Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5/92f2c802-42e2-3523-b76d-9e4a8ad76ca5.roa
File:                     92f2c802-42e2-3523-b76d-9e4a8ad76ca5.roa (raw, json)
Hash identifier:          Yp9wPrXhQFgH1P1NYxe6Vrg8f2wtgcMGqwdEazawiy0=
Subject key identifier:   6A:53:21:5E:85:EA:0E:C3:2B:1B:36:0F:53:D8:07:76:72:D8:00:35
Certificate issuer:       /CN=dd8a2d71-ea3e-4a69-a215-5ee717cd29e5
Certificate serial:       010D0C9F4328584F4973440EB32D58CA4CE58380
Authority key identifier: 15:B8:ED:7D:E1:4B:40:3A:F1:5D:42:53:BF:E7:13:A4:A7:2E:8E:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5/92f2c802-42e2-3523-b76d-9e4a8ad76ca5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     2914
IP address blocks:        128.254.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:44:0e:b3:2d:58:ca:4c:e5:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd8a2d71-ea3e-4a69-a215-5ee717cd29e5
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=766851be-b0d4-4aa5-b492-12ca79fc85ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ab:a5:54:e8:6d:c0:68:6d:29:6c:99:b5:e4:
                    cb:1d:d3:45:6a:31:30:e4:79:58:62:50:61:93:af:
                    aa:2c:4e:37:9b:0a:43:71:42:d0:28:f7:f8:1c:4f:
                    4f:0e:bf:08:81:af:1a:5c:b5:2f:d9:56:49:72:bc:
                    b4:6a:84:7f:1b:59:32:99:6d:51:ec:06:ac:d3:52:
                    49:e1:b6:19:fe:9e:53:d3:c7:2c:bb:72:0d:cf:48:
                    4b:e4:59:de:ea:a8:2d:29:9a:c3:98:7a:9f:ed:56:
                    d8:af:61:1a:8f:53:38:b8:50:1a:f4:19:b3:1b:43:
                    13:99:b0:b4:ac:46:63:f2:2f:c5:de:85:e5:e0:90:
                    de:e5:69:18:e8:4b:e6:ae:db:26:62:36:d1:1c:10:
                    e0:a7:ed:10:e3:b4:27:8f:c6:3c:8f:77:f5:b6:78:
                    de:f4:82:f3:f0:5b:85:38:87:95:60:4c:26:3c:5c:
                    c6:dc:8a:a1:31:02:10:f9:c2:d1:0a:eb:3b:1a:3d:
                    10:ee:0d:a7:85:0e:53:ba:58:32:98:16:b1:4b:fc:
                    13:99:9a:96:ad:2f:03:38:43:11:a1:51:16:8f:24:
                    26:ab:db:fd:8c:c0:cf:f9:b6:51:20:e9:69:1f:64:
                    6f:6b:42:f4:47:65:f8:6f:7d:2a:c8:44:f2:4e:2a:
                    08:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:53:21:5E:85:EA:0E:C3:2B:1B:36:0F:53:D8:07:76:72:D8:00:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5/92f2c802-42e2-3523-b76d-9e4a8ad76ca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5.crl

            X509v3 Authority Key Identifier:
                keyid:15:B8:ED:7D:E1:4B:40:3A:F1:5D:42:53:BF:E7:13:A4:A7:2E:8E:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd8a2d71-ea3e-4a69-a215-5ee717cd29e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:cf:ae:4f:37:76:3e:e2:52:68:04:ce:52:7d:91:f8:ba:b8:
         00:9f:27:64:2c:82:4e:29:4d:ec:74:91:2a:f5:4d:11:f2:14:
         76:c6:de:04:52:e9:f5:e9:e3:44:65:3b:7a:3d:07:f4:93:e7:
         39:84:00:f2:03:8d:c3:ac:11:7e:71:4b:76:ea:7d:9b:d4:e1:
         3e:17:05:ac:0f:f0:e9:69:0d:34:74:3e:3a:c4:4f:62:74:a1:
         d4:b8:49:bb:bf:b8:48:5b:8b:a2:39:f5:62:14:db:1b:be:ca:
         8d:10:a4:8b:38:28:0f:dc:26:93:ed:ae:95:5b:10:e0:0e:03:
         d0:10:48:4f:23:a2:ab:dd:86:ac:bd:ad:cf:a5:63:e8:32:fb:
         f2:87:4f:7d:5e:84:0b:3c:03:88:2c:55:d2:f8:0c:35:d0:cf:
         d5:09:b1:ef:3a:74:4a:81:e3:f4:80:11:66:53:bf:2d:e0:ec:
         5e:91:db:2b:60:5d:48:8a:1f:06:f1:14:04:d6:c2:4d:ff:6f:
         0e:b8:8d:20:5b:0f:62:ba:07:4d:54:18:6b:3a:a1:3f:85:bc:
         45:e1:c7:d2:cb:87:e3:1b:84:53:dd:96:e9:17:cd:61:66:c7:
         e8:e2:c3:f7:bc:d9:c7:3b:84:d7:83:11:1a:0b:b3:53:a9:9b:
         d3:f9:d3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:54:37 2026 by rpki-client