Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d8d24c9a-71b3-35c4-87de-7d9612b83497.roa
File:                     d8d24c9a-71b3-35c4-87de-7d9612b83497.roa (raw, json)
Hash identifier:          eqWZk272wjk9yJVLmt4uWJ7QCubYskGhy0voXgBucyc=
Subject key identifier:   99:D2:ED:36:0D:1F:98:24:B7:B6:67:C1:70:15:6A:38:27:20:99:29
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F5B97FAF173B82F6CDE39F4C0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d8d24c9a-71b3-35c4-87de-7d9612b83497.roa
Signing time:             Thu 01 Oct 2026 13:00:12 +0000
ROA not before:           Thu 01 Oct 2026 13:00:12 +0000
ROA not after:            Wed 30 Dec 2026 14:00:12 +0000
asID:                     7203
IP address blocks:        142.91.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5b:97:fa:f1:73:b8:2f:6c:de:39:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  1 13:00:12 2026 GMT
            Not After : Dec 30 14:00:12 2026 GMT
        Subject: CN=78fc7093-22e8-4837-a470-7469f31b5101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:20:e7:80:77:b3:fc:82:61:3e:12:f3:d0:d0:
                    99:92:bf:4b:d2:e3:d3:0b:b4:4f:42:be:3f:54:d1:
                    36:21:eb:ea:08:31:ee:a2:22:60:25:ac:d8:4a:77:
                    4f:b5:bf:f0:4d:cf:67:bb:71:4f:a6:3c:c7:f7:3a:
                    67:2d:8c:94:e7:39:23:9d:8d:9b:21:79:ea:08:66:
                    0a:a6:c0:53:ea:20:b1:01:7e:8a:32:01:97:ec:8a:
                    d8:9d:1b:46:e9:70:1c:37:0b:d5:c0:52:16:bb:45:
                    36:5e:60:77:11:e3:8e:e1:b4:b2:a0:a9:26:46:c2:
                    fd:c9:66:e1:16:f6:21:45:e8:c2:72:05:03:4d:c4:
                    b3:f9:c6:be:32:13:d5:41:32:48:8a:9a:89:62:99:
                    07:4d:bd:f7:08:e4:e0:ea:1c:c0:68:96:0c:70:b1:
                    82:c7:04:df:2d:34:ef:fb:14:ce:dd:31:24:ed:ff:
                    72:00:d5:01:15:a2:68:86:88:d4:12:1c:3c:a0:c3:
                    9c:c0:3c:fb:fe:08:0b:b3:15:e0:e1:76:57:e4:4a:
                    39:7e:ff:72:05:52:4f:6f:ce:66:29:f4:84:8a:47:
                    f6:4e:9a:54:e2:90:6a:a4:eb:ab:96:7f:5f:0a:fc:
                    a8:70:6a:74:21:64:6a:6a:55:db:f6:71:7c:ea:08:
                    7c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D2:ED:36:0D:1F:98:24:B7:B6:67:C1:70:15:6A:38:27:20:99:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d8d24c9a-71b3-35c4-87de-7d9612b83497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.91.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:6b:25:d3:0d:65:ba:5d:c5:75:37:36:2d:75:5c:82:47:48:
         5d:d9:76:83:d6:3c:38:d2:9a:f8:bb:48:4b:51:4d:aa:3c:bb:
         7f:43:ef:ea:d3:9a:56:57:82:f7:6e:02:fe:db:d8:ee:9d:94:
         00:26:3e:35:06:f9:45:3d:21:d0:70:87:e3:9c:ad:d9:bb:c3:
         e2:5b:01:e2:e2:07:f2:32:45:d5:a5:d9:16:21:5e:ff:af:d0:
         fe:7d:21:be:f1:19:f6:4c:51:35:e3:40:11:9d:ec:c5:21:b4:
         d6:65:b1:9e:bb:df:34:d1:8b:b7:f5:05:94:b2:b0:e7:10:d1:
         dd:61:88:5f:0d:90:bb:4b:6b:80:d6:f2:1f:6f:ff:54:a3:74:
         30:d2:ad:71:5d:59:03:85:7b:65:38:20:d2:9c:94:47:15:b9:
         50:96:16:59:9f:9b:38:95:6d:86:a0:2d:24:d7:76:dc:d3:90:
         ff:c9:ba:17:de:3a:98:69:65:ea:84:bf:5b:b4:75:ad:01:9c:
         1e:e2:f1:0c:7e:d3:86:65:fb:a7:d2:48:52:4c:a4:35:76:cd:
         92:c2:ee:db:65:53:76:82:1d:29:ce:b3:4c:ad:cd:7c:12:22:
         be:a6:f7:ec:b8:74:7e:3f:3a:de:05:83:ab:8c:cf:31:47:82:
         1e:d5:4d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:09:07 2026 by rpki-client