Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/42377806-4a77-3098-8fd4-c6b8e4389e40.roa
File:                     42377806-4a77-3098-8fd4-c6b8e4389e40.roa (raw, json)
Hash identifier:          k6xEhne0vvRAm3JX6bl0/qVIk4NcFem6cxBljp3/3OU=
Subject key identifier:   5B:5B:25:C2:63:45:A2:17:3E:C5:E6:62:75:56:72:F9:A3:7B:A3:A9
Certificate issuer:       /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial:       010D0C9F4328584F02421DCFF5DB41EF92F01500
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/42377806-4a77-3098-8fd4-c6b8e4389e40.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     5050
IP address blocks:        147.73.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:1d:cf:f5:db:41:ef:92:f0:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=648c6f85-0411-4c41-ad14-765e6853da91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:03:fd:89:a6:f6:61:e6:9c:4c:77:89:ff:8f:
                    21:03:d8:28:96:f5:11:e1:0a:40:fb:e9:28:2b:00:
                    a2:26:3b:03:2e:81:1b:68:b6:0d:1d:db:6d:bf:da:
                    1c:1a:7a:65:ad:7a:55:24:b3:2e:c3:c6:8e:6c:6c:
                    4c:46:9f:9b:c1:bb:7b:79:d7:f3:7c:a1:be:ac:00:
                    f5:3e:8f:7f:9f:1a:cc:86:92:5f:82:eb:ac:a5:bc:
                    71:8c:4b:1f:ba:a5:b2:30:ee:b7:2b:e0:4f:3e:46:
                    13:a9:41:50:e8:70:af:f7:42:65:5f:51:d5:e7:9b:
                    1e:e1:47:d4:e8:58:b1:81:57:d0:e0:14:74:8c:89:
                    6e:2d:a5:0e:57:af:01:5e:a9:84:16:04:3c:5a:69:
                    64:c8:64:6c:54:05:9d:e2:b5:80:4b:56:ea:a5:c6:
                    42:31:01:7c:09:55:bb:ae:7f:76:fe:6c:0e:db:eb:
                    32:5f:2f:ae:cc:42:87:fe:ca:4d:dd:df:fd:33:da:
                    3e:4a:cd:7e:3f:bb:1c:35:a8:b9:a8:18:cc:23:a6:
                    d1:db:f4:27:f6:35:f4:ff:fc:ca:69:cb:46:14:4c:
                    8f:3d:5e:4b:9a:ee:bf:ec:85:88:e1:e8:6e:d8:83:
                    ad:6f:8c:c0:f3:00:08:09:70:30:f2:51:c0:6c:d4:
                    49:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5B:25:C2:63:45:A2:17:3E:C5:E6:62:75:56:72:F9:A3:7B:A3:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/42377806-4a77-3098-8fd4-c6b8e4389e40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl

            X509v3 Authority Key Identifier:
                keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.73.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:c0:9d:9f:28:cf:0a:66:9b:ec:cd:01:a1:8d:c5:e5:76:88:
         03:4e:99:a5:93:54:9b:ee:cc:3d:ad:98:4f:c3:28:b8:ad:06:
         09:06:0f:a8:0e:ac:bf:3b:62:d0:1f:23:08:54:4c:b2:bd:06:
         89:fc:0f:0d:f7:52:3d:92:62:cc:52:1c:a8:f2:70:e7:6c:46:
         97:9b:1d:ea:73:ee:ee:1a:95:0b:f3:51:03:84:e9:d7:1b:0b:
         18:3d:81:8b:3e:00:1d:5c:48:00:d3:bd:5f:e8:c0:36:fc:16:
         fd:7d:ef:5e:b6:be:8d:de:8c:07:90:bb:a6:db:1a:e4:6a:cd:
         d3:51:70:98:c0:32:38:1f:5b:ff:46:36:9a:43:73:11:e9:fa:
         bf:7c:18:49:d4:1e:d9:83:f5:8c:dd:44:21:57:90:1c:71:c0:
         e0:a7:15:a8:a0:38:49:f5:20:0c:c0:ce:6a:ab:47:68:cd:f9:
         de:f3:a5:53:b1:09:22:c0:f0:d2:66:02:85:13:7e:12:9c:c1:
         c2:3d:31:73:68:7a:e4:f7:a1:3c:30:24:13:cc:a9:ca:58:bd:
         ab:c8:97:b8:02:26:c4:c0:b5:dc:98:97:21:4f:8c:00:3c:f9:
         e8:6b:21:63:1a:e3:76:9e:7d:c8:63:f7:7e:8b:84:8d:df:3e:
         7b:03:20:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 23:57:47 2026 by rpki-client