Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b72e502b-9abd-380a-a5a1-bc23a51f60be.roa
File:                     b72e502b-9abd-380a-a5a1-bc23a51f60be.roa (raw, json)
Hash identifier:          5xacoQAXEtuzEFuCdeX6GpjI9r8D5MtY52zmRkHCdgQ=
Subject key identifier:   01:68:64:01:EE:C7:46:DC:7E:33:FF:6E:14:53:15:70:43:3C:25:DE
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F6292B1757AA355B12693DE80
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b72e502b-9abd-380a-a5a1-bc23a51f60be.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     396190
IP address blocks:        108.177.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:b1:75:7a:a3:55:b1:26:93:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=ae840986-3824-4f20-9546-84ce84c188b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:53:59:25:c9:0c:23:6c:8f:b5:81:af:51:96:
                    75:7b:95:4e:68:c0:ad:bd:dd:55:e6:02:a8:56:5f:
                    ee:cd:f1:f1:25:5f:35:41:b5:77:f7:9a:02:b4:c3:
                    7d:11:3e:f2:48:76:0d:bd:cd:d9:6b:cf:2e:54:d7:
                    db:6b:7a:1f:a6:da:0e:3a:8e:21:53:9b:c0:1d:0d:
                    e7:79:48:e3:13:77:e3:f6:28:47:8a:5b:3b:69:fc:
                    8d:3d:58:08:80:65:69:86:24:e0:ea:60:f0:4a:d9:
                    98:27:70:66:d7:fb:7f:9b:1f:f6:e6:81:45:4c:ea:
                    5e:53:40:5a:cf:ab:ad:66:ab:d1:40:fd:c9:da:fa:
                    dc:31:6d:f4:20:c2:81:6b:8a:2e:90:29:a7:b0:83:
                    09:34:59:ff:f8:ec:07:f8:e7:e1:91:07:67:e4:76:
                    5a:c1:48:9d:96:bd:19:a5:4d:f7:80:2d:4d:99:4f:
                    81:96:a7:16:eb:23:d8:61:7c:01:47:3d:fb:b7:f2:
                    a8:f2:7f:a4:79:43:fe:5a:84:83:9d:d0:7a:d7:39:
                    66:30:00:68:46:d8:9e:b6:7d:64:bb:9d:c8:bc:ac:
                    2a:fa:28:14:10:b9:41:80:77:7b:05:91:78:6b:2b:
                    9f:4a:df:d9:69:a8:65:88:5e:f2:a8:c3:45:11:b6:
                    88:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:68:64:01:EE:C7:46:DC:7E:33:FF:6E:14:53:15:70:43:3C:25:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b72e502b-9abd-380a-a5a1-bc23a51f60be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:62:8a:7a:f8:5d:15:73:06:c1:9a:0a:3d:16:60:7e:e2:f3:
         2d:cf:d3:69:30:2b:b3:01:f4:20:1a:5f:2f:6d:61:08:68:16:
         db:d9:c7:76:0e:76:4d:b3:cd:c8:8a:c9:ae:5a:74:23:79:de:
         97:68:51:81:39:af:5a:97:4e:f7:f4:71:de:ea:ed:c8:5e:75:
         24:7a:eb:61:bc:4d:5b:6e:e4:e1:52:40:20:58:41:93:3c:68:
         ed:d7:1d:f7:10:ea:5c:32:26:36:17:79:7e:2a:93:97:e0:b3:
         62:fc:63:f2:f6:8f:15:39:e8:f0:ec:d0:f6:66:ed:79:15:2c:
         f1:b8:c7:e1:fa:99:0f:48:65:aa:68:70:f8:dd:7c:01:37:94:
         80:cf:b3:23:7a:c4:1f:fb:89:37:81:88:78:13:4c:21:81:2b:
         5f:81:54:af:26:de:32:d8:ac:c6:8a:4a:e8:d9:26:87:7d:56:
         45:f0:f2:46:57:a4:92:92:7f:f8:3b:dd:03:62:8c:ab:bb:ab:
         68:04:0a:05:6a:3a:9e:11:8c:3c:d3:9a:ce:91:df:d6:eb:f2:
         d4:98:8d:70:c2:e8:5b:a0:90:58:0b:b2:06:7f:94:d1:2e:66:
         17:e6:27:1b:8a:a4:13:e0:2c:56:8d:1c:b2:7d:0c:6f:2f:ba:
         bb:fd:12:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 11:54:52 2026 by rpki-client