Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/a338a8b3-f050-3357-bd4d-4803bdcd3db7.roa
File:                     a338a8b3-f050-3357-bd4d-4803bdcd3db7.roa (raw, json)
Hash identifier:          5rO7Ii3Ysfm420dRETgpfOZJ1t7/HGvwQavUkCLTux4=
Subject key identifier:   4C:4B:10:B1:DB:69:0D:2A:53:DD:23:91:F2:9D:94:F8:C4:6A:96:53
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F4328584DE84B5C4850FADF2D10153340
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/a338a8b3-f050-3357-bd4d-4803bdcd3db7.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     834
IP address blocks:        67.43.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:5c:48:50:fa:df:2d:10:15:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=15b1e1e3-d0d7-48aa-a18a-ab2b97c8e7a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c4:c6:79:ba:5f:ce:e6:4e:b7:fa:3f:0a:11:
                    6c:9d:d7:54:7a:5a:b7:bb:e0:05:ea:09:59:d1:07:
                    df:10:14:b3:01:db:ac:66:5a:e2:70:ae:1b:2d:38:
                    e8:76:4d:05:a8:16:d5:1e:04:9b:72:fc:79:7a:12:
                    92:57:b6:2e:d4:f5:a4:da:3c:23:c9:e8:bc:81:6c:
                    3e:4e:8a:99:1b:ac:8d:85:e0:fb:a9:86:46:fc:21:
                    76:75:69:44:91:da:50:58:26:7f:2d:71:5e:7d:4c:
                    82:17:e4:b5:cc:f9:bd:b1:80:0c:b3:51:87:ab:13:
                    44:95:c1:6f:be:2b:74:c5:0a:48:94:94:df:d9:9d:
                    9c:af:d1:9c:91:d9:ba:4a:14:eb:43:8f:3b:6f:94:
                    11:23:20:2a:82:f5:f0:3d:42:df:8d:33:4c:1e:cd:
                    0a:60:e6:8f:54:6e:0d:09:65:07:6f:81:a1:4d:b6:
                    d3:54:16:34:06:7e:e2:82:f6:a0:06:4a:83:5f:0a:
                    e8:3b:b7:4a:63:f5:7b:3c:c9:89:96:3b:ba:91:51:
                    d8:98:df:60:d2:45:60:75:94:24:c3:6a:d4:9c:86:
                    2d:dc:bd:d7:ec:a8:81:c7:5d:fa:e4:b8:e3:02:78:
                    29:5d:a9:23:7b:bb:9b:96:a2:13:46:a5:00:c4:ef:
                    88:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4B:10:B1:DB:69:0D:2A:53:DD:23:91:F2:9D:94:F8:C4:6A:96:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/a338a8b3-f050-3357-bd4d-4803bdcd3db7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:e1:c9:a0:3c:11:ac:95:08:a2:25:d8:8a:71:0c:89:39:4b:
         7f:55:14:24:f6:3d:dc:11:a3:7b:af:f0:dc:74:87:15:fe:56:
         f3:f4:b5:77:f8:c1:3c:29:0c:94:40:b8:71:14:58:ff:9c:bc:
         e9:db:09:23:08:d6:24:5b:96:d9:4c:2c:cd:12:f7:42:e1:92:
         d6:f6:59:e3:6d:d4:f4:b1:49:a1:26:13:c1:96:8b:67:fe:b3:
         ea:86:87:e0:4f:d2:27:39:de:6c:aa:3d:c6:8e:d7:35:68:56:
         73:06:d9:5c:22:54:f2:6b:b6:5b:a5:a7:2e:80:0d:00:7d:64:
         84:0b:58:46:e6:f2:82:ad:06:8e:7a:e8:13:05:70:45:c7:6c:
         ab:20:48:a2:5e:97:f3:11:30:bd:43:b2:be:61:b2:47:31:29:
         aa:14:8d:10:3c:b0:99:f5:68:23:d9:db:27:36:7a:6b:aa:6b:
         d7:f1:f0:56:b5:ad:b1:0f:1a:a3:57:43:72:c7:cc:1f:45:62:
         f1:0c:2c:c5:2e:d6:4c:83:1f:28:cc:ff:2f:10:90:88:c2:b4:
         da:8d:c0:fd:c5:e1:80:ef:f1:da:5e:bb:18:d0:74:aa:5e:b3:
         c1:ba:70:6d:0d:e7:78:be:7b:d7:d1:ec:b1:0a:75:ab:77:4e:
         c7:64:89:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:04 2026 by rpki-client