Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/70aa9e99-3ca0-38c7-9e56-0c7576209409.roa
File:                     70aa9e99-3ca0-38c7-9e56-0c7576209409.roa (raw, json)
Hash identifier:          ccvFU+b3P7Cn11nfqfEza4pMEjLjJ+j/m/4f2iJk47s=
Subject key identifier:   37:A3:01:60:BC:F1:75:70:81:11:53:59:13:F9:F2:11:8E:01:93:E0
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584E3334590441260FB23F1D3180
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/70aa9e99-3ca0-38c7-9e56-0c7576209409.roa
Signing time:             Wed 17 Jun 2026 09:00:12 +0000
ROA not before:           Wed 17 Jun 2026 09:00:12 +0000
ROA not after:            Tue 15 Sep 2026 09:00:12 +0000
asID:                     14340
IP address blocks:        129.77.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:33:34:59:04:41:26:0f:b2:3f:1d:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Jun 17 09:00:12 2026 GMT
            Not After : Sep 15 09:00:12 2026 GMT
        Subject: CN=975b4dec-1b82-4801-8c3e-010764b1b040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:04:a8:19:48:91:70:b4:ec:8f:81:af:26:8e:
                    7b:d7:a9:8c:a7:18:79:08:15:56:37:fb:17:2c:3f:
                    4b:7a:83:95:c4:61:eb:b2:5b:25:44:50:7c:61:41:
                    ba:35:bc:78:ff:82:d4:04:0b:ee:b4:11:41:11:61:
                    89:43:ac:24:33:3d:4a:2c:db:3f:fa:44:91:38:61:
                    f6:60:3d:d8:fe:15:19:f7:68:54:80:43:f5:b9:5f:
                    18:ca:77:e3:68:19:44:cd:41:ff:93:8c:51:ef:9a:
                    7b:5d:d9:98:7e:6e:96:e2:ab:cf:3f:4d:4b:a9:cf:
                    10:ec:34:77:28:54:83:a2:15:fc:80:9d:d6:b0:33:
                    07:71:bb:bc:6c:96:14:86:8d:e1:35:2f:9c:ad:ab:
                    e0:9d:2e:08:79:18:6d:b7:e9:c9:68:96:43:ab:2a:
                    09:63:59:4e:f1:98:47:0a:73:e1:4f:df:7d:9d:9d:
                    e6:81:79:a3:d0:01:bc:af:ef:0e:99:42:5e:fe:50:
                    cd:26:aa:5c:65:a5:37:70:4c:fb:81:47:e4:e6:dc:
                    0d:a5:8b:ed:9c:05:69:fb:48:7f:2c:94:9f:5f:dd:
                    e7:b1:d8:4e:dc:29:6c:21:98:9f:95:f3:21:e7:36:
                    fb:4f:f7:97:7d:20:4c:2b:96:3d:0e:e4:a3:b7:9a:
                    4b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A3:01:60:BC:F1:75:70:81:11:53:59:13:F9:F2:11:8E:01:93:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/70aa9e99-3ca0-38c7-9e56-0c7576209409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.77.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:99:fe:63:bf:f7:66:e6:0b:56:03:33:5d:d6:67:83:6c:cb:
         1b:86:76:f2:51:26:6b:ee:b7:55:b2:eb:55:e8:e0:0f:67:00:
         60:10:2c:be:3c:e4:ea:37:39:93:05:12:0c:18:fc:39:2a:b6:
         05:da:2c:e8:7a:6b:ee:c8:ab:2c:49:8e:ae:bf:6b:d3:14:84:
         a0:c0:b8:48:21:db:f3:03:d9:ea:74:a8:0d:8f:ca:88:55:e0:
         19:1c:b7:6c:2a:c7:08:4b:00:d2:87:19:01:a1:d4:6c:dc:5f:
         f9:6a:16:b1:ec:30:9a:e7:e4:ce:71:6b:e9:71:35:9d:91:8e:
         cb:59:b7:4d:d8:7c:b8:45:1c:88:ac:ca:05:24:0e:f8:36:a0:
         e7:ab:df:38:12:2e:11:f0:bc:24:f2:16:cc:5e:e1:e1:a3:2f:
         07:5f:a8:86:20:91:99:a4:46:f0:45:ab:1b:3a:4c:ef:10:6c:
         c9:71:ee:aa:db:65:46:5b:65:d8:e8:fb:42:2e:0a:bd:c0:8c:
         e2:33:1e:9c:f9:04:10:59:98:b5:4a:96:1b:0f:fe:1d:9b:d3:
         36:1d:e1:dc:55:fe:69:67:eb:e0:c5:1f:ea:56:da:71:aa:43:
         cf:a1:33:ba:d5:77:8f:df:35:eb:13:59:48:b1:ca:37:df:08:
         7d:c7:a4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:49:33 2026 by rpki-client