Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/dc6f822a-785a-3315-9793-49013910c746.roa
File:                     dc6f822a-785a-3315-9793-49013910c746.roa (raw, json)
Hash identifier:          0EEQ88yUhYTE3TqQDdg4L0rS9eyxwj/U9r13GyAqN+A=
Subject key identifier:   97:2E:85:AE:13:B6:81:8C:EB:80:F7:FA:1A:5E:20:56:A6:9D:CB:87
Certificate issuer:       /CN=469597d0-a870-46e2-b0a1-04a71dad0b25
Certificate serial:       010D0C9F4328584EB57C4ECDEBB122CBD4220C40
Authority key identifier: D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/dc6f822a-785a-3315-9793-49013910c746.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     6128
IP address blocks:        148.76.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:4e:cd:eb:b1:22:cb:d4:22:0c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469597d0-a870-46e2-b0a1-04a71dad0b25
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=40bc4b22-370f-41b8-ace6-fd62f3055dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a4:04:5e:62:e4:9e:25:ed:59:e4:ef:f5:74:
                    81:ff:a6:d5:9b:29:00:54:0d:a2:3a:b6:fc:0e:74:
                    5e:81:1e:2f:5c:81:29:6c:57:b6:ae:f4:50:e9:77:
                    e1:7a:a6:0d:d3:86:13:b6:52:5f:f0:89:d2:0a:4c:
                    56:30:36:19:4b:dc:85:3c:c0:fc:fd:7b:8f:3c:4d:
                    8c:f5:f8:b2:23:b6:24:d0:a8:b4:07:80:3b:eb:40:
                    66:b7:7a:4e:2c:77:5d:53:fb:04:2f:11:a8:7e:0d:
                    ed:34:b4:73:44:26:27:e3:70:6d:e0:14:8e:8a:2f:
                    75:1e:d5:bd:d4:1b:75:b5:c0:79:d4:a9:7c:85:51:
                    01:4f:0b:6d:82:0d:b8:20:4f:d8:84:e3:a2:ba:77:
                    d4:63:07:51:34:58:62:8e:ee:66:f8:5a:ed:be:0f:
                    cf:44:21:2a:47:0e:19:2e:a4:96:a8:89:56:19:24:
                    c9:69:78:9f:d0:42:92:43:63:30:d6:8c:25:b0:9d:
                    7e:6e:d7:d2:83:e2:2a:79:f1:17:db:1b:dd:e7:70:
                    aa:ed:ab:d0:17:d1:11:58:7a:99:6d:97:63:4e:04:
                    53:b0:fd:33:0c:e0:82:45:6a:27:73:35:83:ec:3a:
                    71:ef:e6:87:1a:87:33:98:54:63:7e:a9:98:98:db:
                    75:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2E:85:AE:13:B6:81:8C:EB:80:F7:FA:1A:5E:20:56:A6:9D:CB:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/dc6f822a-785a-3315-9793-49013910c746.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl

            X509v3 Authority Key Identifier:
                keyid:D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.76.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:1c:4b:1a:7a:6b:90:5e:03:62:61:25:75:33:30:63:98:e6:
         6f:4e:e0:f5:83:8f:2d:7c:8a:e9:ac:10:c6:fc:9f:97:80:d9:
         f8:07:61:0d:57:db:6f:71:49:f8:c5:4a:d7:d6:d7:36:ea:96:
         63:1e:95:15:05:72:1c:a2:68:73:f6:6c:a7:ff:68:92:56:10:
         a3:2e:35:ba:9f:cd:d3:34:3d:20:dd:88:b0:a4:9e:1f:d0:b2:
         21:e0:c0:e5:0b:8a:dc:6a:e4:5e:09:54:e7:ca:db:b8:e7:85:
         0a:35:40:5f:7c:34:9a:38:6f:11:9b:18:de:f8:dd:cc:1f:8e:
         ba:45:06:94:c6:e1:51:23:42:a2:ef:ef:79:b3:15:34:f7:0d:
         19:3e:ed:bd:51:23:67:bb:30:48:5c:d1:f4:ca:e6:2e:4e:ba:
         cc:d8:86:f0:af:aa:37:04:66:a0:f4:ff:1e:40:ee:b4:03:be:
         07:5b:63:9c:90:55:73:6a:0e:d2:86:51:35:bd:d3:57:2c:53:
         57:65:71:1b:ce:59:51:0c:0f:84:3a:16:fa:38:af:0c:88:47:
         71:b5:25:d1:f3:b0:b0:72:7c:a6:d3:f1:0a:7d:fd:7c:90:3f:
         52:83:d0:96:69:00:c0:03:73:9d:f3:1c:02:e3:e1:01:ab:45:
         16:d1:75:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 00:44:19 2026 by rpki-client