Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/05ff1344-8bcf-3dc8-a7bd-df5e47994d22.roa
File:                     05ff1344-8bcf-3dc8-a7bd-df5e47994d22.roa (raw, json)
Hash identifier:          gQHb+MRUbLpTC/FnjIJJVvdjJkQBgggMEWpC4q8mrDg=
Subject key identifier:   C5:7F:AB:DF:6D:33:A2:7B:87:39:0F:75:9B:DC:79:BF:6A:56:B1:38
Certificate issuer:       /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial:       010D0C9F4328584D40CA3AE625B949539C613A80
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/05ff1344-8bcf-3dc8-a7bd-df5e47994d22.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     33442
IP address blocks:        157.235.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:3a:e6:25:b9:49:53:9c:61:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=da5fe887-2c83-4c2a-b787-fc63ba842632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:01:4e:21:67:98:f7:53:f0:4e:15:ef:9a:27:
                    e7:0a:da:4f:4d:6e:6b:0a:4e:12:07:30:55:7e:16:
                    67:f5:35:bc:cf:f3:d9:3a:78:94:ac:99:74:85:a6:
                    28:1a:c9:cf:87:cd:9a:f3:1b:ed:30:b2:a6:62:e4:
                    91:38:da:22:e1:e9:15:a3:89:dc:d3:31:6e:73:eb:
                    bb:b5:89:bf:97:95:0d:52:f7:02:81:d4:7c:d3:a8:
                    cd:d1:a5:a8:71:90:eb:bd:77:b5:9d:46:d7:a6:bd:
                    2c:76:fe:3e:19:67:8b:5c:5d:10:6e:5b:e1:0b:46:
                    98:83:04:9a:af:a6:26:ce:c3:a1:a8:fb:93:53:27:
                    d3:4d:55:f1:37:92:42:84:2e:4e:c7:e5:9d:04:ea:
                    ba:ed:7f:eb:a2:a5:4b:79:bf:fd:21:6c:56:8c:8a:
                    51:7f:5e:52:60:8e:18:69:d2:7c:c4:95:18:3a:3b:
                    93:df:79:39:23:93:96:89:ab:7b:5a:9b:a5:78:c7:
                    bc:1c:a2:46:35:63:f5:d0:0f:91:db:77:a4:32:ba:
                    7f:f3:e1:89:62:d6:d9:c5:bd:72:d7:bb:78:26:ba:
                    09:f4:a7:06:df:29:0e:0f:c5:56:f5:34:84:a8:9d:
                    56:77:f0:f0:ef:7b:db:8a:53:3a:15:74:f3:fa:5c:
                    04:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:7F:AB:DF:6D:33:A2:7B:87:39:0F:75:9B:DC:79:BF:6A:56:B1:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/05ff1344-8bcf-3dc8-a7bd-df5e47994d22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl

            X509v3 Authority Key Identifier:
                keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.235.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:4c:b3:8e:ac:1f:83:65:c5:4f:4c:cf:77:22:ea:2e:a6:c6:
         19:2b:8e:8d:5b:7c:58:cd:91:ea:60:22:bf:9d:ee:97:e1:0c:
         d3:03:3a:b3:4e:97:e1:8b:2d:92:8a:d8:b5:62:56:27:b1:45:
         96:62:68:36:92:1d:96:82:77:29:69:0a:5f:3f:bc:03:bd:bc:
         9d:54:9a:56:ab:e0:6d:ba:ea:5a:86:08:bf:81:42:de:d3:b4:
         1d:09:50:13:1b:f4:84:0f:e3:39:90:62:46:44:5e:26:8d:28:
         28:ba:d5:78:0b:ca:1a:eb:68:38:45:aa:1f:27:8b:7c:7b:76:
         b3:c9:5a:5c:eb:12:f2:6f:7d:92:64:28:f2:99:fa:e0:ce:84:
         7c:d2:9a:d0:d4:12:aa:02:2d:8e:c0:fe:8c:2f:9c:04:a4:1a:
         ec:85:06:c7:40:8c:d5:09:5c:4a:ce:36:30:07:0c:2c:c8:30:
         46:9d:3b:5d:62:ee:47:89:1f:e9:85:fb:4b:e5:03:1d:3e:a7:
         07:67:dc:20:0b:ac:86:df:65:be:d3:2d:79:96:3c:f4:b5:94:
         fa:eb:31:c9:16:29:38:c4:3a:00:6c:fc:99:29:80:d1:c7:81:
         75:10:88:ff:f8:88:9e:cd:21:90:ac:fe:a7:dc:e1:7f:92:7d:
         e3:08:f2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:53 2026 by rpki-client