Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/43e82bd7-ad2a-3627-a9d4-de01b6c60cbe.roa
File:                     43e82bd7-ad2a-3627-a9d4-de01b6c60cbe.roa (raw, json)
Hash identifier:          +3kY04IQNjnyGWWmHbRajTdmGFW84FWcoglsyi0UtZQ=
Subject key identifier:   4D:33:B7:05:75:E3:52:52:15:C1:D3:FB:32:B4:64:E3:F0:3E:84:EA
Certificate issuer:       /CN=7e81ed8c-9250-496b-9fc6-10701b967c5b
Certificate serial:       010D0C9F4328584F49759875A7A5A3BE84540B60
Authority key identifier: 26:1F:5C:90:21:17:05:BA:03:A7:6D:2B:BA:37:0A:28:D2:12:AA:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/43e82bd7-ad2a-3627-a9d4-de01b6c60cbe.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20220
IP address blocks:        97.64.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/7e81ed8c-9250-496b-9fc6-10701b967c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/7e81ed8c-9250-496b-9fc6-10701b967c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:98:75:a7:a5:a3:be:84:54:0b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e81ed8c-9250-496b-9fc6-10701b967c5b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=398513de-0e2a-4d73-a5dc-12b092c3a67f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:99:18:6c:4f:75:e8:fa:0c:d7:c0:0c:65:06:
                    6e:b4:b3:3d:76:a0:c5:da:fd:3f:89:71:dc:9c:48:
                    69:aa:d1:03:0a:8f:51:cd:a3:0a:9f:8c:fc:cc:ae:
                    cd:7f:7b:1e:0a:3d:aa:f2:be:76:fe:c8:b5:91:e8:
                    30:5c:48:dc:5a:28:c9:4d:76:18:ab:5a:5b:68:5b:
                    89:03:fc:69:27:19:36:1d:8c:5c:cc:e0:eb:28:29:
                    c2:69:2d:11:6c:d4:43:57:b3:9b:f4:d8:50:27:ae:
                    99:11:92:25:02:98:6f:f9:cf:ee:26:9d:58:e5:dd:
                    d2:e3:96:62:3e:8c:a8:21:78:43:3a:63:2f:3c:88:
                    1d:0e:07:e1:e1:67:51:93:27:38:17:b2:2f:e4:df:
                    66:e9:5a:a3:bd:5e:9e:78:86:fb:a0:20:44:96:62:
                    0d:20:c0:03:50:de:89:cc:08:e3:4d:f0:33:38:dc:
                    b6:38:9a:1d:83:72:3b:3e:76:28:d9:15:dd:42:a1:
                    da:f1:76:c7:54:02:e1:90:c9:17:64:12:4c:dd:49:
                    4d:5a:fe:52:c8:f2:0f:89:30:50:d4:c7:cf:23:08:
                    94:d4:45:ca:c6:b5:6d:c8:88:f2:a3:b4:f5:b0:79:
                    0f:bb:d4:48:88:37:c0:49:d2:c7:72:0e:07:40:82:
                    9c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:33:B7:05:75:E3:52:52:15:C1:D3:FB:32:B4:64:E3:F0:3E:84:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/43e82bd7-ad2a-3627-a9d4-de01b6c60cbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b/7e81ed8c-9250-496b-9fc6-10701b967c5b.crl

            X509v3 Authority Key Identifier:
                keyid:26:1F:5C:90:21:17:05:BA:03:A7:6D:2B:BA:37:0A:28:D2:12:AA:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7e81ed8c-9250-496b-9fc6-10701b967c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:b1:b2:8c:8b:8d:8d:7f:ce:02:02:76:bc:15:77:7c:10:f9:
         ec:d8:cf:4c:d9:e7:d4:f5:76:64:42:44:2b:31:4a:ea:6c:65:
         a4:8a:ec:8b:99:a9:f9:ba:9f:3a:28:dc:df:47:7a:ce:06:d3:
         b2:3f:1d:85:06:81:80:ce:eb:fb:6c:2b:29:26:ac:fe:91:60:
         36:3c:ac:40:0c:d3:a4:c3:de:3a:7f:54:be:54:a1:0b:a0:95:
         55:0f:e7:d2:65:49:e7:fe:e9:ae:b1:6b:e0:cc:9b:1d:84:89:
         a5:4a:ad:3e:d3:6f:c8:a1:51:f7:59:0d:49:92:b4:d6:ac:13:
         d8:f2:6b:df:f0:14:67:7a:c0:d4:47:de:65:b1:c8:d4:ed:9a:
         fe:78:ec:e4:21:de:d9:19:8d:f3:74:7f:56:74:71:04:d9:d5:
         cf:7f:de:93:82:c6:9c:ac:39:c4:cf:1e:af:ea:c1:7d:6d:98:
         a8:95:2e:0c:fc:a3:49:6e:4a:c3:08:84:2d:5e:95:05:6e:b1:
         5d:b8:de:37:83:15:98:de:01:0f:50:bb:da:50:53:d6:c8:5c:
         91:de:53:dc:5e:31:77:63:61:fd:e1:08:87:4e:d4:b3:3d:d3:
         10:cb:0e:60:1c:96:ac:03:95:1d:c0:50:42:e2:c1:4f:68:b1:
         51:82:63:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:38:04 2026 by rpki-client