Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/a478405f-22ae-35ef-8ee6-b51fef9b3adb.roa
File:                     a478405f-22ae-35ef-8ee6-b51fef9b3adb.roa (raw, json)
Hash identifier:          b4RqPsPVMXtFAwdZPfs/w/sI3NPiFKUh5mUAJ3Mh80c=
Subject key identifier:   D1:D4:A6:9A:91:FE:D7:06:5F:0A:8A:C8:C2:67:14:A4:64:F4:F5:FC
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584F4AD7E16CDD6D779DBF2D8E00
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/a478405f-22ae-35ef-8ee6-b51fef9b3adb.roa
Signing time:             Fri 25 Sep 2026 13:00:11 +0000
ROA not before:           Fri 25 Sep 2026 13:00:11 +0000
ROA not after:            Thu 24 Dec 2026 14:00:11 +0000
asID:                     174
IP address blocks:        172.111.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4a:d7:e1:6c:dd:6d:77:9d:bf:2d:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Sep 25 13:00:11 2026 GMT
            Not After : Dec 24 14:00:11 2026 GMT
        Subject: CN=6e385936-0a17-4460-b6d8-5c810fd00c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3e:2a:8a:e9:f2:f4:f4:fd:df:59:93:f7:ce:
                    1c:8a:43:6e:98:3e:7b:64:16:23:95:39:64:08:06:
                    45:7d:72:f7:ac:2e:ab:72:a0:88:c9:d8:72:f8:7c:
                    e3:be:6c:8e:f5:43:34:b1:1c:45:5b:3d:94:52:99:
                    0a:f6:69:ff:c5:9d:e3:86:82:80:6d:c3:ec:68:c5:
                    d9:bb:b5:f9:3f:ce:a7:14:61:fe:11:47:d2:05:9a:
                    fb:59:b1:f0:a3:f9:73:b5:be:9d:e5:4b:ef:81:84:
                    79:5d:58:b4:fe:d3:a6:f4:ca:f4:27:d8:e8:39:97:
                    da:9e:be:f6:b7:ed:88:60:02:ef:c8:4c:03:0c:8b:
                    31:26:fa:1e:9f:fe:44:46:b3:ad:45:fd:9d:a7:ce:
                    58:14:22:e7:98:85:c5:a6:62:6a:b0:e3:14:22:d5:
                    ba:c7:8c:cd:a0:c3:bf:8f:ec:fc:d7:18:3c:47:32:
                    71:63:58:af:60:a1:8e:6a:83:ec:e0:de:f4:38:21:
                    8b:5d:6e:b0:ce:e6:77:85:09:cd:0b:12:68:53:fd:
                    f4:29:99:fc:fa:6a:25:c8:47:0c:74:9a:ed:64:60:
                    d4:13:8e:4d:74:23:e2:0f:26:5a:4a:c9:32:38:74:
                    8f:72:07:cc:cd:c8:39:bc:60:8f:6b:a0:ff:40:de:
                    33:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D4:A6:9A:91:FE:D7:06:5F:0A:8A:C8:C2:67:14:A4:64:F4:F5:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/a478405f-22ae-35ef-8ee6-b51fef9b3adb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:92:f1:fe:10:fc:15:8a:79:8e:f5:24:a5:3a:b5:4b:f5:e8:
         a9:3b:91:b7:ce:0d:35:60:16:a6:7e:9e:bf:a4:0a:83:3a:c3:
         86:f5:1f:a5:3f:39:80:7a:62:33:c9:8d:0b:9f:0d:54:99:a5:
         01:a3:eb:90:fa:7e:69:96:9c:a1:fd:8f:65:0b:52:bb:07:ec:
         5f:79:93:9e:3d:34:3c:7c:44:b1:25:52:4c:2b:16:f6:b9:e4:
         f5:e3:04:6d:32:79:8e:34:6e:c8:9a:9d:55:5e:e2:0b:04:2e:
         e8:ab:d9:71:74:3f:0b:af:0f:9f:e4:53:19:66:fa:b3:43:e9:
         0e:af:fe:33:08:e6:8d:82:55:15:6c:a1:0f:2c:22:c6:f8:23:
         32:03:16:d0:b4:d2:87:31:28:4d:8f:35:6f:5d:60:a8:e0:c0:
         9b:39:8a:40:82:0b:27:76:0d:b4:9e:45:a8:89:c0:dd:9f:11:
         02:5e:4a:79:98:4e:50:32:3a:12:bd:43:2d:e7:c9:89:3a:8d:
         af:2a:21:27:3c:d4:63:65:64:2b:f7:ca:88:50:ea:6e:93:5c:
         d3:f1:a6:64:ae:83:4e:9d:74:84:af:3b:c3:6c:86:4d:f5:e6:
         52:86:3f:54:6a:da:f4:45:c0:00:a6:64:54:86:76:93:53:d2:
         65:b2:3a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:27:13 2026 by rpki-client