Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/33981a11-ee98-3be8-afd7-464452a032db.roa
File:                     33981a11-ee98-3be8-afd7-464452a032db.roa (raw, json)
Hash identifier:          j2xQfCrV8x7dwkQgrXojQspikKDLOKoZqfHOWPNeZdM=
Subject key identifier:   78:17:9C:F2:74:EE:DD:04:E9:A9:92:7F:4A:2A:9F:68:2F:FA:3E:CF
Certificate issuer:       /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial:       010D0C9F4328584FA42DCE6AB696BFF38FB7CC00
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/33981a11-ee98-3be8-afd7-464452a032db.roa
Signing time:             Tue 27 Oct 2026 13:00:13 +0000
ROA not before:           Tue 27 Oct 2026 13:00:13 +0000
ROA not after:            Mon 25 Jan 2027 14:00:13 +0000
asID:                     5050
IP address blocks:        147.73.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a4:2d:ce:6a:b6:96:bf:f3:8f:b7:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
        Validity
            Not Before: Oct 27 13:00:13 2026 GMT
            Not After : Jan 25 14:00:13 2027 GMT
        Subject: CN=b4008292-1b8e-4419-8f8f-4cf14708629c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:62:b6:4b:aa:70:02:be:6b:a7:2f:90:be:52:
                    fd:8b:08:24:7a:2f:ca:45:ae:ee:73:85:30:0f:81:
                    9f:3d:b5:a8:ef:1a:d5:82:09:9b:a4:07:dc:ee:10:
                    b0:d8:ae:6b:84:0b:4e:59:92:97:a6:b0:d4:3a:ab:
                    f4:e5:33:6d:99:e1:82:c0:61:9b:f8:2e:04:15:e0:
                    75:d3:ea:75:35:01:1a:4c:b7:4c:39:f1:a7:08:76:
                    90:4c:d8:65:c1:38:81:17:06:cf:74:2f:19:0b:7f:
                    c4:c7:84:9c:74:ef:04:f7:a2:19:f2:1f:8c:11:de:
                    f3:c9:18:c8:19:a6:fe:1a:8b:7e:7c:31:a6:f6:f9:
                    67:06:10:fb:7a:32:5a:32:9e:7f:3a:88:b3:ff:06:
                    bc:7a:27:88:8d:37:9b:93:cf:38:59:4f:36:9d:d7:
                    8c:7a:a9:7a:20:1e:05:ff:ee:9b:0a:f6:d7:84:c1:
                    5c:8a:9e:87:fe:93:c4:b4:01:83:cf:8b:00:e8:74:
                    04:43:3f:db:ef:08:9f:0b:a7:04:bf:8f:45:49:be:
                    0e:69:a8:68:d4:e8:eb:0c:b3:1f:25:7b:45:ce:1b:
                    e0:61:0a:59:73:3c:a8:3b:d5:f3:10:a7:95:0f:e9:
                    ae:26:02:04:3a:f1:a2:8f:67:d0:25:eb:ae:c6:fa:
                    47:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:17:9C:F2:74:EE:DD:04:E9:A9:92:7F:4A:2A:9F:68:2F:FA:3E:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/33981a11-ee98-3be8-afd7-464452a032db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl

            X509v3 Authority Key Identifier:
                keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.73.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:86:62:da:f7:02:3c:d2:77:17:db:d0:b5:cf:56:94:3b:cf:
         79:08:3a:bd:4c:12:71:d9:11:57:4e:a7:51:e4:24:7e:97:24:
         91:91:71:79:73:6e:7f:3a:aa:fd:41:35:73:29:83:ee:53:20:
         7c:3c:67:0b:a9:26:44:1c:e3:b2:49:84:4c:94:49:f7:f9:54:
         2e:9b:d8:cc:ed:cf:cc:a0:4f:83:17:cc:a5:cf:87:43:74:68:
         c1:96:0e:8a:e5:4a:58:04:fc:27:ed:f3:bf:b0:19:00:f0:cc:
         92:88:14:00:e1:c7:93:ad:47:ff:c2:d2:b5:eb:48:2a:6d:37:
         1d:5a:28:d5:78:44:d6:0c:76:83:15:92:0a:0f:b3:0e:3b:f5:
         fd:4f:3f:c8:36:c7:5a:36:c4:ca:48:59:21:6e:2e:1a:dd:60:
         33:63:c1:44:18:19:4d:39:1f:5f:9e:c2:19:44:e8:88:8f:e1:
         57:d7:b8:ff:0e:4d:18:46:e2:73:35:16:74:23:f9:9d:e1:78:
         e8:2c:ea:ac:1a:a0:a7:ab:7f:7e:3d:0f:95:05:5a:ac:64:61:
         fb:b7:a9:ae:6d:85:ed:75:d7:21:38:ff:42:6d:e4:27:50:91:
         c6:80:5f:2a:a9:a4:84:e2:12:fd:f6:ea:64:56:c1:c8:49:b7:
         a7:4f:5c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 17:07:36 2026 by rpki-client