Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/9c779b88-e7a2-39d8-a219-c5431978e96d.roa
File:                     9c779b88-e7a2-39d8-a219-c5431978e96d.roa (raw, json)
Hash identifier:          iHN62fP0w0f1NBS8xcb5HXaHMQXf2ISifJAAlDWb8xo=
Subject key identifier:   17:9F:97:56:C1:BD:67:E8:BE:17:B6:7F:F6:3B:20:43:91:2E:B1:42
Certificate issuer:       /CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
Certificate serial:       010D0C9F4328584D1B1A6782FB68D4E7D0564200
Authority key identifier: E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/9c779b88-e7a2-39d8-a219-c5431978e96d.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     763
IP address blocks:        129.41.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:67:82:fb:68:d4:e7:d0:56:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cc97d96-52d0-48a7-a9ea-a7749dc08279
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=54792eaf-2b6e-4135-9ad4-8377b6df5f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3e:7b:a9:77:d5:01:9d:89:79:74:39:31:58:
                    f2:a9:af:4a:20:ca:8f:00:ab:92:fe:f1:e8:6a:a3:
                    75:02:e8:0e:0e:f7:ee:8b:a9:51:5a:e7:1d:b3:ac:
                    98:e8:54:c7:b2:9a:2b:ac:b5:0a:5f:10:66:7e:1b:
                    34:fe:98:82:77:f1:2c:fa:d2:d2:bf:e9:95:42:01:
                    93:97:7f:dd:dc:87:15:61:59:a8:c3:04:6c:04:b4:
                    a2:6f:c1:e2:86:b9:6d:a5:f4:17:2c:b2:c8:16:dd:
                    51:bc:a8:77:8c:17:33:1e:94:f1:8a:23:65:0d:26:
                    6d:30:f4:98:f0:8c:a9:f5:7e:b7:88:4c:1d:e1:ca:
                    b6:e6:61:4d:16:f3:b0:5b:0b:74:38:97:e4:4c:e3:
                    22:b3:02:51:e0:10:da:15:7e:f2:29:b9:4c:db:d8:
                    8f:cf:f0:85:85:c3:60:5c:13:2a:48:22:f3:20:15:
                    ea:b2:5c:35:b6:cd:3f:49:be:e5:df:ef:b0:06:cb:
                    2e:a3:76:cf:e4:7d:d4:d4:1d:a2:2b:96:1e:45:2d:
                    b1:13:1c:cc:96:26:b1:1d:7c:f4:57:5d:eb:ad:d0:
                    14:96:d2:f2:f0:83:ad:47:58:7f:b6:59:e7:20:42:
                    1b:11:93:df:d5:1b:cf:d2:7c:61:85:66:cd:b4:83:
                    0d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9F:97:56:C1:BD:67:E8:BE:17:B6:7F:F6:3B:20:43:91:2E:B1:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/9c779b88-e7a2-39d8-a219-c5431978e96d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279/4cc97d96-52d0-48a7-a9ea-a7749dc08279.crl

            X509v3 Authority Key Identifier:
                keyid:E2:FA:D4:6F:C3:4B:65:8D:79:E3:96:7A:63:A1:96:CF:B9:8C:8D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4cc97d96-52d0-48a7-a9ea-a7749dc08279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.41.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:5f:1d:0f:f4:4b:e1:80:eb:44:8d:8f:3e:af:42:08:c8:18:
         ec:51:be:8b:b7:62:ba:bd:1b:28:7e:bf:bf:f9:46:a1:6d:76:
         f1:70:1f:03:db:6d:df:09:32:a9:ba:a6:7a:dc:3b:4c:a9:f4:
         65:ce:ba:fb:bc:6f:a4:6d:fc:14:60:29:da:ab:82:8f:a7:83:
         fc:f0:06:b6:89:7d:b0:72:71:2f:c7:bd:ba:c4:15:5f:61:aa:
         e2:2d:fe:f8:d6:bd:09:a7:5c:a7:54:d4:cc:fc:37:10:9e:c1:
         fe:81:b6:e8:f4:91:8b:23:7a:fc:f7:08:06:f9:4f:77:bb:72:
         e3:81:e1:a0:54:cf:e9:04:b3:b8:44:0b:e5:dc:6e:bc:c8:57:
         54:e5:c5:9b:d0:fe:9c:ed:be:8c:0e:cf:4c:b6:2e:33:8b:73:
         48:66:60:a0:ac:d9:d0:7e:3d:e2:13:2c:32:17:32:bc:96:92:
         b8:95:11:cd:e8:dd:77:5b:b6:1e:df:eb:22:9c:5c:92:24:24:
         aa:d2:d5:61:dc:75:8d:40:25:ff:76:f2:62:d3:aa:f7:ac:30:
         e2:71:61:e4:ef:c6:67:83:73:c0:13:9a:af:ba:e4:f5:b5:2b:
         4d:0d:7a:f2:00:21:56:1e:b4:39:ef:ae:dc:e6:d9:fa:2f:30:
         3e:fc:b4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:09:19 2026 by rpki-client