Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/926aeaff-dcff-3162-ab2d-311735e3fa8f.roa
File:                     926aeaff-dcff-3162-ab2d-311735e3fa8f.roa (raw, json)
Hash identifier:          q0jU3dIbOU6EdXzBv2ry4fbtKBMxOTfYx75YNRC99/Q=
Subject key identifier:   19:CC:00:14:57:4A:50:6A:67:A2:88:42:BC:4B:48:0A:C2:BA:47:62
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F5B97FBE1132D6985D5867E80
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/926aeaff-dcff-3162-ab2d-311735e3fa8f.roa
Signing time:             Thu 01 Oct 2026 13:00:12 +0000
ROA not before:           Thu 01 Oct 2026 13:00:12 +0000
ROA not after:            Wed 30 Dec 2026 14:00:12 +0000
asID:                     7203
IP address blocks:        147.255.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5b:97:fb:e1:13:2d:69:85:d5:86:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  1 13:00:12 2026 GMT
            Not After : Dec 30 14:00:12 2026 GMT
        Subject: CN=e827022f-ef38-4d39-a7ef-8019dcb41c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9d:af:06:b4:b0:98:c9:aa:11:61:68:e4:2e:
                    f9:6a:18:f7:d2:a3:02:86:e9:33:ff:05:c4:53:a0:
                    fd:72:bb:3c:b9:4a:c0:16:c8:7e:62:00:43:7b:a4:
                    26:a0:06:0c:05:69:e0:1e:e8:60:d9:86:3a:32:d1:
                    ef:1f:39:02:ca:b5:ed:41:21:57:05:33:48:7e:8a:
                    fa:bc:ed:e1:e6:06:e3:81:b2:57:6f:0b:46:2f:f3:
                    5b:6a:f1:1c:04:5a:19:66:0c:72:a6:96:6e:a0:4d:
                    0b:c7:9c:d4:e2:dc:46:a3:31:c0:39:08:5b:94:42:
                    1e:c5:1c:64:34:25:87:3f:55:0f:cf:f6:e8:d1:31:
                    3a:c6:b6:34:3a:f8:c2:88:cc:61:0d:71:56:2f:7c:
                    3f:2f:8a:72:a9:52:9c:cb:04:e1:a3:5d:b6:b5:00:
                    83:ce:02:fc:f7:e7:4c:07:21:17:7a:48:0f:95:9a:
                    db:b5:1f:9b:ac:8d:d7:63:f4:44:15:7f:f3:5c:aa:
                    e0:cd:e7:ae:ae:29:a7:8f:c3:60:71:a9:be:03:b4:
                    52:7c:77:75:45:76:50:0a:b1:b3:3d:81:50:5c:5c:
                    4a:48:9a:56:1d:2d:40:f9:95:5e:53:04:33:d3:3d:
                    26:fd:4a:1a:8d:3c:f5:fd:81:2d:ba:93:a1:97:f9:
                    52:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:CC:00:14:57:4A:50:6A:67:A2:88:42:BC:4B:48:0A:C2:BA:47:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/926aeaff-dcff-3162-ab2d-311735e3fa8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.255.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:54:8e:b8:b0:7b:3f:54:08:cf:ee:2d:2f:06:dc:49:6c:ea:
         49:52:ab:e1:03:0f:07:9e:f6:83:81:c0:56:7c:23:70:bc:cd:
         15:21:86:93:4e:c5:97:a2:00:a4:f9:fb:fb:e0:18:76:56:59:
         c7:10:cd:7e:12:01:70:59:f7:c9:03:71:e7:f6:82:62:7d:a9:
         64:9f:96:42:66:2d:dc:0d:75:c0:8c:91:01:44:50:2b:2a:44:
         ef:0d:9a:ed:af:c7:53:b7:76:a4:d7:11:0a:71:a7:e8:af:bc:
         1d:1c:93:26:f6:34:e8:db:06:d7:f4:9a:5b:3a:ad:3a:41:72:
         e4:17:73:12:20:8a:2f:34:a1:20:67:f3:ca:90:ab:fd:2b:a9:
         a4:bc:b8:30:e8:d8:0f:26:34:d4:55:fd:73:b0:3e:5a:8c:18:
         46:7b:ed:44:07:b9:76:3e:37:b6:de:bf:7b:a9:db:ed:8b:0a:
         10:12:4d:fd:2b:e2:64:f9:03:f4:aa:d9:08:64:1f:fe:07:d2:
         2a:cb:0e:98:46:b0:2e:37:2c:ce:50:6a:4f:c5:15:31:e3:03:
         78:59:81:75:8d:1b:0f:64:2c:e3:a9:7d:2f:f9:e5:a5:6a:80:
         14:e6:37:b8:da:fd:84:f7:40:e5:da:c2:65:90:16:19:46:47:
         1d:63:74:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:29:37 2026 by rpki-client