Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/7da0ad77-5952-32d1-8a18-7d28f57cb91b.roa
File:                     7da0ad77-5952-32d1-8a18-7d28f57cb91b.roa (raw, json)
Hash identifier:          QkGA05SlkaLSnfAPz4BglHS+D8ZjufRj3g8F5ERq2O8=
Subject key identifier:   70:FE:C7:29:7C:DB:CB:7A:B8:B4:12:39:52:0A:F7:85:13:6C:4E:31
Certificate issuer:       /CN=a773147e-548c-4c30-a3fe-91c723e2cad9
Certificate serial:       010D0C9F4328584F6E67CF49ABDC47FA7419E000
Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/7da0ad77-5952-32d1-8a18-7d28f57cb91b.roa
Signing time:             Thu 08 Oct 2026 06:43:32 +0000
ROA not before:           Thu 08 Oct 2026 06:43:32 +0000
ROA not after:            Wed 06 Jan 2027 07:43:32 +0000
asID:                     55256
IP address blocks:        158.95.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6e:67:cf:49:ab:dc:47:fa:74:19:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9
        Validity
            Not Before: Oct  8 06:43:32 2026 GMT
            Not After : Jan  6 07:43:32 2027 GMT
        Subject: CN=e694dc00-1e28-4942-a4c8-b5a6bf9aa2ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:19:dc:0e:2a:d5:52:8c:db:b1:3b:39:5b:a1:
                    23:26:ce:34:37:92:70:de:5e:2e:55:75:f6:e7:ae:
                    0f:05:c9:f9:41:25:72:f8:29:b1:f5:2a:1a:dd:fc:
                    84:83:97:cf:ef:9b:0f:e3:63:e2:ef:24:b9:f8:1c:
                    b7:43:f5:f3:b2:be:5d:33:1f:9c:21:4a:48:45:ab:
                    16:21:07:cd:b7:7f:f6:2e:5e:8b:6f:58:56:5c:75:
                    6c:c5:21:07:9c:5c:29:48:57:a3:b8:41:04:69:01:
                    8a:be:14:21:a7:02:bf:22:49:93:10:a0:8b:93:75:
                    4f:2c:71:76:64:01:ec:d3:b5:d3:2b:33:5a:cc:1e:
                    d1:b0:c2:07:42:01:1e:56:d3:f9:b0:2e:03:8e:1a:
                    b1:0d:54:4e:8c:03:90:14:8f:7f:a8:c1:5b:a7:c2:
                    65:44:39:de:d7:b7:6a:0f:29:05:a3:ac:c5:b4:64:
                    3b:6a:d0:66:3c:36:23:07:b6:60:a6:a4:f6:4a:b5:
                    de:b8:e2:ab:9f:5a:6e:d0:8e:68:a5:6e:b5:a2:28:
                    cd:a0:18:ef:53:dc:8f:f5:24:6b:b5:1f:72:1c:ef:
                    1c:fa:fa:e8:77:76:12:ce:95:8b:9b:8d:12:cd:e2:
                    a3:6b:f0:c5:a9:ee:f0:d5:dd:2a:1d:e8:6a:b0:02:
                    f0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FE:C7:29:7C:DB:CB:7A:B8:B4:12:39:52:0A:F7:85:13:6C:4E:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/7da0ad77-5952-32d1-8a18-7d28f57cb91b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl

            X509v3 Authority Key Identifier:
                keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.95.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:10:2b:d2:7d:ed:21:81:27:b3:5c:a9:89:2d:25:5b:11:2a:
         02:2f:c1:c7:ad:9e:85:ed:6b:13:b3:a6:a0:01:93:a9:1d:16:
         6b:95:ae:f3:7a:33:fa:3e:fb:28:3e:da:5f:6b:3a:a4:15:75:
         86:ae:b3:8f:9a:4e:02:b3:6b:0a:89:99:e6:c7:da:73:9b:b3:
         4c:e6:92:da:9d:c9:28:8f:3f:c0:80:f5:4a:b9:8c:46:c3:80:
         1d:63:ef:8b:e6:e3:0a:7e:0c:ff:66:24:2c:fd:65:32:26:e9:
         1b:fe:c7:2a:78:3d:41:88:22:61:87:ee:9b:ff:24:c6:8e:94:
         78:57:ca:4e:15:e8:62:fa:31:77:8a:c8:f9:45:16:a7:dd:5f:
         08:db:fe:df:b7:6a:b1:5f:95:3f:d6:45:a4:0e:0b:d7:4c:58:
         8f:27:37:e5:dc:fd:b8:90:c0:e4:08:36:e7:17:7d:9f:c5:fe:
         1e:90:ad:d1:b9:35:1b:4e:45:aa:1b:86:e1:b7:f3:ac:72:a7:
         70:52:15:7d:fa:08:a5:2d:15:5c:dc:b1:11:dd:ac:80:88:71:
         a5:ab:da:24:dc:88:63:8a:45:3b:22:ab:c2:e6:a5:23:fb:1b:
         59:3a:0f:13:de:7c:e2:7e:fc:7e:96:3f:c9:ef:0b:2d:66:b4:
         ab:e3:7e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:58:16 2026 by rpki-client