Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eef79eb9-dd0c-3df6-b62e-d886c7165a46.roa
File:                     eef79eb9-dd0c-3df6-b62e-d886c7165a46.roa (raw, json)
Hash identifier:          zYzwapVTTOswcKTWE64qgC0X8gm6EyUfoie3HQJF4G4=
Subject key identifier:   EE:DC:A3:21:AD:81:59:D2:98:86:3D:07:5A:75:DA:75:D8:43:57:29
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584F655DF6EB6C57E0596A054A00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eef79eb9-dd0c-3df6-b62e-d886c7165a46.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     40294
IP address blocks:        47.43.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:f6:eb:6c:57:e0:59:6a:05:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=29604422-2bb9-4c47-8ab1-c6186926727e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a4:e4:63:78:bc:7b:77:b3:37:33:be:b8:39:
                    75:95:7e:59:db:27:96:13:21:18:a5:18:a1:cf:7f:
                    a1:37:7c:e1:7a:9e:be:11:3e:37:77:f1:b8:f1:d4:
                    a9:d2:0d:17:83:db:78:8d:92:36:f0:6f:03:b3:15:
                    e8:04:c0:c1:c7:df:ab:3b:2c:e5:96:ed:93:62:84:
                    45:05:5f:6d:5d:91:aa:01:26:45:cc:a3:df:62:12:
                    b8:aa:5c:68:00:ea:e5:75:ec:05:ea:d1:56:86:a9:
                    97:01:26:dc:52:9c:c5:8c:54:34:31:78:a5:c0:4a:
                    ba:28:4f:58:a8:7a:73:fb:8a:a8:01:81:20:0a:01:
                    24:5a:fa:be:80:7c:14:49:7d:6d:f2:43:67:fb:ed:
                    f5:1b:d9:bd:bf:a5:cf:e8:d4:4b:c4:97:b4:02:f2:
                    dd:74:24:be:9e:d4:53:79:2d:4a:e4:2b:c0:32:74:
                    ac:50:27:79:3d:89:5e:73:b9:43:84:25:66:b2:14:
                    97:b9:3c:e5:16:5f:75:7d:21:65:10:33:60:fe:b7:
                    5f:f8:0d:d9:d6:90:6d:fc:ce:d2:21:c1:0d:c0:2a:
                    f1:ff:d5:2a:71:1e:89:99:d9:4d:29:c1:33:6f:1d:
                    08:63:34:23:31:66:05:ef:d2:7e:f3:a6:b2:ff:83:
                    24:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DC:A3:21:AD:81:59:D2:98:86:3D:07:5A:75:DA:75:D8:43:57:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/eef79eb9-dd0c-3df6-b62e-d886c7165a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.43.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:00:d6:f9:19:38:7d:7f:2e:e8:ea:c6:e5:f6:b7:a9:58:5e:
         45:a7:a1:20:2f:9b:29:3d:98:96:14:9c:8c:07:42:03:b5:6a:
         6b:51:99:50:10:5d:11:89:80:81:e7:e4:4f:9c:30:b8:fc:e8:
         5b:f6:21:04:59:8e:48:48:21:0e:23:d8:89:61:82:63:79:9e:
         52:61:b7:39:a3:70:8a:3a:48:c6:cc:b9:8a:05:ec:d6:10:2c:
         e3:19:90:df:06:82:da:14:01:ec:33:e5:75:ef:6f:90:71:a9:
         10:e1:75:35:af:57:99:41:7c:f8:23:ec:0e:5e:77:05:01:2b:
         71:49:2f:3b:ca:09:56:98:a1:64:7a:49:b7:64:4d:8b:3b:75:
         f7:d8:81:87:b6:f3:9a:f6:58:2a:e6:48:9b:d7:bd:00:02:20:
         34:bc:d7:68:16:29:3d:a0:b2:d8:f1:59:df:77:d9:a0:8e:97:
         09:87:55:31:7b:21:41:f1:21:46:06:5a:37:c0:6d:78:cc:7a:
         b8:d4:b4:e3:ef:a3:65:6b:a2:70:49:16:4a:27:78:b7:9e:ee:
         04:ec:14:b0:1e:e3:3f:d0:09:e2:54:bf:c1:d0:47:5d:5f:85:
         6b:e3:33:51:b3:a5:1f:9d:37:cc:70:71:d6:34:20:a0:09:ae:
         8d:ae:ab:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 14:59:11 2026 by rpki-client