Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/eb4fb844-1dce-32b3-94cb-1460c072d21d.roa
File:                     eb4fb844-1dce-32b3-94cb-1460c072d21d.roa (raw, json)
Hash identifier:          KNf0HrzuNTPqswu+otvEnpUyfoaSEBCiT83gt41rS+g=
Subject key identifier:   B3:54:F3:8C:19:7F:4B:CE:69:40:3A:5C:2F:6C:5C:04:3D:26:52:04
Certificate issuer:       /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Certificate serial:       010D0C9F4328584EE7BCABFC5F6CC7C83BEDB180
Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/eb4fb844-1dce-32b3-94cb-1460c072d21d.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     10929
IP address blocks:        204.147.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:ab:fc:5f:6c:c7:c8:3b:ed:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=1103d8b2-2983-4d4a-8e08-7deb39cdf4d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a4:2a:5e:3b:e4:31:b9:26:88:71:4a:a5:86:
                    83:14:63:eb:41:a1:1a:b4:9b:7f:d5:91:22:de:c2:
                    7a:62:9e:81:de:9f:99:62:19:13:e4:35:2c:85:a3:
                    b7:1c:fb:a2:03:ec:5b:ab:7c:68:30:df:67:a8:99:
                    cb:83:59:c2:f9:28:bd:c7:1a:51:87:ce:11:81:4a:
                    55:84:dc:e4:f8:37:d6:4f:59:4a:85:42:db:c2:ff:
                    49:97:00:1e:b5:49:c4:7c:79:b2:9c:fa:1c:29:06:
                    4c:70:e6:10:8e:51:ea:c5:f8:fd:e2:74:13:32:80:
                    99:c7:72:d6:b0:10:b1:10:d7:8d:3c:02:d4:a0:7c:
                    91:10:4a:75:90:b0:cc:73:f2:d7:56:f2:4f:56:7d:
                    ca:9e:d9:06:f6:d8:2c:8e:45:7c:38:55:1b:be:0b:
                    47:b9:0a:4b:19:02:c3:bb:b7:8f:85:99:96:86:a6:
                    67:47:65:50:87:23:48:77:81:02:90:ba:a8:91:fc:
                    dc:b2:7f:f0:99:ac:5c:ab:14:da:59:d1:7e:7f:39:
                    fb:ce:24:34:59:e7:3b:45:bb:56:bb:ae:0a:e9:76:
                    27:66:c9:7b:fc:df:a2:35:6d:87:5d:77:3c:2a:3c:
                    35:fa:31:5f:b4:db:05:4a:a7:be:a2:b3:c6:79:73:
                    5a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:54:F3:8C:19:7F:4B:CE:69:40:3A:5C:2F:6C:5C:04:3D:26:52:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/eb4fb844-1dce-32b3-94cb-1460c072d21d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl

            X509v3 Authority Key Identifier:
                keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.147.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:d9:de:43:ac:54:b5:c4:69:dd:e1:f8:a9:80:57:9d:ff:e3:
         b8:3f:ea:d6:e0:c3:74:05:2f:74:13:da:14:9d:3c:c9:c5:13:
         e1:1e:ca:3f:0f:5b:e2:0a:12:1d:d6:d4:b2:69:c0:76:6f:21:
         c1:44:ee:e5:bc:f1:cb:ed:a2:17:d1:6b:2d:15:b6:e7:68:6e:
         5c:a1:06:7a:7c:5d:ad:9b:9d:98:7e:53:54:29:94:f1:73:c1:
         7a:de:eb:7f:88:f6:98:12:a7:dc:09:a6:ec:8d:e9:5d:4a:af:
         b8:8e:b1:ef:40:fa:cd:db:1a:7f:a4:06:e0:62:97:e5:b6:cc:
         df:00:d4:ae:18:52:65:aa:dd:fe:b3:33:34:a8:52:40:8d:39:
         82:f5:fa:a3:a9:83:24:a2:f0:b3:49:e6:04:0c:8e:4f:a9:c7:
         0a:52:4a:da:3b:02:d5:f3:05:80:b3:b2:d8:e9:65:e5:de:a6:
         cf:43:8b:04:6e:b5:23:bf:d2:27:bf:24:da:15:d4:77:87:b4:
         a6:db:5b:df:92:ba:f2:e9:4e:a4:7c:f5:36:6f:0d:b8:07:1f:
         4a:45:88:8a:97:d9:99:60:31:f5:3a:15:c9:3c:cd:f4:64:31:
         e1:67:cb:f5:62:ad:78:f6:e7:b9:37:eb:da:fc:35:13:df:6a:
         4b:38:a2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:44:27 2026 by rpki-client