Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7c1c3070-b5e1-3237-8435-4ee1b27d62ee.roa
File:                     7c1c3070-b5e1-3237-8435-4ee1b27d62ee.roa (raw, json)
Hash identifier:          +8Namf7pHzcEeFlSdKOPN0Cz73jBeq1+nc7PuOXfyE4=
Subject key identifier:   9E:AD:C6:62:E2:5B:37:ED:77:64:33:B6:7E:24:30:49:62:84:8A:DE
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584F9BCDFB4D7B2BE0DB71119F00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7c1c3070-b5e1-3237-8435-4ee1b27d62ee.roa
Signing time:             Sat 24 Oct 2026 13:00:12 +0000
ROA not before:           Sat 24 Oct 2026 13:00:12 +0000
ROA not after:            Fri 22 Jan 2027 14:00:12 +0000
asID:                     13335
IP address blocks:        204.195.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9b:cd:fb:4d:7b:2b:e0:db:71:11:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 24 13:00:12 2026 GMT
            Not After : Jan 22 14:00:12 2027 GMT
        Subject: CN=49ffb403-6f9f-49e1-90fd-c19f3ee7affe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e6:a5:e1:21:b9:9d:14:6f:27:40:3d:69:b4:
                    e9:84:22:d2:0e:63:9b:4b:a2:66:9d:8f:43:2d:cf:
                    e8:25:c0:0a:92:4d:c9:b2:2c:a8:c4:dc:7f:57:ac:
                    18:98:e3:50:f8:d0:fa:c3:95:a6:78:25:94:38:e8:
                    5d:cd:35:6f:db:76:aa:18:d6:7a:5f:48:2e:9a:ce:
                    4a:c2:44:b2:1e:1c:9f:9b:f3:3c:ef:d1:87:b7:ec:
                    6f:4e:18:a3:86:9e:68:10:78:f9:ea:1c:79:c2:b9:
                    85:28:20:a1:fe:88:a8:86:5d:df:3b:95:86:42:ee:
                    40:a9:c7:72:61:b9:bb:d9:85:48:08:2b:05:39:d8:
                    4d:b1:ac:16:90:86:ff:bd:df:21:5b:9f:74:fa:cb:
                    e5:d2:32:35:48:94:78:77:26:88:89:b1:f7:d0:07:
                    f1:ae:b2:d3:12:a6:05:a9:7f:34:29:26:fd:29:f4:
                    76:7f:ca:5d:19:97:a8:ee:85:56:e0:f5:74:84:ce:
                    d6:14:ec:cf:00:ef:91:4d:c1:cd:64:f6:79:f9:58:
                    58:97:dd:3c:ed:fd:f6:ca:81:d3:1d:52:3a:65:76:
                    d6:2a:f4:b1:3b:e5:8f:41:e4:ef:9f:8d:68:07:f8:
                    bf:c7:6c:11:6c:03:ed:08:80:ae:44:78:e6:e0:2f:
                    05:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AD:C6:62:E2:5B:37:ED:77:64:33:B6:7E:24:30:49:62:84:8A:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7c1c3070-b5e1-3237-8435-4ee1b27d62ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:00:72:f3:8f:65:52:0d:5a:b1:dc:91:aa:a2:be:ca:50:53:
         8b:2b:bf:dc:c0:09:74:53:05:1a:1e:ac:30:7b:64:82:79:9d:
         7c:a3:6c:9a:2d:83:09:cb:62:fa:63:0f:e9:5b:5d:9c:49:d5:
         8f:27:b9:48:b9:67:17:f4:2a:84:53:c4:37:51:e5:33:6b:28:
         e3:ed:4d:f7:6b:ac:c2:8b:72:49:65:70:e8:3b:29:94:22:9a:
         c2:8c:1d:ff:24:05:c4:a3:ca:d9:7f:4c:bd:9c:ff:ea:3a:e9:
         37:9c:f9:07:e8:7d:01:10:79:b3:b7:28:92:12:e6:a0:29:c6:
         d3:d6:8c:45:17:d6:d3:f9:78:9d:7a:55:c5:22:72:19:35:2a:
         ef:2a:22:37:75:28:ab:e7:e6:43:bc:54:81:ba:1d:73:16:e3:
         4c:28:b4:ee:32:d5:61:d3:a9:64:d9:34:74:33:4c:23:ed:6d:
         31:12:a0:73:f0:c3:e1:c1:d5:f0:a8:ad:d3:07:00:d4:45:a7:
         b6:9d:cf:1e:21:92:c8:55:9e:9e:0e:13:77:bf:1d:56:ec:e4:
         c7:d2:3f:d5:d5:1a:4b:ca:8a:71:a0:49:a5:dc:3b:c1:07:8f:
         76:fa:e4:cd:2d:89:13:b8:e3:b1:2a:44:a7:bb:67:e1:d4:5d:
         60:4e:0d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:44:40 2026 by rpki-client