Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4c3a1de3-d43a-31c8-a5e1-e533ce7a9e42.roa
File:                     4c3a1de3-d43a-31c8-a5e1-e533ce7a9e42.roa (raw, json)
Hash identifier:          LmCeYE+hT/ctS7EzYmnKeejTfvcosnb1oX076MYHaL4=
Subject key identifier:   1C:3D:83:DF:4D:E0:53:05:62:41:AF:10:1E:72:D7:70:39:28:CC:BB
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F5BD5FF7A118E7036FA4B8C00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4c3a1de3-d43a-31c8-a5e1-e533ce7a9e42.roa
Signing time:             Thu 01 Oct 2026 15:05:11 +0000
ROA not before:           Thu 01 Oct 2026 15:05:11 +0000
ROA not after:            Wed 30 Dec 2026 16:05:11 +0000
asID:                     22974
IP address blocks:        47.44.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5b:d5:ff:7a:11:8e:70:36:fa:4b:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  1 15:05:11 2026 GMT
            Not After : Dec 30 16:05:11 2026 GMT
        Subject: CN=90fdf825-c177-4e11-ac0f-850b6099c231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:77:1f:9c:f0:d4:b4:9c:db:3d:c9:03:4d:39:
                    10:4b:ee:47:89:42:09:1d:26:92:c3:20:db:b2:dc:
                    45:ab:6a:9b:82:b4:68:04:c6:25:41:dd:7f:05:d8:
                    18:cd:0f:7c:ce:30:5b:a8:09:ef:cc:06:6b:13:0a:
                    a8:fc:7e:37:7e:51:1b:d5:54:ff:3e:9a:88:25:56:
                    c0:c6:7a:27:45:5d:1a:60:63:27:39:3f:40:98:90:
                    32:81:22:91:1e:e8:a3:db:b1:74:4d:05:48:bf:5b:
                    29:51:36:59:da:f6:ca:a9:f2:81:12:c9:ca:3e:93:
                    9a:25:ea:03:da:58:a0:d4:de:c6:55:2e:c1:a5:17:
                    fd:58:27:ae:78:81:91:3d:64:d9:01:6d:4b:60:2c:
                    ac:f4:cb:15:0a:36:02:27:df:ae:66:e6:da:bd:68:
                    25:63:78:14:8c:ac:15:90:58:35:60:22:44:1b:fd:
                    2e:3f:0b:88:8a:57:35:b5:6b:b8:26:fc:f6:8b:ab:
                    dd:05:5f:1a:c2:00:b2:cc:40:b1:1e:a3:1f:5f:ab:
                    ee:91:56:ca:f0:2d:45:f4:a8:7a:13:d8:79:9f:e1:
                    6a:24:84:0b:b4:92:0a:d7:43:2a:47:61:bb:54:a9:
                    b9:f9:9b:19:cd:7e:63:4e:57:4f:5b:3c:e4:7b:91:
                    05:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:3D:83:DF:4D:E0:53:05:62:41:AF:10:1E:72:D7:70:39:28:CC:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4c3a1de3-d43a-31c8-a5e1-e533ce7a9e42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.44.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:08:08:b4:bf:47:e9:41:e0:06:d7:c8:3a:eb:2d:4a:4c:68:
         b2:e0:03:16:fd:8c:30:01:09:3b:fa:8f:cf:0d:79:aa:e1:7d:
         c2:c0:b2:e3:0a:7a:ca:b6:a0:17:6b:ca:62:d5:1f:57:09:e7:
         45:89:6b:5c:f6:ce:66:b4:4e:bf:d9:13:36:02:78:0d:4b:3c:
         66:37:8d:8d:42:e5:d8:80:a5:fd:00:70:4b:f7:0b:1f:9f:d1:
         42:5e:7b:01:87:c0:38:96:4f:af:b3:e7:8e:b7:7f:db:39:76:
         04:0d:22:d7:c6:e5:29:7a:4e:c1:c4:30:90:1a:5a:6e:c1:3b:
         3d:4d:eb:33:3e:d2:8e:67:4a:f6:28:0f:d2:d0:f1:ec:98:a1:
         a1:ff:01:46:08:64:7b:c3:ae:66:aa:d2:50:ab:53:b1:8f:85:
         a3:05:55:b4:70:0f:0e:4b:ac:20:a4:65:96:8f:22:27:d8:fe:
         b2:70:7b:b2:02:17:79:75:fb:78:96:04:cb:e6:fb:f3:d3:29:
         d0:6b:30:99:7e:3b:aa:f4:ce:88:83:03:1f:36:95:fb:5e:a7:
         45:6c:81:9b:d5:df:6d:86:1a:81:9a:cc:60:85:01:39:6a:4b:
         2c:66:b8:37:a4:10:5a:e2:0a:78:67:70:78:92:99:dd:7a:a1:
         b8:0f:74:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:09:26 2026 by rpki-client