Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/33d78819-d68b-349a-8527-6568c3437399.roa
File:                     33d78819-d68b-349a-8527-6568c3437399.roa (raw, json)
Hash identifier:          fPuj4Pov/sR80F/0olDSK69hdNY17s2I51BbGgRUeTQ=
Subject key identifier:   71:FE:27:FE:45:5F:7B:E7:0B:10:4D:90:E8:AC:25:AD:26:A7:46:F3
Certificate issuer:       /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial:       010D0C9F4328584B2A2C36E7FB30D8A491344E00
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/33d78819-d68b-349a-8527-6568c3437399.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     46294
IP address blocks:        76.77.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:36:e7:fb:30:d8:a4:91:34:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=b4e5f671-97fb-46c0-a401-c062c021a9a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:18:e9:e8:8f:12:bd:be:1e:77:98:86:fa:19:
                    7d:9a:61:ce:1d:be:2b:41:67:1a:70:73:1d:54:91:
                    3f:a8:56:cc:6d:94:67:8d:58:54:f9:2b:18:33:ae:
                    83:2c:2f:cc:cc:6c:dc:c5:87:1b:db:ce:3e:74:85:
                    85:2e:9b:7e:f3:f6:46:f9:ba:bf:e7:37:82:dd:f8:
                    1d:11:b6:cb:07:01:78:79:4e:2f:31:0b:ca:61:5b:
                    f3:a0:68:10:55:1e:a9:e5:e3:97:10:6f:a4:b8:f4:
                    4d:f7:0c:3d:be:fa:8a:53:81:a9:63:e5:6d:d3:7a:
                    94:a7:0b:f8:02:c3:16:e8:18:45:02:08:cb:57:0d:
                    74:28:4c:e4:2c:99:5b:27:66:cf:a0:a9:ac:0d:4f:
                    ee:a9:e7:88:b6:dc:68:22:fb:c4:8d:8d:43:88:0d:
                    d2:30:30:70:40:a2:53:1a:ed:eb:ec:b7:cc:c3:bd:
                    14:77:54:54:08:7f:4d:ac:6d:77:7e:85:a8:59:f5:
                    6c:d0:dc:a2:b9:93:3b:c3:fc:78:99:2a:08:98:30:
                    dd:cc:96:d0:74:1d:40:d6:b5:c3:b3:95:56:85:5e:
                    f3:c9:49:dd:a0:99:8b:3d:33:53:81:83:cb:b2:11:
                    cc:7e:a9:76:4e:44:36:a1:31:5e:48:26:a0:80:1c:
                    90:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FE:27:FE:45:5F:7B:E7:0B:10:4D:90:E8:AC:25:AD:26:A7:46:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/33d78819-d68b-349a-8527-6568c3437399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl

            X509v3 Authority Key Identifier:
                keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.77.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:f3:69:f8:6a:a8:18:58:7e:b2:e4:1d:28:ae:be:ce:74:34:
         d4:e5:27:df:40:a6:74:bf:c4:be:44:f3:1b:b6:ff:45:9b:d2:
         42:2e:d8:73:73:50:aa:c9:8f:bd:2a:85:f5:77:3d:e0:b9:1b:
         7a:be:98:f0:b4:92:a3:1a:6c:57:04:26:d9:de:7d:fe:58:ab:
         24:e1:67:71:f1:9b:aa:96:69:cb:f6:50:c0:36:3e:bd:63:03:
         b4:3d:cd:0d:36:26:fb:69:18:bd:6b:c3:b5:49:2d:0c:07:21:
         19:fd:8e:e6:93:8b:9d:b3:de:4b:0c:a2:e1:9a:7f:d6:4c:c7:
         a9:27:fc:f9:48:d5:62:60:8a:be:89:65:65:81:b6:4c:9f:11:
         dd:30:c9:e8:54:1d:da:9f:59:0a:6e:70:69:33:be:f7:41:8d:
         6d:60:42:4c:14:66:20:db:24:e8:85:67:b7:cb:9b:d3:9a:36:
         66:7e:5a:c0:66:4b:70:bc:1a:6f:00:41:27:cf:4b:df:63:0a:
         fc:07:2e:4f:50:50:54:58:51:08:d9:0c:6b:98:ac:25:28:f5:
         94:40:13:37:22:d6:01:9e:e2:f0:95:9e:1d:66:40:97:8e:5f:
         5b:ed:58:33:e5:a1:48:8a:ab:5f:6d:0a:2c:0c:0b:dd:db:82:
         af:bb:28:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLDbn+zDYpJE0TgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFjNTk5NTktZTg5OC00MmFkLTlkMGEtZjFiODdhN2Qw
MTE0MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk
YjRlNWY2NzEtOTdmYi00NmMwLWE0MDEtYzA2MmMwMjFhOWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRjp6I8Svb4ed5iG+hl9mmHOHb4rQWcacHMd
VJE/qFbMbZRnjVhU+SsYM66DLC/MzGzcxYcb284+dIWFLpt+8/ZG+bq/5zeC3fgd
EbbLBwF4eU4vMQvKYVvzoGgQVR6p5eOXEG+kuPRN9ww9vvqKU4GpY+Vt03qUpwv4
AsMW6BhFAgjLVw10KEzkLJlbJ2bPoKmsDU/uqeeIttxoIvvEjY1DiA3SMDBwQKJT
Gu3r7LfMw70Ud1RUCH9NrG13foWoWfVs0NyiuZM7w/x4mSoImDDdzJbQdB1A1rXD
s5VWhV7zyUndoJmLPTNTgYPLshHMfql2TkQ2oTFeSCaggByQ2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHH+J/5FX3vnCxBNkOisJa0mp0bzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1
OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4N2E3ZDAxMTQvMzNkNzg4MTktZDY4Yi0z
NDlhLTg1MjctNjU2OGMzNDM3Mzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWFjNTk5NTktZTg5OC00MmFkLTlk
MGEtZjFiODdhN2QwMTE0L2FhYzU5OTU5LWU4OTgtNDJhZC05ZDBhLWYxYjg3YTdk
MDExNC5jcmwwHwYDVR0jBBgwFoAUul4Dp25dfBcjybWEUNyNWEuvgL4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYWM1OTk1OS1lODk4LTQyYWQtOWQwYS1mMWI4
N2E3ZDAxMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTE0SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE7zafhqqBhYfrLkHSiuvs50NNTlJ99ApnS/xL5E8xu2/0Wb0kIu2HNz
UKrJj70qhfV3PeC5G3q+mPC0kqMabFcEJtneff5YqyThZ3Hxm6qWacv2UMA2Pr1j
A7Q9zQ02JvtpGL1rw7VJLQwHIRn9juaTi52z3ksMouGaf9ZMx6kn/PlI1WJgir6J
ZWWBtkyfEd0wyehUHdqfWQpucGkzvvdBjW1gQkwUZiDbJOiFZ7fLm9OaNmZ+WsBm
S3C8Gm8AQSfPS99jCvwHLk9QUFRYUQjZDGuYrCUo9ZRAEzci1gGe4vCVnh1mQJeO
X1vtWDPloUiKq19tCiwMC93bgq+7KCo=
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:12:48 2025 by rpki-client