Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/606b200a-1495-3560-b1b2-945867331e76.roa
File:                     606b200a-1495-3560-b1b2-945867331e76.roa (raw, json)
Hash identifier:          qSiRWSrEKJuOrp3rrDTGLwAgvlmJf6gbt4FHQ9O3w9w=
Subject key identifier:   16:0B:4D:BC:F9:78:0E:8F:49:F6:2F:37:7C:75:58:30:D1:81:9B:27
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584D2BDA24E4CAF936FB5B0A7680
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/606b200a-1495-3560-b1b2-945867331e76.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     376
IP address blocks:        192.77.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:24:e4:ca:f9:36:fb:5b:0a:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=6a97d4a7-0c47-4446-8a4a-9cc45a7c516b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:77:5c:77:1a:fc:fd:98:0c:e9:eb:41:9d:49:
                    b1:90:79:f0:ee:5c:9b:dd:1d:5f:a1:20:68:22:06:
                    cc:0d:04:f0:c3:bf:a6:6d:18:b9:9c:1a:27:c5:b4:
                    ee:f9:26:ea:8f:46:21:d1:39:85:a1:97:4b:05:cb:
                    3d:d5:2b:08:1f:59:13:7b:7f:17:e9:c5:cb:41:36:
                    0b:4f:95:55:eb:df:63:fb:fb:62:7e:4f:11:4f:73:
                    f3:63:3b:74:29:68:18:fe:b7:b2:0d:a3:5a:f1:e8:
                    f3:48:71:89:08:a6:7a:5e:4f:45:c8:2f:d5:c7:bb:
                    1a:28:8b:22:ce:a9:69:a2:d6:2f:07:30:58:10:98:
                    07:b5:e2:e3:1b:55:84:f9:03:30:f0:e4:2e:53:ce:
                    b9:e0:e9:00:e1:9b:43:b1:1a:d1:53:4e:69:2d:cf:
                    32:ca:88:79:0f:6b:e4:09:10:ef:f6:1d:7d:eb:95:
                    77:6c:1f:8f:f3:8f:51:5b:4b:70:83:7b:5b:16:ca:
                    24:87:a1:33:31:33:34:54:4d:de:33:a3:04:f5:1b:
                    bb:82:6d:93:a0:42:1c:86:1a:8b:75:76:dd:e8:58:
                    3f:03:82:98:28:eb:90:b6:c1:21:0c:c5:ef:ae:84:
                    0a:79:ec:99:48:20:fa:77:78:77:05:b0:ba:44:1d:
                    80:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0B:4D:BC:F9:78:0E:8F:49:F6:2F:37:7C:75:58:30:D1:81:9B:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/606b200a-1495-3560-b1b2-945867331e76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.77.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:d6:8b:e3:f8:98:36:9e:3e:05:b3:cb:a4:b6:e1:5a:37:50:
         af:81:0c:f1:ad:84:2f:5f:c2:ae:08:c8:53:1b:7d:5e:dc:23:
         cb:aa:34:5c:c7:b6:66:05:18:f1:7a:aa:71:b9:fc:e1:ba:a3:
         43:e6:7a:61:c5:6e:45:f7:d0:75:c9:98:ac:22:b1:9a:b3:65:
         29:72:71:4a:91:7b:6b:c6:43:2e:c7:8b:c3:af:91:02:31:f0:
         00:74:05:ac:cd:bd:bd:06:ab:25:69:02:83:6c:f8:ad:2c:43:
         8c:e1:5f:23:44:4e:04:0d:1f:13:9f:43:f8:10:0c:05:4a:85:
         68:60:fd:d2:6d:fd:43:16:5e:8e:dc:d4:c1:3d:3a:32:dc:d4:
         51:67:40:f8:3c:6d:69:47:08:01:52:9a:78:94:f2:17:62:6a:
         42:8b:11:44:7a:25:f0:06:f6:c0:a6:6f:40:aa:19:a9:08:de:
         f9:2b:8f:85:9e:84:99:a7:37:ab:a6:0d:67:80:de:4b:77:d9:
         a1:6c:15:8e:95:fb:c5:f1:94:e5:f2:25:19:e5:26:52:6a:b9:
         e7:bc:3f:dd:d2:6c:a1:8b:4d:d0:66:1c:78:ba:84:00:51:54:
         69:3e:e9:42:7c:ef:53:e2:4e:90:15:ab:14:31:42:74:6e:76:
         45:bb:42:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:22:19 2026 by rpki-client