Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/7aa2a0a5-ad90-3d26-80e9-5b25ce392ee7.roa
File:                     7aa2a0a5-ad90-3d26-80e9-5b25ce392ee7.roa (raw, json)
Hash identifier:          Lp7FNXTlQwRP2Hge9icYx4uCxdzuH5b1ReT6OtpadCo=
Subject key identifier:   F4:15:18:71:85:81:FA:0F:A3:AC:E9:52:37:1F:61:32:40:B2:FB:8C
Certificate issuer:       /CN=469597d0-a870-46e2-b0a1-04a71dad0b25
Certificate serial:       010D0C9F4328584F57680F41BFAB6FA5581FF780
Authority key identifier: D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/7aa2a0a5-ad90-3d26-80e9-5b25ce392ee7.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     22793
IP address blocks:        148.76.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:0f:41:bf:ab:6f:a5:58:1f:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469597d0-a870-46e2-b0a1-04a71dad0b25
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=78d45572-7573-443b-8190-4c2f2c911bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:eb:01:f6:8f:2e:e6:c2:2b:17:a2:1f:f2:0e:
                    14:14:23:cd:49:c0:4b:0c:6b:f4:da:b2:65:53:bc:
                    18:43:16:95:26:25:15:60:99:4a:ca:9d:b8:ac:8f:
                    33:01:41:eb:ad:dd:0b:84:f9:49:be:6d:94:05:19:
                    d0:3b:6a:2e:6c:db:70:4f:00:0c:30:2f:cd:6f:a4:
                    e4:b1:e2:c9:71:76:84:44:88:c2:ec:30:aa:80:03:
                    41:fe:1e:f1:d7:ee:ab:99:76:de:49:9a:3d:89:fb:
                    94:8c:02:1f:ed:7d:04:88:92:0b:e4:f3:4d:4b:07:
                    e1:76:f4:8c:78:ae:90:15:21:1b:c6:0b:11:73:c8:
                    0a:b2:91:f4:d1:f8:da:7a:7c:c1:7e:c6:33:a5:12:
                    b3:9e:64:f6:c8:5d:c3:c3:91:c3:ff:05:a7:2d:4b:
                    a2:22:7f:b2:d0:d0:8b:69:00:b3:16:04:7a:0c:d4:
                    bf:68:bd:53:21:25:f6:14:c3:4b:20:35:d4:17:85:
                    8d:ec:48:64:6c:4c:59:05:7a:7b:27:d2:b0:63:4a:
                    cb:e2:79:7c:6d:66:2d:36:94:82:3b:47:69:ec:d2:
                    fb:14:3c:34:11:2e:ae:7e:5c:46:ad:73:9f:d3:93:
                    c6:98:4b:77:a2:13:05:87:ce:da:5d:db:54:e1:8a:
                    60:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:15:18:71:85:81:FA:0F:A3:AC:E9:52:37:1F:61:32:40:B2:FB:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/7aa2a0a5-ad90-3d26-80e9-5b25ce392ee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl

            X509v3 Authority Key Identifier:
                keyid:D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.76.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:ec:10:9a:d6:e7:ab:89:2d:b7:57:5a:05:27:53:e4:bd:62:
         73:09:2f:27:63:20:bc:1b:3a:f4:89:c8:d1:cc:f3:5c:0b:8c:
         04:06:7d:13:10:a5:c5:88:fc:0e:cf:7d:f8:4e:4e:e0:5a:e3:
         07:29:2d:d3:be:43:31:1c:6e:f3:ad:e2:2f:90:10:9c:1d:6c:
         5c:a2:29:77:bc:b0:e7:c1:ab:2b:04:0c:06:11:7d:d5:36:85:
         81:2a:2a:37:50:a8:cb:c7:ff:37:48:a1:9c:24:dd:c9:2e:79:
         c6:bb:30:bf:7e:6d:ff:f3:9d:82:be:1e:5f:51:00:83:ad:93:
         1c:6e:9a:de:07:c2:af:9d:fe:e8:21:df:e6:f5:ea:99:0f:28:
         48:01:a7:ec:85:75:c6:17:e9:c1:d1:a5:2d:6a:83:94:64:49:
         d4:dc:87:e3:84:a2:fc:f5:b0:14:da:b9:ca:e3:ae:fd:dd:99:
         e2:6a:cd:0e:b2:81:c7:d3:84:95:01:0a:49:6f:64:2f:b3:aa:
         91:d5:5d:23:22:d5:60:b6:83:ab:1c:05:87:f8:e2:ce:fb:94:
         95:4a:70:a1:4d:91:b1:f3:11:e3:36:d2:34:47:aa:85:d8:73:
         b3:2d:9d:da:0f:1c:8e:18:54:bf:d3:c1:8d:31:5d:d4:e7:da:
         ed:18:bd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 11:40:45 2026 by rpki-client