Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e7991b7e-e3e4-360f-ab29-5da84eef213a.roa
File:                     e7991b7e-e3e4-360f-ab29-5da84eef213a.roa (raw, json)
Hash identifier:          Rjf6gSYurPS+Z8B0BT1YKnL/DiRHm3zdak49cQNQEXE=
Subject key identifier:   4C:01:74:59:63:45:42:BE:1C:22:F3:5A:90:A4:8F:6D:37:7B:38:75
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F5E62D9ECF99A0823B59C1780
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e7991b7e-e3e4-360f-ab29-5da84eef213a.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     19148
IP address blocks:        108.62.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:d9:ec:f9:9a:08:23:b5:9c:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=73d5225c-1517-4e91-b348-2b79d17e76ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bc:c6:5d:ed:02:f7:b4:cd:3d:36:37:ec:5b:
                    b1:4a:52:2f:00:a7:cc:7f:56:2f:5f:3a:d9:19:34:
                    51:b8:55:01:33:6b:23:26:c2:70:5b:c2:6f:d5:92:
                    c0:64:1f:a8:0a:ef:3c:e7:11:d2:fc:e5:a3:fe:a5:
                    4d:35:e1:7a:4e:14:09:bf:d6:02:c5:47:3e:94:ed:
                    a3:32:ad:45:96:48:2f:62:2a:0d:58:82:27:09:2d:
                    fe:c3:0f:13:70:48:99:cb:17:56:f6:c6:74:be:82:
                    c8:14:90:96:8d:14:e2:b1:c8:51:df:41:55:86:5f:
                    b6:06:eb:9a:3e:85:82:dc:b8:d7:75:25:3b:b8:fa:
                    44:86:4f:e8:c0:92:db:20:a2:ae:b8:d1:10:6a:62:
                    42:aa:d5:8a:44:e0:0b:10:d6:2e:2d:88:b9:8e:a7:
                    16:09:8a:b9:59:cc:d3:f6:f9:9d:18:67:4d:f2:2c:
                    46:04:ce:07:14:c8:18:ab:37:24:1e:a7:3f:aa:aa:
                    9d:35:cb:a0:16:d8:f3:64:2d:f6:ab:4a:9d:cf:0b:
                    b7:a9:02:16:72:6f:d5:0a:ef:fd:2c:e4:5f:b1:2e:
                    0e:90:8e:8a:0c:44:ac:c9:f4:58:f4:67:46:ec:f7:
                    62:a8:48:9e:ce:b9:e3:ff:3c:03:cf:35:e3:65:95:
                    8a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:01:74:59:63:45:42:BE:1C:22:F3:5A:90:A4:8F:6D:37:7B:38:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e7991b7e-e3e4-360f-ab29-5da84eef213a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.62.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:fb:bf:83:5f:2b:2e:bd:a6:5a:48:5a:ad:66:bb:6a:99:cc:
         48:d5:fa:e5:9e:c7:bb:ae:04:5b:c3:7f:8f:38:60:ad:c4:ee:
         47:05:e4:7a:15:f5:e8:da:37:f5:e8:f3:c7:88:67:db:5f:9c:
         2e:8b:4b:bd:3a:89:07:7d:dc:6c:bd:7a:90:7c:2a:84:50:3c:
         12:95:48:3e:12:6f:0a:78:3c:f3:54:87:d7:f9:b8:b4:c7:f1:
         65:f0:9b:0b:a5:eb:55:43:2a:ac:d9:cc:f1:a7:53:c9:8c:46:
         7d:86:6c:27:2b:26:a4:0f:31:c2:51:e7:97:57:08:d1:a6:da:
         d3:b9:e2:e9:33:28:46:2e:93:a4:f6:39:5c:76:15:d7:26:f5:
         8b:44:ae:cd:66:75:d3:78:f5:1e:70:f5:7b:de:d7:c1:c7:e6:
         63:98:73:58:c3:cf:55:79:1a:35:cf:f4:52:4e:5c:57:a3:cc:
         34:80:f7:5c:a0:14:6c:41:e6:7d:80:88:80:39:6d:1c:10:97:
         f2:2b:32:88:c3:14:57:48:90:25:f6:2f:6b:8e:fa:1d:ce:87:
         6d:f3:01:ff:5a:75:c6:44:f8:18:68:ca:25:a2:b2:d4:69:04:
         14:86:15:e0:64:f7:bb:b7:47:e0:ed:06:b9:f2:d9:65:b6:22:
         b2:02:f2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:57:26 2026 by rpki-client