Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4e977397-2185-301d-9bff-671e74962805.roa
File:                     4e977397-2185-301d-9bff-671e74962805.roa (raw, json)
Hash identifier:          vlc0ZJJAjiVmTlX5v5IDo0vdFmeRRosnUo4kg9XkU2g=
Subject key identifier:   E0:25:E2:4B:40:A9:9F:99:75:53:8C:AF:68:F4:3C:E8:4E:4E:B5:22
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F8DD89487DA2BD684883D9480
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4e977397-2185-301d-9bff-671e74962805.roa
Signing time:             Mon 19 Oct 2026 13:00:12 +0000
ROA not before:           Mon 19 Oct 2026 13:00:12 +0000
ROA not after:            Sun 17 Jan 2027 14:00:12 +0000
asID:                     33363
IP address blocks:        97.69.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:d8:94:87:da:2b:d6:84:88:3d:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 19 13:00:12 2026 GMT
            Not After : Jan 17 14:00:12 2027 GMT
        Subject: CN=aa1e3274-eb94-4b97-a3cd-439ef9e90431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:90:2e:12:e8:b6:31:2c:77:b1:ae:51:14:dd:
                    d4:57:e3:3b:8c:7f:0f:e7:c8:55:9b:86:43:9b:11:
                    ab:2d:80:80:2c:7e:68:b1:c4:7b:d9:b4:70:76:e0:
                    f9:1c:97:a5:85:81:20:76:3a:de:b6:59:8a:ed:76:
                    d4:01:84:fd:d9:f6:38:21:c0:60:9d:4b:99:d1:be:
                    c4:fd:f3:30:05:8a:4b:22:b2:ef:f1:db:9b:e5:77:
                    94:37:3d:42:56:c5:e0:1c:79:26:60:2e:71:45:73:
                    20:74:37:a4:62:08:6c:f0:2c:8f:5e:20:70:5b:d4:
                    eb:3f:b3:50:09:c7:46:be:f9:79:10:de:87:59:72:
                    6c:87:72:b6:8c:a2:b5:cf:0a:9c:c6:98:1e:f5:8f:
                    cd:e2:ef:1c:16:cc:0c:79:ef:56:c1:c4:ad:7c:7f:
                    55:93:11:62:5f:e9:ac:4e:df:c4:22:d9:ee:29:33:
                    c0:18:1e:e2:37:94:bf:b3:55:db:66:0e:93:1e:7d:
                    ed:bf:13:1a:5f:54:de:24:a0:29:52:6f:1a:e7:4d:
                    e5:b6:da:f0:3b:5a:4c:8e:fe:24:83:e9:31:9f:4e:
                    b3:5c:db:52:6f:59:66:7f:83:57:b2:84:73:8b:97:
                    21:4a:bf:65:15:a5:90:a3:6e:f4:10:8d:2d:05:6b:
                    ce:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:25:E2:4B:40:A9:9F:99:75:53:8C:AF:68:F4:3C:E8:4E:4E:B5:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4e977397-2185-301d-9bff-671e74962805.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.69.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:b5:ae:41:36:cf:6b:d1:88:ed:f7:27:9c:33:b1:36:01:dd:
         97:a4:d1:7f:8b:49:1b:69:c1:75:9b:f8:97:c1:59:73:dd:b7:
         15:a7:68:54:1a:89:1b:62:23:70:58:14:5f:a7:63:2d:40:fb:
         44:0f:82:35:9a:f6:b3:19:54:47:9d:c5:ce:2f:77:c8:e6:6b:
         0c:14:37:1a:4a:2d:e5:be:9d:0e:50:27:3e:03:b4:4b:89:88:
         71:02:ee:37:19:e8:6c:d6:a7:20:b2:28:d2:93:86:e1:77:55:
         3f:6e:8c:2c:76:44:29:d1:35:be:98:29:2f:a7:6e:a5:be:b4:
         06:87:c9:92:49:16:46:2b:64:ba:6a:ed:76:e4:52:5e:e1:10:
         c6:b5:3c:a6:de:f9:06:fb:78:66:17:71:16:06:3c:4c:51:53:
         96:20:78:2b:ce:2c:85:41:35:fe:63:ae:63:ba:7f:53:07:39:
         66:3c:bd:51:94:70:ba:c7:18:7a:4e:25:44:fa:45:fb:95:6c:
         17:61:e7:c6:bc:30:8b:cb:13:51:b7:00:46:45:b4:cd:e8:32:
         67:e4:7b:94:74:46:77:96:e9:c5:7d:3b:e3:27:a6:dc:e2:fc:
         61:48:ca:b8:ad:fe:54:3a:8a:e7:49:91:86:95:23:76:0f:92:
         bf:7c:3a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:36:28 2026 by rpki-client