf:d1:e5:ea:23:
                    7e:6c:25:15:5e:3b:d4:66:e7:6d:91:11:51:e7:8e:
                    f7:5e:de:a8:86:e0:8e:73:c5:a9:8e:82:30:e9:13:
                    d6:25:07:8f:49:7c:d6:9f:a1:5a:0f:6e:90:eb:9a:
                    26:0c:5b:c3:4a:1f:25:18:e6:c0:c0:8e:cd:69:1d:
                    32:35:df:5c:16:df:7f:f0:17:1a:d4:0e:30:ec:1a:
                    45:23:cc:5c:d4:39:ee:fb:15:e9:0e:95:ac:f5:27:
                    f8:a5:4c:e3:cb:92:5f:a3:b9:80:5d:c5:1e:b8:dc:
                    94:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:35:83:FF:2A:BD:47:0D:81:AC:E5:53:F2:BF:56:9B:17:40:51:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/ef582aa2-89d3-3629-b20f-33c8ef81de65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52/457522b0-cf44-4757-ac16-6215c2516e52.crl

            X509v3 Authority Key Identifier:
                keyid:90:D3:82:56:32:E3:87:FD:7A:E2:9F:B6:CD:23:DB:D6:F6:3A:F8:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/457522b0-cf44-4757-ac16-6215c2516e52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.99.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:11:7b:8b:c4:c8:92:36:7c:44:e7:77:68:33:c2:8d:e5:b3:
         17:3e:6a:d8:7e:20:c8:90:5c:3c:91:92:e7:b2:cb:58:25:8b:
         74:e1:fd:5e:f6:86:74:74:b9:d6:d1:de:d4:77:4c:62:cf:16:
         9d:89:eb:7a:08:13:b8:9b:fa:bd:3a:95:e1:cd:96:9c:1b:87:
         f5:89:13:fd:ee:c5:6f:7d:49:c7:69:66:4c:60:66:7b:92:e1:
         60:ce:a9:07:ae:e6:f5:ce:08:dc:b5:75:14:af:b0:90:7a:b1:
         dc:04:2d:b1:24:e7:ff:e2:bf:27:ea:36:67:c6:08:5b:e3:16:
         8e:9c:88:67:23:20:ac:28:66:2a:0d:0f:b2:f5:ca:2a:cc:4d:
         c7:f8:05:61:8e:53:41:99:ce:9c:eb:58:5a:de:0c:96:f0:4f:
         36:7c:83:1e:d8:08:b1:9c:d7:6d:bf:af:91:50:b3:8b:9e:9f:
         78:dc:88:bf:14:b5:24:01:a5:ef:ad:0a:bd:7c:90:cf:fe:32:
         6b:7f:34:bc:d4:d3:88:52:f4:98:68:ab:b9:df:a5:40:53:ef:
         e3:04:68:81:f2:51:78:3a:82:4a:bc:d1:3f:24:60:aa:2e:52:
         4a:53:80:e9:f1:21:a7:0a:a4:46:70:ec:b4:d4:59:19:eb:67:
         a6:1e:e7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:10 2026 by rpki-client