Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9204022c-f46f-419c-8180-40b9005a833e/7613a1bf-6c3f-3fb9-90e0-be8473ffb2d1.roa
File:                     7613a1bf-6c3f-3fb9-90e0-be8473ffb2d1.roa (raw, json)
Hash identifier:          nqDARAxxVkcKpmQPMUlBpufMuBcGg9a7NNXJ14KToo4=
Subject key identifier:   81:97:4F:AD:7C:1E:8B:0E:DA:73:27:C3:4B:3A:6B:91:C4:96:52:0E
Certificate issuer:       /CN=9204022c-f46f-419c-8180-40b9005a833e
Certificate serial:       010D0C9F4328584D4D5A58C1776E2F83D8981500
Authority key identifier: 65:8A:C4:93:A9:45:7B:BC:8A:75:0A:F2:F3:08:B4:39:FE:7A:D2:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9204022c-f46f-419c-8180-40b9005a833e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9204022c-f46f-419c-8180-40b9005a833e/7613a1bf-6c3f-3fb9-90e0-be8473ffb2d1.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        72.46.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9204022c-f46f-419c-8180-40b9005a833e/9204022c-f46f-419c-8180-40b9005a833e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9204022c-f46f-419c-8180-40b9005a833e/9204022c-f46f-419c-8180-40b9005a833e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9204022c-f46f-419c-8180-40b9005a833e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:58:c1:77:6e:2f:83:d8:98:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9204022c-f46f-419c-8180-40b9005a833e
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=e5eb4ef6-0bd1-4c0b-b990-d488d5dbb511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:29:aa:f3:ef:21:12:77:f0:d2:79:fa:2b:d9:
                    ab:c5:27:41:5d:08:a9:8e:d8:4c:a6:f9:33:77:72:
                    80:fe:88:52:96:49:d8:19:8f:f8:e7:37:c2:e0:0a:
                    5d:f2:25:af:0b:fe:c7:f0:f1:86:39:21:12:04:5d:
                    9e:15:ce:b2:c5:b1:e2:56:57:a6:83:6d:cb:42:e1:
                    c6:54:30:38:ea:f5:3a:8a:da:c2:16:75:f9:4f:17:
                    21:2c:49:29:4e:27:38:af:65:94:50:2d:00:e0:85:
                    f2:3a:9b:8c:48:23:34:27:b4:af:93:6a:f0:fe:d5:
                    c5:3b:9c:d4:01:ad:ae:c8:08:ad:18:2b:26:ef:7c:
                    2d:54:7b:9f:15:68:4d:9e:a2:65:80:66:a2:a5:d2:
                    cf:dc:95:6c:a6:3b:11:04:7b:2b:c4:68:31:ae:6a:
                    9b:f2:5f:07:75:fa:da:38:15:9a:4d:de:70:53:20:
                    9a:75:76:90:b7:ad:fb:da:f6:41:28:78:d6:5d:ae:
                    00:5a:b2:f4:df:f9:83:38:78:71:57:e3:b1:48:62:
                    03:32:cc:48:80:bb:fa:8a:d2:21:63:5a:ee:42:1b:
                    4a:c4:5d:91:ca:c2:df:9f:b8:8e:81:8e:08:58:e3:
                    e8:cb:8d:73:d1:83:79:ae:0c:fb:a4:56:fa:d1:33:
                    1f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:97:4F:AD:7C:1E:8B:0E:DA:73:27:C3:4B:3A:6B:91:C4:96:52:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9204022c-f46f-419c-8180-40b9005a833e/7613a1bf-6c3f-3fb9-90e0-be8473ffb2d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9204022c-f46f-419c-8180-40b9005a833e/9204022c-f46f-419c-8180-40b9005a833e.crl

            X509v3 Authority Key Identifier:
                keyid:65:8A:C4:93:A9:45:7B:BC:8A:75:0A:F2:F3:08:B4:39:FE:7A:D2:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9204022c-f46f-419c-8180-40b9005a833e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:6f:d8:f0:b7:3a:56:cf:ba:9b:19:d5:fc:0b:f5:b0:96:f2:
         ce:9b:08:54:ea:65:42:85:1e:37:d0:00:28:9b:cc:89:0a:29:
         50:df:44:a4:5c:02:1c:8f:8f:b3:ad:b2:2a:ec:dc:ec:66:a5:
         bc:99:e6:a2:e2:42:27:3a:7f:91:cc:aa:8b:e7:8a:b7:1b:65:
         6a:a4:2f:cb:19:be:70:56:e5:69:65:fc:81:3f:6f:43:b5:18:
         ac:74:06:cd:6c:c3:12:7f:4b:1e:73:30:12:7b:ba:29:db:11:
         92:34:32:12:ff:4c:82:05:96:6b:18:21:03:83:fb:87:2f:b2:
         38:0a:47:10:ba:c8:f4:29:f8:a7:43:3b:14:3a:3f:0a:5d:a2:
         1f:25:33:5e:0a:5e:32:50:2e:f3:67:fe:43:17:79:2a:73:1e:
         5b:2e:a6:b9:d0:8c:b3:f8:34:a7:38:c2:cc:93:1f:f8:7b:e8:
         0f:06:7a:6c:4f:8d:00:22:64:fa:6e:80:b4:2c:d0:8a:db:2c:
         1d:04:30:af:00:69:84:65:db:8d:4c:a1:c1:7c:a3:19:1b:51:
         42:53:da:24:65:d7:4b:7a:eb:88:4b:f7:fc:cd:50:94:dc:b5:
         82:df:1e:72:35:c9:33:0f:e1:7f:89:ff:af:4f:95:14:83:8d:
         ab:d4:4d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:05:36 2026 by rpki-client