Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/91d771b5-3414-30b5-9284-2d93538db7e3.roa
File:                     91d771b5-3414-30b5-9284-2d93538db7e3.roa (raw, json)
Hash identifier:          3kk0KeMuYDBi9+Lu2y/cZBVK0FBYZzoO9r7OZi+6q5k=
Subject key identifier:   82:1D:AC:AF:1A:53:FF:E8:A5:56:55:CA:64:13:C0:4F:93:59:2B:B7
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F0AA22D9746601D91800B5600
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/91d771b5-3414-30b5-9284-2d93538db7e3.roa
Signing time:             Wed 02 Sep 2026 13:00:12 +0000
ROA not before:           Wed 02 Sep 2026 13:00:12 +0000
ROA not after:            Tue 01 Dec 2026 14:00:12 +0000
asID:                     0
IP address blocks:        47.3.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:a2:2d:97:46:60:1d:91:80:0b:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Sep  2 13:00:12 2026 GMT
            Not After : Dec  1 14:00:12 2026 GMT
        Subject: CN=5bf2d686-3cd0-479c-8612-7a2c6b68fa40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:97:26:38:76:da:9f:c5:d5:8e:fb:fe:fc:b9:
                    af:82:7e:80:d6:e3:8a:0b:2e:4d:37:65:a1:de:f8:
                    13:57:4c:27:82:a7:ca:61:fc:d1:28:46:82:fb:25:
                    0e:00:47:5a:3e:95:ad:1d:b1:98:3f:42:15:f0:92:
                    59:c9:46:30:a8:7a:4e:3a:c2:a5:54:03:17:7b:a0:
                    c4:43:e7:85:e5:26:2a:f4:eb:ab:0e:68:c2:09:19:
                    28:dc:38:06:6c:05:fd:1b:5f:20:e3:de:75:08:bc:
                    87:d4:cf:ee:fc:82:df:63:20:ef:92:9a:ed:9f:3a:
                    4c:be:5a:b1:6b:e0:0f:89:b2:15:70:f5:ff:38:34:
                    43:3f:7c:f2:08:94:74:61:68:78:60:bf:0a:04:34:
                    3e:d3:e4:8d:5b:bf:70:62:12:f0:bd:3b:93:9a:69:
                    71:f3:2a:89:b0:a5:c7:34:72:4f:72:44:89:5c:85:
                    eb:ff:6d:ce:b2:08:21:e0:99:cf:43:29:9f:55:ca:
                    be:d4:68:59:79:d3:dd:b7:89:f7:0f:be:da:e6:f5:
                    98:38:f4:99:27:77:2c:2c:1a:bc:46:cd:c0:51:50:
                    3b:fb:7b:12:27:6f:51:18:de:46:24:14:12:ed:d0:
                    ec:9a:b2:ec:e9:2f:97:a1:9e:8e:3c:c6:fe:fe:df:
                    e2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1D:AC:AF:1A:53:FF:E8:A5:56:55:CA:64:13:C0:4F:93:59:2B:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/91d771b5-3414-30b5-9284-2d93538db7e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.3.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:f9:4c:d9:45:33:37:27:e1:22:a5:5b:ae:3e:1e:f7:c6:b0:
         ec:fe:6d:49:1b:c9:c9:c1:ff:cd:4c:7b:88:fd:2c:2a:18:0c:
         57:cf:04:5f:ad:3e:ae:ae:54:24:2a:3b:bc:e1:87:a0:c0:47:
         ce:e7:8e:38:76:23:72:f2:7d:ce:f5:fa:c4:28:47:8d:bb:67:
         3f:18:64:e7:05:8a:f3:b4:81:f0:58:ec:d2:9b:19:72:35:24:
         3f:7f:3a:e9:54:36:a6:15:62:3c:a7:a6:32:67:2a:46:ac:e3:
         8c:9a:22:a4:05:b9:ff:6f:d9:99:a1:6d:17:5d:bc:86:fc:61:
         bd:2b:ca:f1:9e:be:e6:33:02:20:3f:32:da:19:ad:01:54:08:
         76:1f:af:1a:27:6f:6e:a7:09:fa:d1:36:50:86:12:da:16:b0:
         2f:a2:e7:7b:e3:6f:ea:47:c6:40:97:fb:1a:3e:69:32:a8:d7:
         6e:15:1e:8f:9d:46:98:9a:fe:b3:e5:71:63:12:12:5b:62:5f:
         b2:ed:16:75:75:f7:e0:49:f9:91:63:de:18:6e:c2:6e:d7:0a:
         60:4d:64:99:c9:6b:08:3e:5b:f0:0b:96:78:a1:20:e2:eb:2e:
         23:66:2a:2e:28:99:ad:c9:10:ca:d1:ee:ca:42:c2:f3:c1:b7:
         1e:7b:13:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 16:08:15 2026 by rpki-client