Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e9b3918c-d5d2-38c2-9e1a-5086c9408093.roa
File:                     e9b3918c-d5d2-38c2-9e1a-5086c9408093.roa (raw, json)
Hash identifier:          g4wP5YWDTUCiBVipliipzFbpeLwVJuWcfTRMhR/AaJs=
Subject key identifier:   E2:59:5A:47:C0:82:0E:14:0D:11:EE:FF:F1:EF:7B:31:E6:E7:77:23
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F6292B33D687017F6DE672100
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e9b3918c-d5d2-38c2-9e1a-5086c9408093.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     396190
IP address blocks:        147.255.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:b3:3d:68:70:17:f6:de:67:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=7393c4b7-ecd4-47a1-bc42-12584d4b519c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:10:19:64:2b:96:7a:cb:24:60:08:5f:4d:40:
                    29:22:97:9c:28:93:6d:b5:2f:b6:96:37:bd:00:c4:
                    b7:f3:55:88:6c:28:21:b8:ba:58:04:e3:58:83:e3:
                    7e:99:89:09:f6:62:ae:58:b3:6a:63:a9:61:f5:da:
                    40:24:60:ba:1f:41:7c:aa:cc:df:61:b1:54:fe:6c:
                    cc:bf:87:45:d1:3c:d5:ab:76:c1:3d:cf:ef:8a:62:
                    7a:a8:70:58:18:11:f1:2d:81:99:25:5f:b1:d0:c5:
                    ee:c8:87:e2:fa:41:ce:94:2a:52:a1:35:bb:8d:a6:
                    fc:cb:8f:19:d5:ba:46:82:0a:0b:15:53:3b:5d:0f:
                    50:a5:49:4c:ad:ef:eb:c8:9e:b2:86:a9:b4:5f:0e:
                    0c:93:a0:1a:8a:cb:7d:c0:64:87:69:42:41:81:2b:
                    71:65:05:46:67:24:59:ab:19:74:38:9f:cd:9b:b9:
                    44:36:c1:34:5b:b4:b3:7a:fc:0a:0e:a3:c1:15:5b:
                    12:ec:2b:5c:08:3d:41:db:ed:7a:4a:93:c5:c2:79:
                    03:44:1b:86:19:27:42:bd:3b:06:cf:fd:81:ff:2b:
                    2a:96:37:76:51:81:d4:6e:59:cc:3d:9c:aa:b2:78:
                    66:1a:93:1a:6f:f3:f4:e7:05:37:e3:0f:b6:90:1d:
                    45:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:59:5A:47:C0:82:0E:14:0D:11:EE:FF:F1:EF:7B:31:E6:E7:77:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e9b3918c-d5d2-38c2-9e1a-5086c9408093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.255.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:44:2e:dd:b5:82:8d:51:f3:b3:cf:f8:25:c0:e1:65:68:41:
         45:c4:71:55:a2:7f:6b:34:05:42:2f:1a:ed:9a:d8:f8:96:6e:
         36:aa:25:a3:61:e1:5f:7d:9d:0b:1c:9b:ad:fb:c8:bf:38:62:
         68:66:66:b1:0a:1c:75:4a:38:2a:88:96:9a:5a:6b:11:1d:7d:
         f9:29:38:38:47:bb:72:62:c8:3c:f5:ac:4c:93:e8:f9:bd:94:
         17:71:91:87:a1:f3:c7:81:84:6b:17:d7:d4:db:fb:dd:2d:40:
         49:24:f0:fa:6f:43:29:ab:c0:ec:f0:2b:cb:6d:6e:fd:af:e5:
         0a:62:87:44:3f:95:97:5c:37:d0:49:3f:3f:a1:8c:4f:1d:76:
         fa:dd:17:c6:50:83:bf:6a:98:67:08:47:56:a0:c2:e0:6d:4e:
         6a:53:37:c5:78:7d:d7:0f:15:17:4e:a1:1a:7a:bd:12:51:e1:
         cc:e9:9c:78:46:82:0d:71:fb:ed:66:12:ab:dd:94:73:9d:9c:
         4a:18:d3:ce:6b:84:2e:52:88:99:8a:59:9c:42:f0:38:4c:58:
         f7:cd:fe:b7:03:33:9c:a6:54:c2:be:bb:fd:3e:54:b6:15:51:
         30:02:da:70:f1:af:93:a7:44:35:b2:e3:8f:27:40:f1:c1:b4:
         5c:42:6e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:12:45 2026 by rpki-client