Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/67ab703c-e7ec-38fe-8ad2-24afc786f1c6.roa
File:                     67ab703c-e7ec-38fe-8ad2-24afc786f1c6.roa (raw, json)
Hash identifier:          mSwHcS/QARVhrqk3PoBi/RB8n231iZaIigB40hTxr50=
Subject key identifier:   30:76:26:5A:20:8E:11:D7:CF:30:57:FA:38:24:F5:8C:26:77:1A:CF
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F4328584D746FBED26F1E00DFFE7B2B00
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/67ab703c-e7ec-38fe-8ad2-24afc786f1c6.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     3356
IP address blocks:        67.43.36.0/23 maxlen: 24
                          67.43.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:be:d2:6f:1e:00:df:fe:7b:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=083411bc-59bf-4557-bdba-949698185db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:39:f5:07:70:94:12:b9:c0:dc:53:c4:fe:cc:
                    da:4d:08:6b:12:79:a6:59:d6:76:61:ec:a5:6e:74:
                    86:08:11:74:fe:9f:fd:48:40:cb:b8:17:fa:15:af:
                    30:56:19:a9:bd:cb:59:55:55:9a:88:ff:6c:15:52:
                    69:af:04:ae:88:d0:01:62:89:22:da:54:7b:5e:b1:
                    18:1d:d8:d0:b2:af:8e:c1:c4:67:e3:82:85:74:ad:
                    6e:bf:b9:c6:61:99:50:8c:c1:73:ab:25:08:5c:97:
                    29:c7:6b:13:a2:9f:28:e2:b7:e4:bb:34:e3:9b:4b:
                    b2:0a:73:35:0d:6c:7d:32:60:fc:dc:49:62:6b:93:
                    c5:7f:3c:ca:ff:fa:0c:dc:cd:1c:09:c6:89:1c:7e:
                    6b:18:81:55:ed:4c:18:6f:65:54:98:19:b6:27:59:
                    26:3a:39:14:1e:15:fb:7c:9e:41:7e:94:8b:da:8f:
                    e2:ee:db:d7:2a:db:8e:4e:4f:73:3b:a9:3a:83:6d:
                    f3:90:5b:66:e7:19:62:c1:64:80:08:4f:54:db:c3:
                    9f:b9:1e:fd:4c:e6:64:25:21:29:4a:d5:4b:83:cf:
                    a6:6d:1e:fa:54:83:c9:d9:0d:a5:b8:ff:73:23:40:
                    c5:62:59:b7:35:19:79:77:b7:a6:f9:a4:6c:b2:6d:
                    35:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:76:26:5A:20:8E:11:D7:CF:30:57:FA:38:24:F5:8C:26:77:1A:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/67ab703c-e7ec-38fe-8ad2-24afc786f1c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.36.0/23
                  67.43.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:42:b3:ed:44:80:06:4c:bd:b5:1e:f9:ee:9f:3c:f8:bc:8c:
         11:b0:d5:13:22:6f:c5:59:03:40:e3:5f:33:0f:82:40:08:cc:
         82:83:4a:f6:0b:c2:d9:03:7f:bf:2e:ab:5e:57:8a:44:b4:e0:
         ae:73:f4:77:54:d7:9f:fe:fc:09:60:60:98:24:d4:be:bb:a9:
         e5:cc:c4:45:f2:25:d3:f1:a7:eb:98:1a:ae:2b:5d:b7:40:d1:
         0f:b4:7e:89:a3:07:fa:60:a5:79:12:3f:fb:5f:d2:41:d4:f6:
         85:ad:a9:dd:42:c2:0e:fa:59:49:55:d0:4f:b9:d0:09:3f:a7:
         ab:f1:ea:99:7b:3f:d8:de:e0:45:82:35:b9:1b:15:6a:32:4a:
         1d:39:f2:f4:ed:4e:51:6b:32:d5:e2:ae:be:d5:d6:c0:d9:4b:
         a4:dc:b2:e8:e8:ba:d9:1d:4a:75:7c:36:22:ff:b0:73:03:0e:
         d2:58:c1:4c:69:1f:50:8c:ba:2f:b8:43:11:5c:13:a5:c2:c2:
         99:e5:3b:1e:45:a6:78:b9:d1:67:7b:54:78:c3:f7:53:ad:94:
         03:a7:c2:ee:79:39:a2:d9:50:ae:5b:03:5f:00:41:cd:6c:9d:
         a9:17:71:a8:d9:6a:43:78:cd:eb:61:bc:87:e5:fa:29:90:85:
         ca:0f:5d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:41 2026 by rpki-client