Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd6a4b76-6473-443a-bdfa-7875d5e78528/d2b2f632-d568-3804-9033-ee3ba20b7868.roa
File:                     d2b2f632-d568-3804-9033-ee3ba20b7868.roa (raw, json)
Hash identifier:          EK3gTS/HJqWCWeuleGkaiM2jAtb3fby3tyZf+UecFAI=
Subject key identifier:   32:B6:E8:B9:CA:C5:E8:1C:98:C3:B7:1A:B9:7B:F2:C7:37:68:5B:7B
Certificate issuer:       /CN=fd6a4b76-6473-443a-bdfa-7875d5e78528
Certificate serial:       010D0C9F4328584F66DF48A4AF04C7744A9DF8E0
Authority key identifier: C7:E7:BC:6D:B7:08:DA:67:86:C8:35:78:A4:66:2E:0C:6B:CF:73:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd6a4b76-6473-443a-bdfa-7875d5e78528.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd6a4b76-6473-443a-bdfa-7875d5e78528/d2b2f632-d568-3804-9033-ee3ba20b7868.roa
Signing time:             Mon 05 Oct 2026 13:57:47 +0000
ROA not before:           Mon 05 Oct 2026 13:57:47 +0000
ROA not after:            Sun 03 Jan 2027 14:53:21 +0000
asID:                     62844
IP address blocks:        74.122.148.0/22 maxlen: 24
                          198.136.16.0/22 maxlen: 24
                          2606:b8c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd6a4b76-6473-443a-bdfa-7875d5e78528/fd6a4b76-6473-443a-bdfa-7875d5e78528.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd6a4b76-6473-443a-bdfa-7875d5e78528/fd6a4b76-6473-443a-bdfa-7875d5e78528.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd6a4b76-6473-443a-bdfa-7875d5e78528.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:df:48:a4:af:04:c7:74:4a:9d:f8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd6a4b76-6473-443a-bdfa-7875d5e78528
        Validity
            Not Before: Oct  5 13:57:47 2026 GMT
            Not After : Jan  3 14:53:21 2027 GMT
        Subject: CN=a125fd50-9c7c-4f02-b5c9-22eae47e7d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a8:14:3c:12:df:47:03:02:b5:e3:b8:c4:9e:
                    af:96:48:e1:8a:15:c5:38:12:02:4f:5e:03:2a:d2:
                    9a:27:75:59:b9:5d:d1:fe:b8:b1:b4:ab:f4:9c:c0:
                    ae:ba:98:51:f1:49:18:a0:b6:56:fd:9b:c1:ec:bf:
                    9c:7e:7a:28:77:0c:66:01:88:64:80:92:5e:71:90:
                    e1:66:cf:f3:dc:dc:2c:52:fe:9a:87:68:49:ac:d5:
                    fa:8b:be:22:80:44:55:29:d6:ed:ed:9b:34:70:91:
                    c9:93:a7:b4:de:e7:b8:03:8b:55:d4:41:06:e5:be:
                    c2:43:aa:70:7e:97:2c:5a:3e:e9:88:4c:93:59:26:
                    c4:db:4a:55:10:ec:58:01:34:6c:84:9e:1c:21:ef:
                    e6:3f:0a:82:78:d8:f6:8f:63:af:e9:b8:9e:eb:f7:
                    a0:a0:2b:a5:3d:2f:bd:04:9d:f4:a4:66:38:0f:75:
                    c9:a7:bf:72:7a:67:21:f7:c0:d3:15:4f:a3:3a:9f:
                    94:08:fb:d3:02:23:aa:32:f0:5d:c6:e7:d0:f5:35:
                    65:ec:e5:19:e4:16:f6:63:fc:19:aa:34:81:9e:a6:
                    85:ba:21:e4:b8:20:cf:5c:1f:d9:1d:eb:e8:99:94:
                    e3:c0:a9:5c:aa:30:f0:49:53:62:61:8b:d7:99:dd:
                    87:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B6:E8:B9:CA:C5:E8:1C:98:C3:B7:1A:B9:7B:F2:C7:37:68:5B:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd6a4b76-6473-443a-bdfa-7875d5e78528/d2b2f632-d568-3804-9033-ee3ba20b7868.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd6a4b76-6473-443a-bdfa-7875d5e78528/fd6a4b76-6473-443a-bdfa-7875d5e78528.crl

            X509v3 Authority Key Identifier:
                keyid:C7:E7:BC:6D:B7:08:DA:67:86:C8:35:78:A4:66:2E:0C:6B:CF:73:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd6a4b76-6473-443a-bdfa-7875d5e78528.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.122.148.0/22
                  198.136.16.0/22
                IPv6:
                  2606:b8c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:e5:6f:bd:15:f7:57:8e:75:80:29:43:6a:72:62:b3:95:49:
         00:8c:c9:19:7b:ea:02:0c:1d:b4:1f:20:5b:bb:ca:7d:79:50:
         0c:0f:58:54:dc:82:d5:10:19:55:b1:77:d9:92:4c:6c:99:0c:
         db:bd:95:4b:e5:cf:05:1a:86:85:2c:9e:70:14:c9:8b:87:15:
         d1:ae:1c:97:a3:0e:57:76:54:63:e0:fd:ef:62:5b:55:ba:3a:
         f5:c2:a8:63:62:cf:b4:cb:22:64:fe:a6:75:5a:3b:06:a1:5d:
         06:22:fe:80:61:5f:1e:64:f1:ba:e8:37:76:b3:51:cc:c6:9f:
         a3:c6:1b:a2:97:b9:1a:d2:12:61:0e:67:6f:38:5c:12:66:3a:
         92:59:31:6e:b2:55:bd:1b:d8:ca:5a:ed:32:2c:c9:4c:05:1f:
         ff:03:eb:9f:d0:b6:2f:71:73:86:cf:22:de:5c:d5:89:47:96:
         52:c7:24:56:36:d2:65:49:b5:95:15:fc:f7:3c:89:39:7b:8c:
         3d:c0:f8:4a:dc:12:a6:84:fc:85:c0:23:48:d0:8a:8f:3a:44:
         d7:fe:10:09:e2:ad:9f:9e:62:69:d5:bd:5d:db:80:b6:ef:2b:
         57:c2:d4:e5:43:e3:47:4a:ed:78:7b:2d:f2:b2:95:45:37:a8:
         a1:2a:c1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:11:03 2026 by rpki-client