Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ab829bd-ea9a-37a6-a31c-4d89c83a7ead.roa
File:                     9ab829bd-ea9a-37a6-a31c-4d89c83a7ead.roa (raw, json)
Hash identifier:          z3cXpQsuIlslzkV1r5bEAUzYnJQpDtOx7CaNUD5OP9g=
Subject key identifier:   5A:B9:A9:DD:7E:23:80:C2:74:D9:E0:98:F8:AF:85:CE:8D:78:C1:1E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F4978A9F7E5E6243E0C73F300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ab829bd-ea9a-37a6-a31c-4d89c83a7ead.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33652
IP address blocks:        67.177.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:78:a9:f7:e5:e6:24:3e:0c:73:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a2ad6548-615f-437e-acf8-82afba65d819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1a:ea:7d:9c:fb:3a:8c:ae:f5:02:ab:fc:1f:
                    9b:8e:fc:1e:5e:83:b9:93:9a:1f:30:96:01:32:c0:
                    72:97:28:b0:6e:d2:7d:7f:c4:97:c2:8c:2b:e9:09:
                    6d:79:95:f8:84:1c:21:71:0c:49:72:e6:dc:d8:42:
                    ad:47:23:9b:c0:83:85:6e:ae:ae:de:a0:41:58:6e:
                    d0:c8:86:56:cd:cf:7a:27:b7:fe:06:72:b8:9b:84:
                    20:eb:98:a2:ee:7b:41:f6:f9:83:42:b3:39:57:2a:
                    e0:ba:16:8b:f2:24:a4:6b:de:96:e7:33:61:79:ad:
                    82:21:33:b9:5e:d1:49:96:12:86:81:1d:ab:0b:5c:
                    f9:0e:7f:60:4e:e1:2b:04:44:c3:bc:f3:4e:cd:1d:
                    ec:48:70:4a:4f:14:fd:ae:3a:0c:07:69:3b:89:f8:
                    f7:64:f7:f7:8d:6f:c2:1c:b4:e7:04:83:83:87:46:
                    d8:bb:d4:5f:42:1f:07:56:4f:94:a9:75:35:21:1d:
                    d3:68:bc:72:3e:33:fd:2e:16:2b:74:2b:e0:94:fb:
                    7a:84:32:fc:2c:ad:92:c9:f8:80:1e:c0:d0:e6:96:
                    2f:ad:a2:a7:d8:a7:76:45:c1:ed:76:cb:b4:69:05:
                    b6:a6:0c:22:a7:94:a3:ad:21:0c:3c:a0:28:86:1d:
                    be:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B9:A9:DD:7E:23:80:C2:74:D9:E0:98:F8:AF:85:CE:8D:78:C1:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ab829bd-ea9a-37a6-a31c-4d89c83a7ead.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.177.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:76:92:09:bd:b2:4c:85:d2:13:9a:1d:15:18:6b:30:81:b9:
         07:43:dd:82:b9:9a:8c:98:f7:ce:45:55:bb:b1:10:5b:5a:de:
         a3:97:a2:8b:9b:d2:bf:f7:c1:19:04:74:52:59:47:4d:5d:31:
         69:b1:16:57:be:0d:a6:d8:b6:0b:0e:f4:ae:f0:f1:69:21:de:
         a3:14:59:a2:47:e6:33:a8:9f:e2:ba:f7:55:1e:f5:79:ce:83:
         26:05:11:df:b0:e2:08:5c:bc:54:a7:4d:7e:dd:bc:55:53:6e:
         91:60:fa:80:a9:34:09:62:78:4f:7d:6e:0d:bf:ea:0b:c7:1b:
         15:1a:a3:81:29:29:95:38:38:8a:a1:a1:e8:66:f4:fc:3d:5a:
         9d:27:a1:c5:21:37:61:d5:2d:91:f8:a0:bc:12:a0:7f:b3:8d:
         84:56:df:7d:7e:21:6f:42:8e:54:ed:d2:a0:64:74:21:7e:ab:
         11:b9:b9:23:fa:82:53:74:1f:67:3b:1f:56:c6:82:20:d2:0f:
         d9:13:04:58:93:02:ad:06:18:fd:40:a4:cf:f1:b5:01:93:47:
         86:2b:a9:56:41:0b:28:3f:62:1b:28:7c:48:16:57:76:c9:42:
         a7:08:52:ab:7e:e9:10:c0:59:02:a1:f8:c7:1a:f9:65:13:e9:
         80:91:1c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:45:33 2026 by rpki-client