Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/4fc976c2-5932-31ad-b787-eed2d11f5e5d.roa
File:                     4fc976c2-5932-31ad-b787-eed2d11f5e5d.roa (raw, json)
Hash identifier:          nGD9REf7WjMYN3yufmNyy/gTI2S6H/FQVUeubikyziI=
Subject key identifier:   4B:CC:C2:56:3D:92:C3:07:3D:5A:B7:57:EF:1A:A2:7B:54:38:77:F7
Certificate issuer:       /CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
Certificate serial:       010D0C9F4328584F655D6FD750CD3B2B038C930A
Authority key identifier: 5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/4fc976c2-5932-31ad-b787-eed2d11f5e5d.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     87
IP address blocks:        129.79.0.0/16 maxlen: 24
                          140.182.0.0/16 maxlen: 16
                          140.182.0.0/19 maxlen: 19
                          149.159.0.0/19 maxlen: 19
                          149.161.0.0/16 maxlen: 16
                          149.161.128.0/17 maxlen: 17
                          149.162.0.0/16 maxlen: 24
                          149.163.0.0/16 maxlen: 24
                          156.56.0.0/16 maxlen: 24
                          198.49.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:6f:d7:50:cd:3b:2b:03:8c:93:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=400abe1c-e0c0-4244-98dc-73c3ee3b6212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:eb:e5:e2:8e:1b:31:c8:89:f2:32:34:7e:
                    ef:81:b8:48:c0:e3:18:b5:9b:fd:29:7a:52:30:0f:
                    5b:e9:bd:58:96:89:25:9d:54:4e:01:a4:bb:d6:cb:
                    8e:60:d4:fa:3e:2b:b9:93:bb:6e:2d:d7:5e:a6:64:
                    64:da:4d:a3:04:e2:f3:42:76:6e:fe:72:08:ae:51:
                    37:ed:c8:5f:55:58:13:ab:7c:28:88:fc:40:af:e6:
                    65:2a:84:44:72:3b:4d:f5:ce:4d:17:2b:fa:dc:89:
                    fe:e9:f3:e8:3a:0f:ff:49:78:16:18:f0:ae:e3:62:
                    60:1b:db:a0:c3:61:05:bf:c4:80:65:ff:bc:3d:7a:
                    55:f0:43:11:e7:f8:92:63:68:fb:b0:37:d3:74:6c:
                    dc:43:d0:a1:45:1d:ef:2c:f4:52:89:2b:d4:d0:da:
                    a1:37:7f:19:89:7a:1f:0b:04:00:53:28:6c:50:bb:
                    be:35:c1:9c:22:71:88:12:c2:01:91:ab:d0:3e:4e:
                    bb:cc:99:4f:91:b2:44:89:e5:48:37:f7:ce:e6:cf:
                    fc:db:3c:f9:48:b1:9c:85:ea:92:94:49:be:76:8a:
                    11:84:b0:20:f4:50:59:e3:6a:0b:75:c3:a1:92:91:
                    af:43:b2:91:be:8b:1d:3d:7d:bf:94:28:cb:b0:6c:
                    01:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CC:C2:56:3D:92:C3:07:3D:5A:B7:57:EF:1A:A2:7B:54:38:77:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/4fc976c2-5932-31ad-b787-eed2d11f5e5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl

            X509v3 Authority Key Identifier:
                keyid:5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.79.0.0/16
                  140.182.0.0/16
                  149.159.0.0/19
                  149.161.0.0-149.163.255.255
                  156.56.0.0/16
                  198.49.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f6:44:2c:47:6c:b7:6e:f6:13:7d:b0:44:df:10:cf:9e:57:
         33:94:8b:d0:4c:1b:38:c8:19:8f:43:1b:49:13:dd:69:55:9d:
         39:7d:a2:8f:55:2d:0b:7e:eb:3a:89:f7:59:1e:ca:56:3e:c8:
         73:cc:d3:a3:d8:f9:7b:df:fe:f1:80:f8:b4:13:5a:6c:3b:ad:
         06:5d:bc:ea:24:0d:bc:80:d6:74:4b:8b:1f:7b:cd:9e:84:0d:
         25:aa:c8:a5:ee:2b:8d:1b:8a:0c:b4:72:a5:11:71:fb:27:c3:
         84:a2:cc:42:6d:de:fa:63:40:fd:7a:83:b9:70:50:8b:85:4b:
         d9:27:e2:41:cd:3d:44:1d:20:2c:b4:d8:4e:90:c4:5b:5d:16:
         61:55:9a:a3:44:c8:33:36:b8:b4:3d:22:79:a8:5f:9b:11:42:
         4c:89:d1:38:7d:a1:f9:a0:a1:71:cf:65:6e:09:6e:85:52:9a:
         c3:12:ae:ef:e0:3f:b0:8b:3e:2b:2f:2e:0e:ec:97:f8:18:56:
         cf:d0:f3:ab:d7:bc:10:95:e5:a6:cd:fc:05:c8:22:83:41:e6:
         57:e9:9f:1f:28:c0:eb:5c:aa:ab:a1:d8:1e:4a:49:11:60:f4:
         ea:8d:74:9f:6a:91:62:43:d1:44:bd:6b:ae:a0:cd:0d:33:be:
         d2:66:36:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 09:09:05 2026 by rpki-client