Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/87363de2-c826-3fe2-8f41-0bfb9fdc8dc8.roa
File:                     87363de2-c826-3fe2-8f41-0bfb9fdc8dc8.roa (raw, json)
Hash identifier:          OEqb2auqQNzuJ+vptX57wKDU9JLFjBHCSCvzoFxrNhQ=
Subject key identifier:   69:11:09:94:0C:6B:7A:2B:69:59:04:B1:F4:DF:E9:BB:23:B7:40:C2
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F6292FF787C8874E64C90DBC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/87363de2-c826-3fe2-8f41-0bfb9fdc8dc8.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     33363
IP address blocks:        71.44.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:ff:78:7c:88:74:e6:4c:90:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=5e074fd5-0bb6-42e5-9966-8b66e8c3e54c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e1:33:a6:97:f7:c4:8f:08:71:a9:56:4c:95:
                    6a:13:90:2d:2f:d0:11:97:f7:b0:89:da:c7:d9:06:
                    61:cc:bd:58:d6:e4:f1:9f:4e:d2:31:c5:01:56:c6:
                    ad:24:60:31:f0:eb:01:a5:6a:c4:1f:80:51:f8:20:
                    37:e6:41:92:41:a8:16:a3:94:d5:e0:e7:a5:00:f0:
                    43:aa:24:25:01:25:0c:09:74:eb:6f:d9:d6:76:1a:
                    59:d6:ee:74:63:07:16:4e:48:3d:85:2c:30:5b:7e:
                    5d:f6:9e:44:8d:ea:1f:3e:9f:b0:05:9a:1a:4b:43:
                    c1:5d:6d:45:70:d8:5f:e7:06:46:f6:d6:76:7a:d1:
                    e6:36:36:71:5d:bd:b3:8f:5d:50:b2:09:e6:82:1d:
                    ec:c8:d3:2f:7f:ab:38:e7:dc:34:94:ef:f3:b0:f4:
                    2b:43:d3:43:27:8b:fc:3b:01:7a:fc:64:4b:bc:7f:
                    39:42:c3:c3:cc:f7:f7:d3:68:ce:d2:0a:e9:a6:05:
                    86:73:d5:db:dc:26:43:61:08:82:b7:f5:58:3f:37:
                    36:ff:ce:cf:aa:fe:c2:0a:7c:ed:5f:fa:26:a1:11:
                    33:c2:6e:3b:1f:e6:39:91:4c:a1:c8:17:c2:cf:da:
                    b1:fd:12:ef:7d:85:95:ec:c9:99:db:63:00:b3:c1:
                    2d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:11:09:94:0C:6B:7A:2B:69:59:04:B1:F4:DF:E9:BB:23:B7:40:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/87363de2-c826-3fe2-8f41-0bfb9fdc8dc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:56:aa:ae:a4:ac:c6:53:c3:76:8c:75:22:7b:c7:91:02:d6:
         74:8b:53:a4:71:ac:93:cd:71:89:c1:a3:ff:be:98:11:d6:cc:
         42:76:18:d7:c3:fd:62:bf:66:bf:5f:1b:1b:ef:d5:44:83:fb:
         31:2e:3d:68:b8:fd:de:86:2f:28:85:fe:50:1f:ea:a4:ae:eb:
         79:87:23:0a:eb:21:c6:09:d6:cf:e5:70:1c:6b:f1:91:9b:d1:
         86:a8:d1:30:3a:4e:67:1f:0a:e8:12:c3:d0:2f:ba:35:61:1f:
         bd:60:45:4d:20:6c:a0:66:17:ae:91:e1:81:b8:70:7b:e6:cd:
         74:b2:ee:f9:5e:5b:46:d0:55:99:ec:81:fd:f9:25:af:b7:d8:
         a2:c4:db:81:3b:70:3e:d0:4d:1c:2f:c7:b0:07:1e:93:ca:f6:
         a8:02:7d:43:dc:c2:63:a6:44:3e:aa:e1:41:94:1d:52:79:81:
         8d:cc:fd:ca:f0:be:25:af:f7:21:c9:59:c0:4a:47:52:88:43:
         ff:02:45:63:13:75:55:4a:c7:5f:08:ab:51:71:80:45:73:0b:
         02:ee:16:0d:5c:51:76:74:4c:cb:71:41:48:8c:18:61:b6:b8:
         aa:17:54:e5:20:43:57:fc:51:37:76:3b:ba:95:27:41:4b:84:
         83:f2:8a:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikv94fIh05kyQ28AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
NWUwNzRmZDUtMGJiNi00MmU1LTk5NjYtOGI2NmU4YzNlNTRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+Ezppf3xI8IcalWTJVqE5AtL9ARl/ewidrH
2QZhzL1Y1uTxn07SMcUBVsatJGAx8OsBpWrEH4BR+CA35kGSQagWo5TV4OelAPBD
qiQlASUMCXTrb9nWdhpZ1u50YwcWTkg9hSwwW35d9p5EjeofPp+wBZoaS0PBXW1F
cNhf5wZG9tZ2etHmNjZxXb2zj11Qsgnmgh3syNMvf6s459w0lO/zsPQrQ9NDJ4v8
OwF6/GRLvH85QsPDzPf302jO0grppgWGc9Xb3CZDYQiCt/VYPzc2/87Pqv7CCnzt
X/omoREzwm47H+Y5kUyhyBfCz9qx/RLvfYWV7MmZ22MAs8Et3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGkRCZQMa3oraVkEsfTf6bsjt0DCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvODczNjNkZTItYzgyNi0z
ZmUyLThmNDEtMGJmYjlmZGM4ZGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRywgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADZWqq6krMZTw3aMdSJ7x5EC1nSLU6RxrJPNcYnBo/++mBHWzEJ2GNfD
/WK/Zr9fGxvv1USD+zEuPWi4/d6GLyiF/lAf6qSu63mHIwrrIcYJ1s/lcBxr8ZGb
0Yao0TA6TmcfCugSw9AvujVhH71gRU0gbKBmF66R4YG4cHvmzXSy7vleW0bQVZns
gf35Ja+32KLE24E7cD7QTRwvx7AHHpPK9qgCfUPcwmOmRD6q4UGUHVJ5gY3M/crw
viWv9yHJWcBKR1KIQ/8CRWMTdVVKx18Iq1FxgEVzCwLuFg1cUXZ0TMtxQUiMGGG2
uKoXVOUgQ1f8UTd2O7qVJ0FLhIPyivM=
-----END CERTIFICATE-----
Generated at Tue Oct 6 01:00:24 2026 by rpki-client