Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b41bc9a8-9d23-3e5b-90d5-543eb2005c2c.roa
File:                     b41bc9a8-9d23-3e5b-90d5-543eb2005c2c.roa (raw, json)
Hash identifier:          Sk/ZWr/Y0Fpt/Ch9Hz3zkMD1VSVKvHJ+rWI/0nF17OU=
Subject key identifier:   AD:BD:AD:E6:AF:C4:29:D0:0A:A4:44:95:DB:2E:B3:EB:BB:75:3D:D1
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584F498625D542FF830289237980
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b41bc9a8-9d23-3e5b-90d5-543eb2005c2c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54113
IP address blocks:        167.82.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:25:d5:42:ff:83:02:89:23:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c4b2b6d8-a075-413e-986c-a8b3ec4af1a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c1:bb:b4:70:cd:8f:41:50:bf:92:b4:53:75:
                    f7:72:bb:7a:1d:b6:ea:43:22:41:5b:3f:65:2d:c9:
                    45:c6:d3:74:51:20:53:b5:3a:c1:1c:fd:f9:5f:dc:
                    c5:fc:38:28:7f:1a:ed:93:bf:44:2a:49:91:5b:fd:
                    ec:a4:39:9d:be:d0:e4:ac:dc:68:86:23:23:43:35:
                    c5:9a:fb:64:9f:01:00:1b:3e:44:7e:24:89:e3:06:
                    9d:53:3b:a5:52:6c:54:44:98:ae:9e:c8:a7:c8:3f:
                    c9:75:d5:73:38:a2:8e:7d:11:74:f7:f9:05:08:77:
                    f4:28:cf:f6:7b:e9:b5:a0:4a:ba:f1:6d:a8:cd:59:
                    1f:18:6a:fa:4a:f8:b4:0a:8d:4c:d7:d9:9e:17:ca:
                    8a:ad:72:e4:63:cc:3a:88:d8:df:cd:66:10:9d:b8:
                    fb:f3:18:9e:25:28:30:84:8f:87:49:15:ee:76:50:
                    f3:d1:af:36:1b:55:56:53:a9:c3:4b:46:ca:e9:86:
                    b8:bb:8f:14:2d:cc:56:b8:04:05:26:06:88:0b:71:
                    e3:b2:e5:34:1f:c5:d6:d8:3b:ef:8f:fe:26:de:b4:
                    2c:cd:00:57:bc:5a:1d:45:d7:94:86:00:20:e4:d2:
                    7b:97:fe:d9:13:95:04:38:18:c1:dd:16:6a:c4:57:
                    5f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BD:AD:E6:AF:C4:29:D0:0A:A4:44:95:DB:2E:B3:EB:BB:75:3D:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b41bc9a8-9d23-3e5b-90d5-543eb2005c2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.82.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:44:56:07:bc:89:73:e4:bc:20:4f:6e:dd:aa:68:19:b9:a6:
         05:b1:ca:cd:27:09:fb:4a:e4:e4:fe:29:17:b4:20:6c:3a:1a:
         92:48:75:9f:dc:d8:02:d9:ba:8e:85:57:82:18:a0:b9:eb:27:
         f5:14:0c:a3:00:22:a4:3b:77:6a:0a:cd:13:66:29:c1:8d:47:
         07:73:27:75:80:2f:25:34:6e:83:af:b4:ac:40:e7:4f:5c:1c:
         7b:7b:bb:29:8d:f4:c0:b6:f5:02:e4:a0:9b:86:01:ba:07:be:
         37:f7:e1:3b:1e:a0:65:36:d1:15:80:37:96:0c:c3:e6:c8:6c:
         2c:29:a6:4e:0f:f9:88:c7:6c:c9:e5:c2:45:3a:f8:11:f6:49:
         d4:1d:aa:3a:0c:3a:38:c4:90:34:9a:e6:42:7d:b3:80:66:db:
         a1:68:36:78:69:89:fe:c3:5e:fb:c6:3f:2e:6e:57:04:8b:3f:
         a2:ce:3c:52:01:9b:c9:d6:41:49:3a:fb:87:f1:33:69:15:ff:
         cc:f2:ea:0e:07:9e:d4:24:d9:df:bc:b6:02:94:16:12:0e:8d:
         c0:57:96:86:31:18:39:33:48:ab:94:f3:a3:e3:17:49:f0:ac:
         d7:ed:8e:19:02:a9:2d:35:6e:0a:da:28:5c:88:8d:2d:44:9c:
         a7:16:df:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:57:59 2026 by rpki-client