Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/b68e9020-6e68-366a-953a-6c5c8fcd17f1.roa
File:                     b68e9020-6e68-366a-953a-6c5c8fcd17f1.roa (raw, json)
Hash identifier:          0k9jyN8fDYRX5c95zLHqPz1gHmYOQC8dYcalPqZaLO0=
Subject key identifier:   50:FB:C5:FF:63:02:BD:54:7E:F5:21:61:FA:CF:44:24:28:5E:9E:6D
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F4328584E9A7FD25073E79652C39D4300
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/b68e9020-6e68-366a-953a-6c5c8fcd17f1.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     7992
IP address blocks:        45.78.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:d2:50:73:e7:96:52:c3:9d:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=ef377432-a34b-46ff-ba39-86905104fc8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:95:5f:3b:27:16:13:99:46:36:9e:39:5d:59:
                    dc:34:1c:c1:74:9c:97:92:f7:b1:66:5b:74:5e:ed:
                    af:93:13:8b:aa:9b:ed:d5:2f:f4:14:e1:44:c3:3f:
                    dd:3d:9d:7e:aa:0f:f0:3b:5c:5d:a1:d3:61:1e:04:
                    1a:25:29:71:8f:70:e5:f1:4b:a6:4e:93:74:be:c5:
                    08:73:4e:a5:c2:dc:15:a7:2b:88:2f:df:26:2a:12:
                    de:8d:bb:8b:49:05:08:26:a5:3d:e3:7f:29:31:ef:
                    ae:4f:5f:a3:ac:80:76:67:1b:77:d0:66:fe:df:cb:
                    c1:e8:dc:32:98:8a:df:00:b3:ce:b8:68:07:f8:6b:
                    5d:b8:8d:fd:7b:73:b9:1e:e0:84:7d:80:f7:7e:2b:
                    ea:24:9f:eb:ff:d0:d9:8f:b7:f2:8c:ad:8a:1a:4b:
                    91:98:ea:9e:1a:5b:58:f3:4d:a9:e9:5b:ca:f3:57:
                    15:96:81:38:b9:cb:14:37:3f:3a:7e:56:9a:48:fd:
                    c8:f7:69:01:06:21:47:21:7b:97:84:ed:d3:c8:c7:
                    22:b7:30:5e:63:ad:c6:aa:3f:c1:be:39:76:cf:6b:
                    df:fa:e3:d6:a0:d6:41:b0:84:a8:51:e2:8a:18:61:
                    af:9e:50:d8:19:34:d8:e3:50:cd:b7:6a:e6:7a:49:
                    06:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FB:C5:FF:63:02:BD:54:7E:F5:21:61:FA:CF:44:24:28:5E:9E:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/b68e9020-6e68-366a-953a-6c5c8fcd17f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.78.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:ea:58:9a:05:b9:0c:99:05:c0:c4:b4:4a:e8:97:8a:40:9f:
         8a:f4:1a:11:25:a0:1c:e3:b6:12:3e:6f:65:55:9b:e7:f2:85:
         d6:b1:55:3f:5b:a6:b9:8a:4d:c4:3b:0a:5b:3d:ba:90:d8:df:
         5a:e5:bc:1e:46:53:e2:84:91:7c:83:f0:fe:22:5d:95:cd:30:
         f2:a9:18:12:cf:cb:92:99:41:5b:01:48:9b:3b:1b:c6:48:e1:
         29:9f:88:ea:0e:9c:c6:bb:12:03:c8:43:1e:3c:a7:f2:e0:af:
         27:68:fd:5e:7f:9e:86:74:59:cd:55:1b:b7:45:7a:04:0b:4c:
         27:ba:3d:37:f8:f6:5e:96:d2:70:8e:ee:bf:92:71:0f:5c:53:
         f1:39:24:8b:53:bd:64:21:7d:fc:1c:ae:8f:07:b3:ca:24:ec:
         18:5b:52:e2:58:df:a5:14:0c:9d:61:44:34:fe:d6:0e:9c:ba:
         d8:44:18:21:8e:7e:6a:03:13:40:54:41:62:fb:9f:51:f3:1f:
         58:41:0e:1b:23:8f:12:bd:bb:07:27:9e:1d:80:9d:e3:d8:b2:
         67:e2:72:15:9c:50:c9:42:9c:2c:84:e8:f6:b5:73:2f:2d:4a:
         de:83:f0:fe:3a:48:8f:39:77:3d:3e:9c:e3:03:b6:36:75:6a:
         bd:4f:6c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:49:05 2026 by rpki-client