Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c982ce71-3b99-3d09-b731-2391e76b1e71.roa
File:                     c982ce71-3b99-3d09-b731-2391e76b1e71.roa (raw, json)
Hash identifier:          Lx08D6qs+sj7nBDTYtz2C2CBRTqZ7tetTvVoZ87bnA0=
Subject key identifier:   A5:C3:69:C6:E9:77:1C:76:1D:DE:0A:96:A4:99:E9:6C:98:D3:06:8B
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F655D608C44EC40DD19226DC0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c982ce71-3b99-3d09-b731-2391e76b1e71.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     395954
IP address blocks:        172.241.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:60:8c:44:ec:40:dd:19:22:6d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=18565590-0962-4157-ab72-3872d933283a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b0:52:8d:ff:45:80:11:45:e7:e9:3d:ad:d2:
                    c6:3a:48:7d:4c:fd:02:e2:76:83:99:c8:47:6d:67:
                    bf:e1:17:1e:09:99:cd:a3:03:3b:5b:91:3a:1d:d4:
                    73:ab:81:c4:0e:d0:44:73:dd:fe:67:0a:30:ad:cf:
                    df:67:28:3f:e9:c1:73:bf:6a:cf:04:cb:f9:92:71:
                    61:a6:43:a3:bf:d3:9a:71:48:a3:31:7b:d4:bc:86:
                    04:53:85:e7:8e:38:1c:46:11:b7:87:75:3b:28:ec:
                    51:e3:2b:ac:88:5c:69:a7:9a:8b:53:6c:ae:89:4e:
                    0f:c2:9c:f3:9e:89:f6:95:b1:4f:c5:bd:e6:02:7f:
                    a2:ac:0a:9a:48:e8:89:8e:d7:07:a8:13:9c:9f:b8:
                    33:f6:84:eb:ba:1f:80:d5:ac:19:2a:28:8b:04:c3:
                    63:17:36:51:36:6f:dc:e3:11:88:73:f7:1f:ad:29:
                    2e:0c:8f:b8:aa:ac:81:37:f5:85:8d:4b:5e:77:96:
                    fc:4c:13:35:dc:e7:2a:53:a7:38:c0:2c:c4:79:9a:
                    7f:79:95:ad:a7:6b:c9:86:73:9f:49:16:72:ab:68:
                    db:2e:a5:3f:72:1e:23:cc:f8:0f:34:05:24:83:b4:
                    9b:76:2f:d9:9b:9a:db:1d:e5:b3:95:df:e8:01:4b:
                    27:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C3:69:C6:E9:77:1C:76:1D:DE:0A:96:A4:99:E9:6C:98:D3:06:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/c982ce71-3b99-3d09-b731-2391e76b1e71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.241.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:e5:e8:b7:a7:77:cb:e7:37:7b:6a:fe:3e:06:35:a8:88:6a:
         27:c6:53:2a:c1:68:bf:4e:9c:e2:14:d2:57:86:2c:44:cc:89:
         65:a6:99:25:25:44:a8:7d:20:7c:80:1d:d5:c5:3e:e9:0f:9d:
         17:6e:cc:fc:3e:5e:ea:ca:52:53:88:b2:cf:4f:6f:48:80:3f:
         76:b9:87:30:7f:36:ae:3d:e9:43:d3:fb:7e:86:7c:85:ac:54:
         7f:b1:f9:46:98:7e:90:da:c2:2f:6a:ed:c5:61:41:40:d4:53:
         d7:e7:63:5e:30:7e:c1:53:9e:62:d4:3c:56:2a:54:4a:7a:58:
         70:be:60:f8:fa:e3:7b:81:13:c1:8c:ae:4e:05:b1:c9:a2:75:
         66:a6:02:3f:b2:9f:6e:64:75:bc:85:71:e9:f2:60:38:c9:ab:
         cb:03:1a:8e:68:58:a1:f3:05:bc:0e:7a:d2:22:4a:82:88:8a:
         e5:82:fb:a0:2c:57:cc:bf:28:34:2c:51:fd:3d:45:03:18:e1:
         8f:47:81:89:03:89:8d:63:5f:f3:5e:5d:ce:1a:b5:38:35:66:
         41:3c:af:78:70:a1:a3:b7:13:72:fa:82:5f:78:8b:a8:ec:ae:
         d3:c0:a3:98:73:10:a0:9f:c1:fe:93:39:a3:ef:07:ae:59:cc:
         bf:f5:95:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:24:06 2026 by rpki-client