Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ef329139-9a03-3abf-92d3-5da67ea393eb.roa
File:                     ef329139-9a03-3abf-92d3-5da67ea393eb.roa (raw, json)
Hash identifier:          GyloqJ5sxoVd0L64VOx+5IgGdHu0wyM0zFOB2uk2HM4=
Subject key identifier:   D0:5A:0F:F2:61:AF:83:30:D4:53:D8:9C:D3:54:56:C8:1D:F9:F5:5A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F6292E7DC1288EF862A21EF00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ef329139-9a03-3abf-92d3-5da67ea393eb.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     33363
IP address blocks:        71.44.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:e7:dc:12:88:ef:86:2a:21:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=30a9ef9f-3107-4a38-9854-837841ffb73b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a1:8a:0d:05:c7:13:50:82:30:cd:70:f7:f9:
                    0b:61:fc:5a:d5:f2:8c:b8:ca:5e:79:c2:5a:15:98:
                    b2:3c:f6:04:21:89:79:6d:b0:fd:6c:58:a0:20:ed:
                    e4:9a:08:72:2d:ad:a1:62:02:59:60:c6:98:5e:05:
                    d4:2c:c5:ff:db:d6:1a:80:ed:c8:b0:e9:fd:ac:e9:
                    c9:e8:6e:ca:15:13:e1:f7:1c:2c:c5:40:40:4a:fd:
                    c3:1d:19:b4:68:27:af:75:92:19:77:a3:b4:b4:e7:
                    1e:e7:0b:46:3e:5b:e8:c6:9b:e7:cd:fc:30:d3:cb:
                    90:47:97:a7:1c:93:60:4e:08:c8:ee:d2:ce:0a:cd:
                    13:8d:dd:1e:50:89:66:10:0e:d3:4e:e8:5b:fd:2c:
                    24:c6:de:a6:46:6c:5a:7c:a8:b3:4f:ec:32:ec:46:
                    df:2e:37:8a:4f:b9:41:ef:d5:93:9d:6e:b0:88:20:
                    c3:c8:4c:b6:b6:38:f3:56:07:bb:e8:0a:2d:b8:27:
                    ac:fa:ac:ed:88:06:96:1a:11:ed:87:d5:87:4a:d5:
                    2b:f7:85:55:fb:ac:83:77:89:5e:07:54:7e:0d:93:
                    e4:a1:d8:eb:16:0e:6e:80:44:3b:ef:99:11:a5:97:
                    68:65:11:c3:90:4d:82:e6:59:a0:56:2b:ac:71:7d:
                    90:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5A:0F:F2:61:AF:83:30:D4:53:D8:9C:D3:54:56:C8:1D:F9:F5:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ef329139-9a03-3abf-92d3-5da67ea393eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.44.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:b5:7c:e6:45:e6:8a:ac:55:8a:d0:4e:69:6d:6f:94:42:cc:
         97:b1:5a:70:d9:78:e4:b9:24:16:0a:f2:1c:7f:3c:8f:d4:4f:
         74:dd:76:4e:e7:f6:f5:3c:99:d7:06:ab:7b:ef:42:f5:f1:e4:
         59:69:63:81:73:4a:8d:9a:0f:49:cf:79:f6:f4:31:bd:17:ab:
         2e:f8:c7:0b:41:ba:4e:f0:92:dc:53:2b:44:2a:17:a9:18:8a:
         f7:53:81:5b:aa:8a:24:59:55:ac:0d:14:59:bc:8e:80:c1:94:
         6e:aa:06:3f:89:1d:9c:9a:e2:55:73:01:f7:e7:ef:c1:d3:9e:
         07:7f:8d:21:80:a5:e7:0c:31:c8:01:b4:9f:b9:a3:15:9f:8f:
         ed:b0:bb:ad:76:14:c3:f7:52:c8:9b:b1:66:4d:88:9e:72:69:
         2c:a8:2c:66:d9:16:6e:e6:17:e2:79:3d:c7:2c:9e:85:94:f5:
         07:3f:bf:1d:6d:81:fd:42:c6:8c:eb:8b:90:85:7f:06:d7:d6:
         66:74:67:05:b0:48:91:93:fc:26:f0:82:0a:b9:42:d0:e9:44:
         df:b0:9d:8f:e6:38:6e:5d:04:90:21:27:ec:aa:e7:5b:fa:d2:
         fd:09:d0:ca:56:be:75:5c:2c:a2:3a:4c:91:b2:b8:12:ff:24:
         f4:e9:8b:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikufcEojvhioh7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk
MzBhOWVmOWYtMzEwNy00YTM4LTk4NTQtODM3ODQxZmZiNzNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKGKDQXHE1CCMM1w9/kLYfxa1fKMuMpeecJa
FZiyPPYEIYl5bbD9bFigIO3kmghyLa2hYgJZYMaYXgXULMX/29YagO3IsOn9rOnJ
6G7KFRPh9xwsxUBASv3DHRm0aCevdZIZd6O0tOce5wtGPlvoxpvnzfww08uQR5en
HJNgTgjI7tLOCs0Tjd0eUIlmEA7TTuhb/Swkxt6mRmxafKizT+wy7EbfLjeKT7lB
79WTnW6wiCDDyEy2tjjzVge76AotuCes+qztiAaWGhHth9WHStUr94VV+6yDd4le
B1R+DZPkodjrFg5ugEQ775kRpZdoZRHDkE2C5lmgViuscX2QawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNBaD/Jhr4Mw1FPYnNNUVsgd+fVaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZWYzMjkxMzktOWEwMy0z
YWJmLTkyZDMtNWRhNjdlYTM5M2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRyxYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJu1fOZF5oqsVYrQTmltb5RCzJexWnDZeOS5JBYK8hx/PI/UT3Tddk7n
9vU8mdcGq3vvQvXx5FlpY4FzSo2aD0nPefb0Mb0Xqy74xwtBuk7wktxTK0QqF6kY
ivdTgVuqiiRZVawNFFm8joDBlG6qBj+JHZya4lVzAffn78HTngd/jSGApecMMcgB
tJ+5oxWfj+2wu612FMP3UsibsWZNiJ5yaSyoLGbZFm7mF+J5PccsnoWU9Qc/vx1t
gf1Cxozri5CFfwbX1mZ0ZwWwSJGT/Cbwggq5QtDpRN+wnY/mOG5dBJAhJ+yq51v6
0v0J0MpWvnVcLKI6TJGyuBL/JPTpiz4=
-----END CERTIFICATE-----
Generated at Thu Oct 22 20:28:55 2026 by rpki-client