Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2a6df004-2b10-3c17-b68d-bb8e7844b3e0.roa
File:                     2a6df004-2b10-3c17-b68d-bb8e7844b3e0.roa (raw, json)
Hash identifier:          2A2Ja2VaKTeDLIsVCbVZ38JTVfOEZDJN/zlOf09DQnU=
Subject key identifier:   B5:9E:C5:8D:49:48:14:61:29:68:49:80:BB:68:5D:68:8B:E9:7A:EF
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F6292FEE2542207B39D02C6C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2a6df004-2b10-3c17-b68d-bb8e7844b3e0.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     33363
IP address blocks:        71.44.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:fe:e2:54:22:07:b3:9d:02:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=75dd2735-5b1c-469b-a4d8-65266d9b45f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fd:37:02:10:60:01:cf:f2:9e:d2:38:0b:30:
                    78:9c:d2:1e:3b:f4:d1:57:9e:1a:e1:da:c7:d4:15:
                    05:72:67:28:2c:37:b7:15:2d:7d:1c:67:61:78:f4:
                    f0:c0:b1:8d:6f:9c:09:e3:c9:8d:27:42:13:7f:6e:
                    2b:f5:19:63:44:79:10:48:4d:4f:95:a2:27:74:22:
                    59:f6:17:47:ee:09:f6:d8:7c:2a:fb:2e:3d:84:19:
                    72:b2:ad:11:3f:44:d8:50:39:6d:e2:0e:9f:af:2d:
                    4a:ba:77:d9:5f:b0:91:41:66:c1:a6:4d:2d:35:35:
                    2c:e7:a5:6a:ba:c8:ac:48:a8:e1:8d:87:56:21:84:
                    0f:92:dd:31:1d:2a:b6:fe:cd:55:24:3f:c1:01:c3:
                    c0:6a:9e:9c:bb:a6:07:9f:bd:77:93:41:8a:6b:13:
                    ab:ee:d7:ac:5b:e5:37:8c:a6:15:4a:4d:eb:4d:f0:
                    f3:21:56:80:36:e6:0a:cf:e7:6e:b7:47:29:75:18:
                    c1:0a:ba:46:c2:41:7e:7c:3a:9b:0d:e2:0b:ce:b6:
                    ae:52:05:b3:34:86:ec:19:ea:42:57:e7:da:df:c6:
                    77:45:d9:24:5d:78:06:17:6b:74:15:de:94:0c:2b:
                    0e:05:5f:d5:4a:6a:b0:a7:9a:8e:d1:14:dc:e1:45:
                    43:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:9E:C5:8D:49:48:14:61:29:68:49:80:BB:68:5D:68:8B:E9:7A:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/2a6df004-2b10-3c17-b68d-bb8e7844b3e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:c2:89:88:43:f9:68:c1:30:f3:90:65:57:21:8f:da:e7:29:
         cf:f9:26:8c:f3:ee:94:88:d9:7d:7c:fb:f8:13:01:72:41:a2:
         11:92:7b:69:2b:7c:27:7c:c0:0a:3c:6e:54:e6:37:16:20:c0:
         39:b4:e5:3f:cc:45:d8:1c:5c:f2:e8:20:09:c3:ad:25:db:fc:
         6e:33:bf:fb:c4:b1:e9:09:c6:a1:f5:d8:f1:ea:e6:b7:89:ea:
         6b:21:7d:99:01:e5:fa:54:2c:c2:d6:88:c2:76:6f:2c:a3:88:
         6f:29:fc:de:7b:85:e1:a5:55:6a:5e:b8:89:bf:d8:f0:26:fc:
         91:25:2d:18:4c:0e:31:b3:0e:4e:5f:23:22:ca:2d:4e:74:71:
         ab:92:40:cd:c1:1a:f2:db:9a:07:27:da:f2:fc:af:e3:9c:ad:
         22:cf:fd:2c:f3:e7:95:55:0c:5e:95:b4:a9:2d:cf:77:5f:c8:
         4d:35:55:a1:0f:43:48:fe:8f:00:80:f9:34:5b:d4:68:2a:8f:
         b4:5f:f8:c2:50:b2:e1:b7:06:4f:af:09:a5:c5:d0:3b:69:9e:
         0e:4b:8a:8e:d1:54:90:dd:8e:13:ff:70:c9:2e:d9:1f:2e:11:
         cb:90:ff:ee:1b:07:d9:9c:07:34:1f:95:6f:28:7b:75:67:f2:
         c1:ea:b7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:07:07 2026 by rpki-client