Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/ac3fec89-04e7-3a25-9b13-974f8fc3819b.roa
File:                     ac3fec89-04e7-3a25-9b13-974f8fc3819b.roa (raw, json)
Hash identifier:          eP8Z1D9daO8men4Uvuek2dtn/lBOBrmDr9tW3BqFPBc=
Subject key identifier:   95:AA:3C:6A:1F:F8:74:CD:C1:7D:57:33:E4:25:67:E0:8A:B3:9B:73
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F4328584E4F7EF6482BB28C8198E39600
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/ac3fec89-04e7-3a25-9b13-974f8fc3819b.roa
Signing time:             Sat 27 Jun 2026 12:13:11 +0000
ROA not before:           Sat 27 Jun 2026 12:13:11 +0000
ROA not after:            Fri 25 Sep 2026 12:13:11 +0000
asID:                     834
IP address blocks:        67.43.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4f:7e:f6:48:2b:b2:8c:81:98:e3:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Jun 27 12:13:11 2026 GMT
            Not After : Sep 25 12:13:11 2026 GMT
        Subject: CN=555bee82-b49f-42d6-a132-f1f3d4a74efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:70:7b:d3:36:e3:f1:43:60:86:4a:48:78:b7:
                    da:f7:93:de:42:bd:f0:71:fe:0c:74:fa:6b:04:d9:
                    05:b1:48:d3:db:9b:3c:b3:fb:28:a5:0a:f3:a1:6d:
                    3b:b5:e9:83:cf:ca:ee:9f:78:8e:45:49:ed:73:8d:
                    5c:b8:ff:41:f9:06:0b:ef:6c:30:28:08:f3:89:3a:
                    f8:e6:9b:43:c5:f9:aa:c6:4e:a1:47:a5:3a:dd:2f:
                    d9:84:b8:b3:e5:bf:9b:fc:02:d0:cb:b9:da:29:f2:
                    0f:28:6c:5e:14:19:9d:33:42:81:ea:c2:ed:a9:5f:
                    6f:f3:22:ff:49:ad:2d:02:77:b8:f2:4f:d4:00:96:
                    0f:51:fa:58:52:a1:c4:24:50:11:6b:b9:c3:11:93:
                    3a:07:c5:d5:86:38:c3:1f:3a:97:25:b9:10:1d:a8:
                    41:65:73:d6:d3:53:e2:e9:f5:6a:78:d1:42:55:2c:
                    ca:53:43:3c:36:af:7c:16:c4:0a:09:0f:f6:41:88:
                    86:ed:7f:ac:b6:be:29:a3:5e:3a:e7:e3:75:d3:97:
                    46:ca:0c:b6:1a:3e:06:c2:ca:69:7a:61:07:ad:82:
                    61:13:85:90:81:a4:34:f4:19:a2:9a:ea:60:23:63:
                    5d:b1:16:55:ff:b6:66:9e:0c:7a:9b:cf:65:2e:02:
                    e9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AA:3C:6A:1F:F8:74:CD:C1:7D:57:33:E4:25:67:E0:8A:B3:9B:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/ac3fec89-04e7-3a25-9b13-974f8fc3819b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:af:e4:eb:b2:58:ae:0b:f9:80:ad:8a:26:f5:0f:e9:25:39:
         4f:ae:28:5f:7b:27:d6:e6:0a:e9:c1:99:da:be:61:b6:33:79:
         46:96:1c:da:b0:92:ba:ab:c5:5e:bd:85:4a:d9:be:ea:cc:e7:
         09:a6:5d:02:21:9c:55:98:89:b2:04:a8:ca:1a:69:17:8a:e2:
         2d:87:10:24:34:8c:ca:3e:34:ab:5a:dd:e8:85:04:5e:1c:1b:
         d6:a2:12:83:2f:29:00:6e:4b:86:25:82:ab:94:83:7a:11:3f:
         83:bb:6b:3c:fa:35:15:1f:48:2f:55:de:79:0f:7d:df:0d:60:
         4a:f3:90:65:38:78:a5:52:aa:fe:3e:54:2d:6d:ed:23:a2:b2:
         73:29:65:c0:4c:75:31:bf:6b:de:86:c9:41:ff:70:67:02:77:
         9b:de:a9:9b:5b:80:aa:56:d1:23:26:33:91:4c:eb:96:61:86:
         9c:10:75:5c:64:c3:95:fd:73:15:50:09:32:51:f9:c1:e1:c5:
         82:05:97:48:67:b5:5d:f0:32:7f:da:e4:61:91:52:6a:3c:22:
         f5:78:bd:fe:89:69:c1:24:f7:8f:10:2f:8a:5c:18:a0:53:ab:
         03:0b:6a:37:ab:7a:70:9e:23:76:9d:1f:54:29:55:65:5c:a9:
         87:ed:27:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5PfvZIK7KMgZjjlgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli
NGU1MB4XDTI2MDYyNzEyMTMxMVoXDTI2MDkyNTEyMTMxMVowLzEtMCsGA1UEAxMk
NTU1YmVlODItYjQ5Zi00MmQ2LWExMzItZjFmM2Q0YTc0ZWZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHB70zbj8UNghkpIeLfa95PeQr3wcf4MdPpr
BNkFsUjT25s8s/sopQrzoW07temDz8run3iORUntc41cuP9B+QYL72wwKAjziTr4
5ptDxfmqxk6hR6U63S/ZhLiz5b+b/ALQy7naKfIPKGxeFBmdM0KB6sLtqV9v8yL/
Sa0tAne48k/UAJYPUfpYUqHEJFARa7nDEZM6B8XVhjjDHzqXJbkQHahBZXPW01Pi
6fVqeNFCVSzKU0M8Nq98FsQKCQ/2QYiG7X+str4po1465+N105dGygy2Gj4Gwspp
emEHrYJhE4WQgaQ09BmimupgI2NdsRZV/7Zmngx6m89lLgLpmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJWqPGof+HTNwX1XM+QlZ+CKs5tzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk
NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvYWMzZmVjODktMDRlNy0z
YTI1LTliMTMtOTc0ZjhmYzM4MTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3
ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5
YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3
N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQyspMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAECv5OuyWK4L+YCtiib1D+klOU+uKF97J9bmCunBmdq+YbYzeUaWHNqw
krqrxV69hUrZvurM5wmmXQIhnFWYibIEqMoaaReK4i2HECQ0jMo+NKta3eiFBF4c
G9aiEoMvKQBuS4YlgquUg3oRP4O7azz6NRUfSC9V3nkPfd8NYErzkGU4eKVSqv4+
VC1t7SOisnMpZcBMdTG/a96GyUH/cGcCd5veqZtbgKpW0SMmM5FM65ZhhpwQdVxk
w5X9cxVQCTJR+cHhxYIFl0hntV3wMn/a5GGRUmo8IvV4vf6JacEk948QL4pcGKBT
qwMLajerenCeI3adH1QpVWVcqYftJ70=
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:00:07 2026 by rpki-client