Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/776766e9-4416-32c5-b265-712db8496ee1.roa
File:                     776766e9-4416-32c5-b265-712db8496ee1.roa (raw, json)
Hash identifier:          oP15LFmOw3qb0uXzVlXVtGbB4hEgpVoGWitRfi+8BWY=
Subject key identifier:   0F:86:70:77:B9:8D:C7:30:AB:7D:9B:EE:5B:59:19:C7:AB:88:77:9A
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584F4974B238A27882972AFC4120
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/776766e9-4416-32c5-b265-712db8496ee1.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        216.157.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:b2:38:a2:78:82:97:2a:fc:41:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=519cbd4d-5fec-4edf-ab91-1cade7af0e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:49:7e:09:30:fb:4a:c5:68:d1:c1:9b:60:8c:
                    ea:a9:fe:a8:d6:ec:3f:16:7e:4f:7e:0d:1f:40:26:
                    1e:ed:5c:19:12:16:47:73:da:43:12:c1:cb:1e:54:
                    82:55:7c:f4:d4:50:a4:bf:f4:96:e0:86:d4:07:c2:
                    d3:27:a1:98:69:5f:f9:a6:4f:58:4a:fa:47:0f:b7:
                    54:69:47:b2:d4:19:82:24:5d:07:2a:93:35:6e:65:
                    b4:eb:7e:03:fc:de:7f:fd:73:76:73:27:58:22:dd:
                    63:50:02:7d:35:f9:02:0d:b9:fa:c5:86:4b:e3:6c:
                    ef:c1:d9:fe:6d:e9:63:d1:35:15:91:79:9d:c6:89:
                    9c:ab:4c:b9:c3:ae:bf:e0:e8:b4:d7:9c:77:fa:de:
                    4d:f5:bc:d9:fa:ca:23:6c:b3:91:70:1c:62:b4:97:
                    d8:53:d6:92:be:93:27:58:af:aa:a5:a1:ed:7e:4f:
                    7c:ac:21:0f:ad:b4:12:2c:8b:6d:4a:3a:5b:a3:1c:
                    ac:20:92:8c:81:ec:0d:4e:f6:72:5c:6c:aa:d0:ed:
                    2a:ce:f8:7e:24:a3:b3:b5:5c:50:88:1c:5c:f5:90:
                    7f:84:38:82:c5:d0:a4:57:32:76:f9:b5:d3:df:79:
                    ad:a2:cb:ce:3d:e9:62:fb:24:16:f2:f4:cf:fc:a2:
                    ff:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:86:70:77:B9:8D:C7:30:AB:7D:9B:EE:5B:59:19:C7:AB:88:77:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/776766e9-4416-32c5-b265-712db8496ee1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.157.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:7b:30:9f:7c:c9:c7:b1:57:41:d9:a3:22:3b:a2:6f:92:ca:
         95:54:ad:7b:8f:59:43:9a:96:23:99:ad:a8:f3:3b:2d:20:15:
         04:8c:07:1f:29:29:30:77:cd:14:54:9f:e1:a4:d2:e8:48:5d:
         25:a0:84:9e:43:fa:8a:13:62:7e:84:b8:17:14:ce:16:71:1d:
         28:3c:ef:c7:2b:ca:2a:34:a7:7b:37:e2:82:b9:a5:47:36:1a:
         2e:63:01:fc:e3:3e:37:03:e9:63:b5:62:07:5d:48:f5:54:64:
         0c:27:a2:38:e1:0c:a1:4a:ee:e5:99:51:98:ad:77:94:33:17:
         c2:90:e0:6a:82:a4:a2:c1:b5:bf:c7:13:df:20:78:48:99:d9:
         2f:2f:bd:5d:11:24:c1:aa:eb:eb:60:56:d3:ca:79:c5:87:60:
         fe:12:94:f5:40:18:4d:82:2d:d7:1f:11:19:4d:98:ad:31:9b:
         92:7d:d8:e1:6b:c8:83:cc:86:ca:fc:9e:7a:c4:04:ec:98:ea:
         6b:1e:58:d6:70:4c:fe:7c:cc:c5:d0:dc:83:cf:9e:50:c5:34:
         a0:81:a7:9d:a8:56:41:f2:6a:b7:a8:39:74:22:9a:59:bf:4e:
         5d:ae:23:1f:cc:0b:40:23:e9:9e:77:ed:a4:c4:fe:0d:fa:1b:
         ee:6e:c8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:08:55 2026 by rpki-client