Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a782258-be1b-3d1e-8b80-b1e6a1aa5600.roa
File:                     8a782258-be1b-3d1e-8b80-b1e6a1aa5600.roa (raw, json)
Hash identifier:          +eAsDwdGV0Ctp/kqMgS+HZTCmtrqrM3MJroXbYj1CRE=
Subject key identifier:   44:81:3F:86:0F:97:09:C0:B8:9F:7B:48:F5:33:AD:25:5F:3B:2F:E7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F03A7B8AFBB44B72577754F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a782258-be1b-3d1e-8b80-b1e6a1aa5600.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     7725
IP address blocks:        73.122.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:b8:af:bb:44:b7:25:77:75:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=bd3cf614-fadd-41ec-8701-bc05d94c569d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6f:0f:04:02:c7:3b:98:3c:4f:28:49:af:d2:
                    81:1e:0a:90:e9:20:01:b4:22:6d:80:20:a0:6e:48:
                    2a:b6:56:e8:75:fe:eb:40:b8:36:a1:00:99:9b:cb:
                    92:83:bd:13:4a:dc:5f:3f:13:7c:01:17:82:15:0b:
                    da:ca:b4:e0:4d:4e:a1:71:b6:59:f0:39:53:d7:3d:
                    65:ab:15:d3:e0:7e:29:2c:60:00:0e:b2:c9:a9:14:
                    9d:e5:03:45:67:12:86:87:06:4e:f7:4c:ed:87:c8:
                    c7:b7:d5:f7:7c:8e:2c:0a:82:2b:01:4e:69:38:14:
                    0e:2f:44:05:43:81:2c:b2:a2:11:8f:06:a3:a9:d6:
                    90:30:dc:70:0e:e1:3b:07:2a:d0:62:55:b8:5a:cd:
                    5f:e7:07:26:7f:99:f2:63:c5:fb:6b:8c:77:2f:e4:
                    17:4d:7a:a6:c9:47:ef:27:a2:8e:79:ac:14:fe:4f:
                    e7:30:a3:ab:5a:9a:02:37:16:57:76:b9:99:76:f5:
                    bb:dd:e7:dd:6e:4d:a9:8b:fd:fb:c5:51:fc:4a:a7:
                    ca:c2:4a:24:27:db:37:b4:ca:a3:25:3f:15:d9:23:
                    1a:ac:cd:64:fb:2b:37:7e:63:0e:22:61:ca:b3:37:
                    0a:70:ff:d2:6f:03:af:0f:48:4e:a1:01:dc:8b:9a:
                    c0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:81:3F:86:0F:97:09:C0:B8:9F:7B:48:F5:33:AD:25:5F:3B:2F:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a782258-be1b-3d1e-8b80-b1e6a1aa5600.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  73.122.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:3d:ce:62:a6:35:46:94:3e:69:eb:a7:a8:dd:a6:55:25:6e:
         b6:b9:3d:13:00:da:26:77:b8:87:9f:3f:30:7e:8a:e1:c4:01:
         f1:08:fa:b1:62:9a:c4:f3:50:13:c1:c4:d2:f1:4c:5f:0a:77:
         f2:a6:e0:8e:56:fc:27:84:0e:07:36:a1:92:92:e1:89:42:d2:
         60:a5:ed:fc:38:29:35:0d:65:15:19:05:15:ca:01:41:cb:48:
         65:65:d4:8e:b0:45:7f:29:08:8e:b9:0d:c7:d9:da:e2:06:3c:
         cf:62:b0:c9:5c:00:8a:3a:36:0c:b8:32:66:7c:32:7c:04:5b:
         9f:b0:1c:05:43:64:e9:b4:06:7d:cb:11:3c:ba:d2:dc:a2:d8:
         8f:c8:84:d4:b8:1e:dd:2e:88:8d:fd:34:aa:03:e9:e3:ff:54:
         6a:d9:40:75:35:fb:5c:4d:c9:3c:cd:6b:83:22:2b:28:99:9d:
         48:54:a5:8c:d0:56:81:b7:af:8c:66:a4:c9:63:29:3f:13:db:
         de:06:d1:25:3a:c6:be:65:2b:c5:41:84:f9:a3:ec:6b:7f:fa:
         33:87:e0:0d:df:27:b6:de:4c:e2:45:47:a6:b4:ef:da:b8:77:
         e1:89:5c:d6:07:86:22:83:7d:39:b9:6c:7d:a6:25:60:99:74:
         33:87:4e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:12:39 2026 by rpki-client