Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8c4492b2-ed29-382c-a1f4-c7b700f6b484.roa
File:                     8c4492b2-ed29-382c-a1f4-c7b700f6b484.roa (raw, json)
Hash identifier:          diFMl7z1nS/zNiRZXv/Ms9qbNVQopiFHUpXMd8M3PPg=
Subject key identifier:   77:EB:5C:D0:4A:4E:BA:A6:70:2A:3B:31:1E:98:41:83:75:CE:3E:2B
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F3CE28D6BE7FE86193FCBDD80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8c4492b2-ed29-382c-a1f4-c7b700f6b484.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     22516
IP address blocks:        97.69.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:8d:6b:e7:fe:86:19:3f:cb:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=79e1c620-1989-417f-8ad4-e13d5be6f648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e2:26:a6:02:e5:6e:08:b9:2d:df:55:29:44:
                    77:22:eb:be:0e:fb:8e:d3:0d:69:ff:1e:fa:27:60:
                    2a:0e:0b:40:8a:33:f7:a7:3f:c6:80:ae:b1:aa:72:
                    a0:b9:bd:2d:14:db:c5:4c:4e:02:2d:11:4e:0a:59:
                    22:21:89:28:70:04:aa:fe:43:55:c8:2e:01:d3:e0:
                    1b:74:16:af:42:62:ba:4f:d9:a2:0d:a7:98:3d:d2:
                    d1:4f:5b:79:95:76:bd:5c:3f:f2:66:e2:ab:fd:70:
                    1c:a1:ac:06:ca:4a:28:1e:43:a9:aa:ed:dd:72:ab:
                    62:66:02:9c:96:7d:1f:26:57:5b:0d:88:2d:b0:c0:
                    45:9a:f7:87:71:28:c0:5a:66:af:00:5f:0b:a3:df:
                    6b:af:95:bb:a2:14:a2:c5:e5:09:28:f0:65:73:fd:
                    08:f7:07:ab:e2:d8:c7:86:bb:09:2d:6c:dd:9d:72:
                    c8:40:9b:51:a5:54:7e:2f:fe:44:ba:88:7a:6e:a4:
                    05:6e:8d:b9:13:67:67:dc:15:89:5f:5e:e0:3d:0c:
                    58:3c:d4:cf:c7:7b:b5:77:4d:37:14:0d:db:16:a1:
                    11:3a:e0:a5:53:f9:8c:4c:c6:63:00:37:24:b2:cc:
                    69:53:d7:50:fb:c7:93:18:76:0a:74:b7:84:e0:fc:
                    85:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EB:5C:D0:4A:4E:BA:A6:70:2A:3B:31:1E:98:41:83:75:CE:3E:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8c4492b2-ed29-382c-a1f4-c7b700f6b484.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.69.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:44:b1:a1:42:3f:93:cd:14:23:da:58:02:fc:c6:48:c3:79:
         66:69:7e:38:dc:9b:0c:6c:03:67:a6:08:7c:e3:3a:08:93:ff:
         1e:6b:93:84:29:ca:41:f0:43:f3:95:34:76:e9:1a:15:23:16:
         ed:81:b5:6d:07:55:28:7b:ea:a7:fa:bc:64:85:05:0d:32:cb:
         d6:d6:cd:ad:3d:14:59:f6:19:e4:fa:c1:c3:61:c3:d1:7b:50:
         7d:07:4f:82:f7:d5:89:83:56:3e:1f:9f:7a:83:08:ff:5d:a5:
         60:21:b7:55:18:1d:de:fc:01:f8:eb:05:b1:f7:10:7f:b0:dd:
         7a:ad:25:41:77:a9:dd:c2:92:b4:fe:07:02:f4:0d:19:53:37:
         0a:79:96:3a:1d:fe:ff:c6:89:b0:ca:be:52:e6:b4:ea:bd:63:
         79:03:47:8a:0e:7e:2f:35:2d:01:fd:1d:4f:c0:aa:97:ad:c3:
         80:8c:ef:01:c7:07:86:9c:ab:6a:b3:d7:27:d4:ad:cc:d4:fa:
         67:bf:63:56:ba:ac:07:94:48:20:c1:6a:e8:e3:51:77:35:dc:
         6d:68:2e:66:2d:bb:3e:52:12:6f:70:4d:e6:f6:54:7c:8e:24:
         b0:d1:4b:bf:c1:69:47:f6:4c:4b:ce:86:61:a7:ba:61:5e:54:
         69:5e:f2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:43:59 2026 by rpki-client