Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/462faa57-d8e1-3e7a-bf9f-72fd79685087.roa
File:                     462faa57-d8e1-3e7a-bf9f-72fd79685087.roa (raw, json)
Hash identifier:          pmQ55f/rmrtQmdYGGY7mhKK1bIObZ19PqIpIaQOa7ow=
Subject key identifier:   01:6B:9A:F9:A0:DB:D3:76:95:36:DC:4E:2E:8E:93:2D:ED:6F:85:BC
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584D1F4A6E6341660F7D47E41E20
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/462faa57-d8e1-3e7a-bf9f-72fd79685087.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     54113
IP address blocks:        157.5.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:6e:63:41:66:0f:7d:47:e4:1e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=9238aca3-8393-4a21-9d04-59e91643f092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:48:c4:17:48:4a:4d:eb:a6:fc:5f:68:a6:71:
                    98:92:4e:ef:40:49:66:72:f9:ff:75:18:80:91:39:
                    84:8a:be:5c:2a:3a:fe:dc:2d:0b:90:b0:b7:44:a9:
                    ae:fa:fb:46:ef:a4:7e:f6:7b:16:6c:11:be:2b:81:
                    65:72:a9:ec:82:f0:7b:7a:bd:04:b1:5e:24:0e:26:
                    ce:c4:2f:2c:0b:52:de:f3:cf:73:e6:33:1f:1e:2d:
                    e3:e5:2a:ab:fc:ea:a8:28:f9:bf:17:75:52:11:8a:
                    f1:b9:77:e7:7d:c4:12:2b:dc:40:38:f6:27:d4:5e:
                    67:88:07:27:f1:fe:1a:a7:4c:a4:e6:2c:46:c3:ba:
                    2f:59:18:86:07:61:93:8c:7a:96:f3:fe:fc:13:24:
                    69:a8:72:40:68:5a:0c:dc:70:18:6e:f6:95:0e:80:
                    53:02:d1:3a:18:b2:de:b4:5d:b0:5b:16:f4:0a:11:
                    7e:9f:b3:52:fc:46:91:dd:bf:82:d6:3e:75:88:22:
                    bd:1a:3b:b9:a6:16:0b:71:e8:a2:73:f6:ec:3c:41:
                    38:36:e2:e2:a3:03:40:f6:b0:cf:c8:07:8e:e5:cc:
                    e1:a1:3b:35:fa:09:ab:47:a3:81:88:33:21:95:26:
                    0c:e3:c9:8a:0b:a5:26:c1:8c:3b:4d:e5:30:3f:8e:
                    ad:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:6B:9A:F9:A0:DB:D3:76:95:36:DC:4E:2E:8E:93:2D:ED:6F:85:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/462faa57-d8e1-3e7a-bf9f-72fd79685087.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:55:e0:6f:c2:ae:91:1a:b3:10:71:ba:3e:41:b9:70:f3:8c:
         e4:40:b4:ed:bb:27:c6:e4:d6:3a:05:34:46:fe:96:35:3a:d7:
         d0:08:94:3d:5b:34:b4:9e:7f:ae:9a:0d:a6:d8:08:17:ef:61:
         3a:d5:7a:37:d3:44:75:f9:3d:ed:36:fd:b5:45:a4:c3:3a:c5:
         b3:a2:38:34:a7:18:bc:e4:fc:86:b8:ad:85:71:e1:2b:c8:4f:
         9a:9c:3e:97:48:ac:62:50:59:59:d5:3f:84:5b:bd:8f:bc:45:
         ec:09:ab:22:61:aa:3f:f8:3e:c4:bd:82:4a:4a:43:aa:d8:99:
         20:42:c2:d1:63:a6:7e:c5:8b:d8:7b:6c:15:f9:f2:b7:fd:ca:
         93:53:08:2f:53:15:cb:3e:c8:a8:81:c8:66:b8:be:27:73:60:
         27:91:d6:34:e9:2a:09:83:81:60:56:63:82:44:1a:ee:7c:1a:
         24:1a:50:ed:d6:be:32:61:26:fd:6c:46:06:1c:38:82:be:be:
         ae:1a:12:c2:79:9c:40:16:f1:62:47:ae:db:92:5b:a9:d0:6d:
         1b:7b:37:b0:fb:a6:cc:96:1d:41:bd:14:64:f1:52:64:d0:ac:
         28:a9:ec:d6:aa:10:fc:09:ab:38:58:bc:cb:0e:84:55:08:80:
         b8:48:5b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:17:44 2026 by rpki-client