Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78942cfb-e2cc-3255-9c24-2f0c6ab324c6.roa
File:                     78942cfb-e2cc-3255-9c24-2f0c6ab324c6.roa (raw, json)
Hash identifier:          bM9AEiEwJOw8Xu6singYINeq3Aom/fOGXmoVhx49fP4=
Subject key identifier:   FC:F6:58:D7:55:1B:53:19:1E:8C:FC:C6:3A:50:D5:CF:29:5E:CA:0A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E6F3C2445D0FE4B2A75C92CC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78942cfb-e2cc-3255-9c24-2f0c6ab324c6.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     33491
IP address blocks:        67.173.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3c:24:45:d0:fe:4b:2a:75:c9:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=b1948c9c-5744-4e81-b980-367711ece4de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:77:07:68:41:a9:f3:ad:fb:73:f4:79:2d:7a:
                    05:54:c0:fc:f6:d8:86:e1:cd:36:8d:c8:6a:b1:ad:
                    b3:87:6d:14:78:cd:78:91:8e:f0:31:0f:c2:f9:3d:
                    58:f1:fa:68:a2:fc:9c:da:d1:e2:4c:6d:d0:cc:cb:
                    fc:b6:ee:f3:83:c0:95:6a:7d:5b:70:63:d0:c2:a0:
                    f8:e4:95:ff:22:16:60:dc:5b:8c:e9:e1:56:95:7c:
                    c9:60:a2:14:04:78:8f:a9:18:65:20:60:85:71:c5:
                    e8:9e:0f:c0:a1:e3:22:24:b9:1f:b3:4a:95:22:50:
                    cf:90:06:60:ae:bc:d9:66:71:ee:97:a6:54:01:f7:
                    9c:42:19:83:12:07:f6:4e:e6:d9:45:21:27:18:7e:
                    f2:44:dc:3a:4f:d6:33:eb:48:4a:78:f8:58:6c:12:
                    10:eb:ab:c1:00:2f:e4:88:3e:e4:0c:91:7f:f7:06:
                    19:8c:c3:fc:08:4f:41:fe:f6:c5:fe:04:60:0d:fa:
                    3f:d9:97:3c:4d:a1:a2:18:07:90:ac:16:70:b7:9f:
                    97:59:8c:48:2d:f8:30:e4:e1:51:1d:5a:a7:be:c6:
                    5d:3d:48:dd:4f:3b:e6:82:3d:49:68:0d:f2:76:3e:
                    b7:61:b1:72:d1:f3:34:70:4e:4c:06:23:b1:47:7e:
                    20:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F6:58:D7:55:1B:53:19:1E:8C:FC:C6:3A:50:D5:CF:29:5E:CA:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78942cfb-e2cc-3255-9c24-2f0c6ab324c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.173.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:59:45:6f:eb:a1:3b:46:67:6b:ae:6e:71:05:9a:73:9b:9a:
         e6:d1:8e:9b:69:c9:6c:bb:0e:fa:de:a0:73:6c:9b:c6:ed:d9:
         38:c5:0e:00:eb:81:6b:07:c8:ac:34:c9:99:a8:43:ac:db:7b:
         84:ef:72:62:5f:f8:e6:1a:70:77:89:68:e8:ca:09:67:2a:fe:
         9f:f7:ac:97:34:64:cc:9e:13:e2:d4:2d:2d:00:a4:db:59:73:
         65:0e:ce:41:8e:ad:d4:c2:92:2d:bc:ff:46:0e:dd:f5:94:52:
         fc:18:39:9d:9d:1d:e8:22:d7:54:a3:cd:25:03:88:f1:76:81:
         c4:15:83:09:1c:6f:f0:69:fb:8b:cc:7b:87:ef:1b:c9:f1:d2:
         a9:00:89:36:86:c7:aa:86:4a:30:e2:06:55:a1:61:d2:64:36:
         db:de:e8:c0:92:1d:2e:80:2f:c7:27:bb:42:28:4d:3b:7b:14:
         94:08:80:50:88:2b:b5:a4:ef:3e:05:e4:78:cb:3d:17:d1:80:
         a9:36:73:c9:53:42:9b:18:97:e1:9c:24:31:a9:50:e4:86:dd:
         58:9d:13:13:67:81:19:fd:7d:8a:42:fc:5c:7b:fd:e9:e1:f0:
         e3:73:69:51:ba:5a:cd:36:8c:02:8d:c8:46:e6:f2:d1:43:93:
         e4:1c:fc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:13:48 2026 by rpki-client