Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/a45f74c0-9fe9-39a1-8ec1-86c28d5b5c37.roa
File:                     a45f74c0-9fe9-39a1-8ec1-86c28d5b5c37.roa (raw, json)
Hash identifier:          Ulb4856hSK8oOdHUSn0n16Jtos/0gUVP2LmMSWEemHU=
Subject key identifier:   F4:F1:85:2F:73:8D:A0:B4:1C:4D:8A:0C:F2:C6:ED:C3:25:9B:FD:F9
Certificate issuer:       /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
Certificate serial:       010D0C9F4328584EDC91F161F9074F76E85F5940
Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/a45f74c0-9fe9-39a1-8ec1-86c28d5b5c37.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     11377
IP address blocks:        149.72.100.0/23 maxlen: 23
                          149.72.102.0/23 maxlen: 23
                          149.72.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:f1:61:f9:07:4f:76:e8:5f:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=d79045e7-c659-4de7-8a23-50aee5e7cf95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:12:69:19:c9:3f:d6:93:94:43:b2:c4:63:f2:
                    02:c2:9d:f9:b7:ec:d6:f3:47:f8:85:32:f8:ef:a9:
                    ac:d2:2e:31:7f:e8:82:15:37:d8:a2:3d:9b:68:3a:
                    fc:f9:fc:0c:36:2a:ad:45:85:d3:28:d0:96:d7:f1:
                    a7:54:a6:e8:e8:f8:87:2b:16:86:ff:fd:7a:87:7e:
                    66:23:7b:89:58:eb:e7:a8:8d:21:05:be:07:e8:cf:
                    1b:1a:cc:dd:f7:03:ae:ab:6c:fc:f4:0e:59:5b:06:
                    4a:9d:45:60:7b:6c:96:5c:94:1c:9c:c8:d6:8c:5b:
                    64:29:ee:56:ff:07:e4:43:30:fe:62:a3:40:0f:85:
                    46:76:ed:36:d1:37:39:08:be:16:39:27:7e:d5:7c:
                    af:dd:06:31:4c:37:d7:09:ef:4d:a7:30:d5:6e:c8:
                    8d:b1:bf:71:9e:12:fb:08:3d:5d:75:de:32:c5:7f:
                    3e:f5:b5:bd:dc:cc:b6:97:aa:bf:81:a3:f0:3d:44:
                    0d:3b:ba:6c:94:ac:8f:29:01:b7:bc:c1:1d:ce:40:
                    fe:a0:12:20:d7:41:4d:11:c4:76:c5:93:80:03:8b:
                    c5:a5:92:c8:fc:81:8d:18:58:dd:ae:8d:f7:e7:9b:
                    6b:fd:90:9c:a9:e8:6c:17:d2:32:e5:fb:ba:50:65:
                    7c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F1:85:2F:73:8D:A0:B4:1C:4D:8A:0C:F2:C6:ED:C3:25:9B:FD:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/a45f74c0-9fe9-39a1-8ec1-86c28d5b5c37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl

            X509v3 Authority Key Identifier:
                keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.72.100.0-149.72.105.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:ec:ce:d6:2d:6b:7b:9d:72:50:e7:fd:97:6c:1d:2e:43:f0:
         63:72:d4:c8:c0:31:24:72:2e:9e:0e:52:f6:2b:47:b2:3c:85:
         f1:e7:25:9a:83:b0:35:4f:ea:a4:86:e1:79:59:c6:15:4e:b0:
         af:85:a6:66:3b:42:76:2f:0d:04:10:6a:ef:92:2a:03:0c:05:
         16:e0:2c:1d:d5:2f:4a:73:31:69:c3:9e:61:f8:d2:bb:50:3e:
         dc:67:76:b0:36:3c:11:83:c9:d4:55:5c:5c:71:4d:5b:28:88:
         49:58:b8:65:a9:fb:f6:21:b9:a6:23:9e:b3:15:02:ff:ce:16:
         30:ca:8e:cb:08:b6:54:0b:5f:04:53:da:42:67:61:44:c4:0e:
         f8:69:fb:f4:df:c6:f3:5c:27:0b:08:ed:3f:3b:9b:b0:c6:f8:
         da:d4:34:46:cb:d6:6d:a7:7a:b7:b9:12:c7:15:00:41:8c:f7:
         67:37:70:f1:fe:62:33:bc:17:9e:b0:3e:08:cf:07:30:7b:07:
         4c:d7:e5:2e:e4:bf:c1:79:bf:1b:d9:62:10:89:ea:60:ac:22:
         f2:69:de:a4:a9:ec:30:50:8a:28:6d:f5:b8:2b:ce:48:91:bc:
         29:fb:0b:23:7c:60:dc:01:39:39:54:b8:41:8f:b6:44:4d:95:
         6c:b7:d2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 22:08:47 2026 by rpki-client