Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/7395442f-a0fe-3451-b692-69afd3407f29.roa
File:                     7395442f-a0fe-3451-b692-69afd3407f29.roa (raw, json)
Hash identifier:          9HOv1ThJoP7xwybk134Rf/HW6PxNbDfvIJwFB5MH9+8=
Subject key identifier:   CD:D1:29:3B:17:4B:21:DE:7D:AD:AB:DB:8B:F7:5B:D8:99:87:E2:A3
Certificate issuer:       /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial:       010D0C9F4328584EF87CD43896D668C7FE388580
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/7395442f-a0fe-3451-b692-69afd3407f29.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     22925
IP address blocks:        168.235.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:d4:38:96:d6:68:c7:fe:38:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=42c2bf7a-a5a2-4975-b6b0-27ec1370b2a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c9:20:30:89:b9:bb:08:54:42:79:c5:82:ca:
                    27:44:24:41:41:63:48:bb:3b:61:1e:e8:df:75:65:
                    f1:8c:47:be:dc:88:44:d7:cb:b7:da:50:67:ff:38:
                    f7:8b:aa:fd:50:30:8e:bc:12:66:b6:82:15:6c:0f:
                    15:ef:73:e7:34:df:55:1e:db:04:53:34:59:fa:ad:
                    49:3b:87:4d:e4:06:3b:77:bc:19:0a:25:d1:57:89:
                    31:ec:58:ec:ed:f3:32:29:67:5b:d2:4d:56:eb:bd:
                    9b:82:6e:fe:b4:f6:45:14:a5:6f:33:2e:9a:96:84:
                    f1:75:c9:da:cc:b6:54:73:d9:e0:3b:4f:54:7e:6f:
                    f7:a7:15:fe:38:6b:de:bd:6d:66:07:7c:7d:c0:95:
                    11:b0:4d:a5:fd:57:bb:04:3b:b0:87:2e:10:09:d6:
                    f6:48:4a:e2:59:ce:b5:f0:05:9a:8a:4d:82:85:e9:
                    31:ff:f7:b2:68:a4:85:ca:87:c7:ca:d1:6c:a8:c0:
                    ef:d7:ea:e5:3b:ee:ad:96:46:e2:20:fe:a1:c4:99:
                    e8:c0:6b:81:90:ea:6a:12:d2:8e:a2:15:80:3c:bd:
                    d6:7c:24:30:00:94:3f:f7:96:91:16:be:ce:4b:a3:
                    b1:ce:a6:e3:1a:ea:26:86:f7:b0:ad:05:82:a5:6f:
                    73:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D1:29:3B:17:4B:21:DE:7D:AD:AB:DB:8B:F7:5B:D8:99:87:E2:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/7395442f-a0fe-3451-b692-69afd3407f29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl

            X509v3 Authority Key Identifier:
                keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.235.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:10:37:f5:8c:80:27:2b:b9:b8:a8:5b:33:98:64:a7:47:71:
         19:f9:21:4e:15:c4:04:a0:5c:24:21:24:4e:38:a5:e4:ac:47:
         35:3c:77:2f:4a:d7:ad:ab:42:a6:cd:b9:42:1f:03:1c:5c:88:
         4b:9f:81:b2:2d:b1:2e:a1:55:dc:68:32:45:c9:c1:86:93:b5:
         2d:4c:71:33:25:5f:8a:ca:ea:b9:be:fb:37:e7:78:a7:8a:04:
         c4:1c:dc:09:ec:62:9c:29:6b:89:ab:3d:e7:52:4b:5f:fb:56:
         2d:07:5d:da:82:7f:d0:e3:74:2d:99:d5:20:b0:84:f2:14:9c:
         a1:dc:fc:b0:a6:db:a5:2f:d6:ca:2a:89:ec:c8:06:72:46:f2:
         ee:ee:77:bd:d8:c5:57:54:21:da:d2:5f:c1:04:98:47:4f:56:
         f4:17:3a:2b:fc:6f:ec:a8:f8:7a:c0:b2:aa:dc:16:41:3f:b6:
         88:b5:4c:fb:14:8f:ed:85:8a:21:66:cf:c2:36:3d:9d:2e:9b:
         b2:2a:85:55:99:9e:04:0c:73:1a:30:e4:03:8e:63:c5:d6:27:
         2c:ce:88:22:b2:5f:1e:bd:b1:3d:bc:07:71:0e:4f:44:e2:e5:
         76:b9:94:9d:a9:b1:e5:b4:4b:a0:a1:e2:f8:9c:48:25:38:e7:
         83:3e:17:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:55:05 2026 by rpki-client