Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/435905e5-34de-3007-9134-d658d6493896.roa
File:                     435905e5-34de-3007-9134-d658d6493896.roa (raw, json)
Hash identifier:          uH25Pj0ux2msIEhZWx156rA/r6KDEEmVczwVkCVLrqk=
Subject key identifier:   BC:B5:75:2C:7D:D8:AB:7D:08:7F:49:6E:47:1A:F5:84:2B:9A:97:6D
Certificate issuer:       /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61
Certificate serial:       010D0C9F4328584F3A17C7CD2098B1255C57B880
Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/435905e5-34de-3007-9134-d658d6493896.roa
Signing time:             Sat 19 Sep 2026 13:00:12 +0000
ROA not before:           Sat 19 Sep 2026 13:00:12 +0000
ROA not after:            Fri 18 Dec 2026 14:00:12 +0000
asID:                     63414
IP address blocks:        76.10.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:17:c7:cd:20:98:b1:25:5c:57:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61
        Validity
            Not Before: Sep 19 13:00:12 2026 GMT
            Not After : Dec 18 14:00:12 2026 GMT
        Subject: CN=539eb49f-cb99-4912-9dd3-2e416eca50b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b6:99:2f:32:9d:89:8d:4a:d2:63:ba:33:d0:
                    49:e2:7d:e3:76:0e:58:a5:1f:79:39:78:45:04:36:
                    f2:1e:d2:54:95:e2:c2:09:54:e5:6a:e0:11:fd:3f:
                    16:91:03:7c:6a:11:ce:bb:81:5a:0b:43:a2:e7:1a:
                    b0:ac:c3:d0:e0:78:03:10:47:67:3f:79:a6:2d:32:
                    ca:76:0a:77:47:41:1a:82:2e:91:e7:1e:d6:e2:a0:
                    6c:95:57:64:25:23:53:1f:d2:bc:52:53:94:bc:e4:
                    f6:5c:01:f7:0b:77:7c:26:67:fb:c6:b9:03:56:b6:
                    13:32:ad:7d:a2:28:03:bd:f9:e6:54:a4:55:82:df:
                    11:89:c9:c6:0e:48:2f:ef:19:88:86:0b:3f:a4:f3:
                    7e:c0:6a:5b:15:71:b1:07:b3:b0:9d:6b:c5:07:a4:
                    ea:9d:27:90:a5:45:01:5b:11:69:d9:b3:02:30:ea:
                    c7:a3:a1:bb:cd:8c:2c:b6:2b:8f:97:36:1e:f9:dd:
                    47:6b:ff:d7:9a:e3:c0:20:0b:67:5a:c2:6f:6c:74:
                    b5:53:b6:75:f9:a2:77:89:9e:5a:fe:26:1a:a4:cd:
                    34:f8:ef:74:34:86:21:90:94:68:72:50:c5:58:54:
                    ca:13:bb:04:07:e5:cf:54:2c:be:d2:7c:57:7a:9e:
                    b3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B5:75:2C:7D:D8:AB:7D:08:7F:49:6E:47:1A:F5:84:2B:9A:97:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/435905e5-34de-3007-9134-d658d6493896.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl

            X509v3 Authority Key Identifier:
                keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.10.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:34:f8:38:83:12:82:8f:c2:ef:76:1c:00:56:da:fd:fe:c1:
         7d:0d:d6:32:71:ef:ed:6e:ce:52:cc:b5:31:45:ed:1b:ef:1d:
         cf:3e:c5:47:28:32:70:02:71:21:ef:6a:62:a8:e3:c4:4a:63:
         e8:88:9f:3a:a3:4e:57:64:8a:a9:44:31:50:d2:41:82:89:d3:
         67:cd:30:49:8f:1a:cf:bb:8a:63:21:95:7c:cc:3a:19:7d:1c:
         f1:c5:79:5f:a2:ec:bb:a1:22:27:0c:81:29:43:fb:94:41:fa:
         bf:73:27:be:03:33:3d:2e:a5:7b:a1:28:4f:aa:cb:2b:c8:2f:
         b3:3c:fd:96:a6:1e:1b:37:76:a4:a6:c3:c3:da:43:54:18:bd:
         29:69:7e:5b:8d:5e:4f:68:bf:b3:79:86:4f:be:3f:ca:3d:e6:
         1b:d9:ba:e8:3c:98:81:85:ea:69:99:af:5a:49:8e:18:ca:6c:
         9d:d9:17:a9:24:ff:3d:8c:a1:64:de:d8:e1:b7:56:b8:c2:b8:
         dd:6f:ab:a0:24:df:54:3e:36:73:01:1f:af:f0:16:48:27:53:
         04:7c:5f:fa:30:51:44:97:2c:4a:fd:83:40:21:eb:38:6a:37:
         2c:21:7f:80:f3:35:38:d7:10:8a:80:4c:c1:50:72:2a:06:c3:
         16:5e:fb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:54:10 2026 by rpki-client