Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7669ea1d-678a-39e1-9b34-3cdb12f8849e.roa
File:                     7669ea1d-678a-39e1-9b34-3cdb12f8849e.roa (raw, json)
Hash identifier:          8+UbCHPkJiLXVL9+Ots23JghncUPhMa8IpnGdrPA+Qs=
Subject key identifier:   63:FE:35:12:81:31:AB:6F:8D:D3:D2:79:FF:4B:F4:46:AA:16:8E:08
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F03A806BB656A1E701FBFDF40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7669ea1d-678a-39e1-9b34-3cdb12f8849e.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     7725
IP address blocks:        67.191.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a8:06:bb:65:6a:1e:70:1f:bf:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=e891b88f-f442-47c5-b9f9-61e46d0092e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a6:f3:52:1d:54:04:b2:34:0c:61:3b:2e:37:
                    5d:19:4f:3c:ee:a9:1d:95:2b:38:5d:1a:1a:69:a8:
                    73:a1:25:ee:3a:01:a0:61:4e:c1:43:52:65:e4:37:
                    87:77:9d:54:b7:ef:a5:65:b6:95:59:f0:c9:10:ae:
                    0e:4e:1b:d4:2f:48:16:83:0f:58:d6:1f:47:1a:bf:
                    fe:e5:7d:b4:07:bb:da:34:a9:ea:7a:fe:7c:ac:60:
                    3e:02:f6:77:9b:00:21:08:3f:eb:dd:ea:28:5c:9e:
                    66:90:37:ff:b3:1b:34:eb:b4:41:20:54:a9:e5:cb:
                    87:3d:f0:52:0c:f1:d6:1a:37:85:45:a7:ec:a7:d0:
                    16:b0:12:2d:69:52:fc:30:30:36:07:31:28:3e:20:
                    3a:fe:13:19:42:91:79:ba:86:83:5d:44:86:b8:6f:
                    c1:e5:00:e2:d5:24:78:cc:d0:41:61:8e:f2:32:2d:
                    e0:f4:d5:aa:75:19:bb:7c:33:62:bb:0b:5d:73:d9:
                    c9:5a:08:f1:9a:f0:a5:04:c0:04:b0:5e:ba:e6:df:
                    05:d6:e1:6f:69:2d:df:77:10:5f:f3:65:c4:53:31:
                    ce:6d:61:90:c0:a9:74:a1:87:0e:77:6d:86:6a:3e:
                    63:eb:79:e9:17:95:e5:34:22:5a:e6:82:b5:33:a2:
                    b4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FE:35:12:81:31:AB:6F:8D:D3:D2:79:FF:4B:F4:46:AA:16:8E:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7669ea1d-678a-39e1-9b34-3cdb12f8849e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.191.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:7f:12:90:0b:68:1e:9a:41:31:43:48:7e:9f:85:fb:01:f8:
         8b:91:6f:ce:d0:a6:12:69:15:2a:27:c2:42:a9:43:44:c1:15:
         b4:98:ce:3f:81:46:b1:4b:47:5c:ff:83:d6:f2:a0:56:20:c9:
         60:78:c8:95:dc:91:31:94:8e:b2:04:8c:ee:cc:31:c9:e7:0d:
         2c:32:cc:64:44:10:6a:71:4e:3e:30:83:f3:a2:52:33:1a:a1:
         62:43:2a:26:05:cc:30:fb:e2:fb:89:a5:de:ec:ce:52:66:12:
         1f:7b:4a:1e:a2:6a:1c:fb:42:6f:ec:89:9f:95:f0:a4:31:db:
         91:90:48:32:ea:08:74:14:77:b4:69:a7:3c:c4:be:ec:7c:4f:
         97:b4:62:18:bf:66:ab:fa:fc:c9:0a:0f:f7:58:0f:c1:21:f2:
         c3:69:52:71:d2:13:6f:e5:08:ac:f5:27:84:1b:e0:be:dd:f2:
         9d:ef:a9:35:08:ed:f7:da:a4:73:de:34:68:1f:e3:30:19:69:
         c9:0a:fb:58:4e:eb:40:39:14:a9:22:96:3d:77:3f:67:46:48:
         4f:e2:a0:38:b9:40:93:34:e5:8d:52:e7:e1:74:8f:5f:4c:d5:
         0f:a5:14:76:6d:27:6b:6f:e3:a8:40:ff:61:ef:6b:9c:59:d2:
         f0:0f:ab:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:03:56 2026 by rpki-client