Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d527330-a51a-45dd-aa15-5558c11c47df/692918fd-27e8-3bc4-bde4-8bdf1bf76c9c.roa
File:                     692918fd-27e8-3bc4-bde4-8bdf1bf76c9c.roa (raw, json)
Hash identifier:          NrAXGv2sOg0S++JtvfG5Vvrdr7kXMfO6iWg9UMJN1kM=
Subject key identifier:   B9:14:69:98:AF:D0:77:6F:49:D8:A7:57:F6:DC:CF:92:B8:C6:8A:0D
Certificate issuer:       /CN=8d527330-a51a-45dd-aa15-5558c11c47df
Certificate serial:       010D0C9F4328584F8525F8DECC23D0286A810300
Authority key identifier: 7B:68:C3:99:6C:EA:8F:7E:EB:D8:FC:62:F5:B5:69:ED:4B:9F:13:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d527330-a51a-45dd-aa15-5558c11c47df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d527330-a51a-45dd-aa15-5558c11c47df/692918fd-27e8-3bc4-bde4-8bdf1bf76c9c.roa
Signing time:             Fri 16 Oct 2026 10:14:28 +0000
ROA not before:           Fri 16 Oct 2026 10:14:28 +0000
ROA not after:            Thu 14 Jan 2027 11:14:28 +0000
asID:                     4213
IP address blocks:        67.43.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d527330-a51a-45dd-aa15-5558c11c47df/8d527330-a51a-45dd-aa15-5558c11c47df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d527330-a51a-45dd-aa15-5558c11c47df/8d527330-a51a-45dd-aa15-5558c11c47df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d527330-a51a-45dd-aa15-5558c11c47df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:85:25:f8:de:cc:23:d0:28:6a:81:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d527330-a51a-45dd-aa15-5558c11c47df
        Validity
            Not Before: Oct 16 10:14:28 2026 GMT
            Not After : Jan 14 11:14:28 2027 GMT
        Subject: CN=4a992064-56a2-41d9-a055-53f39e388a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:24:40:12:52:9d:9f:2f:0e:ed:fc:c8:3c:79:
                    1c:10:87:01:14:40:aa:03:3c:7d:b3:5e:98:5e:97:
                    41:d2:9b:37:7d:4f:05:32:45:ae:53:3c:25:7f:05:
                    0a:71:0b:1f:02:2a:05:b5:2b:ba:e0:2d:c8:d4:54:
                    33:6f:78:77:f1:d3:e9:8d:e1:66:94:ed:8d:bb:de:
                    13:17:70:f7:00:97:bf:de:34:75:27:3f:9f:3a:07:
                    f0:1a:c5:44:30:d5:f0:fb:b7:47:d7:a4:98:8f:12:
                    0d:0d:f4:fd:74:e3:09:8e:91:4d:11:e7:a8:32:21:
                    14:3e:21:c1:68:62:67:86:29:0f:0a:c0:ee:93:d0:
                    09:3b:bd:45:5e:74:75:89:36:ca:cd:4a:59:9e:d5:
                    4d:49:6d:f0:53:a9:86:74:70:a7:8c:42:aa:b7:9d:
                    c8:88:90:14:da:5c:63:f0:f3:35:c4:b9:55:74:41:
                    f9:2d:6e:f3:05:f9:b1:e7:7a:98:37:69:6e:df:6a:
                    c5:2a:d6:27:0f:b9:d2:35:43:93:e8:95:f8:88:1e:
                    ff:f1:f9:3d:bd:cc:8e:bb:93:05:78:7c:46:95:08:
                    b4:2e:4b:2f:c0:e2:82:4c:05:65:75:a1:9f:fa:f9:
                    d3:45:d1:67:93:cd:d7:b5:37:4a:10:bf:6b:40:fe:
                    9f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:14:69:98:AF:D0:77:6F:49:D8:A7:57:F6:DC:CF:92:B8:C6:8A:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d527330-a51a-45dd-aa15-5558c11c47df/692918fd-27e8-3bc4-bde4-8bdf1bf76c9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d527330-a51a-45dd-aa15-5558c11c47df/8d527330-a51a-45dd-aa15-5558c11c47df.crl

            X509v3 Authority Key Identifier:
                keyid:7B:68:C3:99:6C:EA:8F:7E:EB:D8:FC:62:F5:B5:69:ED:4B:9F:13:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/8d527330-a51a-45dd-aa15-5558c11c47df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:2c:87:43:6b:28:14:e3:b6:da:8f:5e:26:99:0b:9e:44:4e:
         3a:85:4d:6e:94:d4:9a:97:7b:32:0c:2d:7f:6c:76:90:99:b0:
         0a:f8:39:68:a3:37:df:b5:65:f5:96:62:51:26:fe:3d:2c:1f:
         61:8a:8a:ec:cd:a3:3c:c3:34:85:5c:f8:f9:17:4b:c9:a3:51:
         a9:71:69:ef:78:31:65:e6:c6:d7:fb:e6:09:26:bc:7f:2d:09:
         9b:65:0e:64:21:09:b7:00:26:f8:70:82:e6:9d:5a:8e:45:c5:
         a6:64:c7:f6:05:50:04:ee:c0:74:45:ff:80:27:f4:5c:81:1e:
         93:83:14:03:5c:f4:45:79:e0:1d:e3:61:2e:df:75:8a:60:38:
         41:23:59:e9:16:6a:b9:f2:65:95:a2:1d:13:f3:51:24:0f:94:
         79:35:2f:b3:62:bb:56:0c:39:9c:72:89:4f:1b:4e:c7:4a:30:
         81:4a:96:31:55:36:dd:53:94:0b:77:91:66:76:37:bc:c3:b6:
         8b:e2:a3:3f:e4:d1:57:f2:ef:37:db:86:8e:1e:c5:7b:e0:db:
         a4:9d:c1:7a:c4:1e:cb:d8:c3:c1:71:c7:17:e8:8b:7f:95:d8:
         a3:e6:99:ac:ec:35:ab:05:88:24:1f:5a:d1:09:82:ac:63:dc:
         67:9d:46:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 04:15:39 2026 by rpki-client