Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/53c48d25-63ee-31d8-92e0-3f33e0cc62a0.roa
File:                     53c48d25-63ee-31d8-92e0-3f33e0cc62a0.roa (raw, json)
Hash identifier:          oNBcyo8TX6G4Jv82+r6kSnyff943g968dxYETszlMxs=
Subject key identifier:   C7:A5:8D:B2:AB:0D:A6:E2:DA:D6:1C:B8:0B:6E:F0:27:80:3B:D0:B0
Certificate issuer:       /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial:       010D0C9F4328584A49706D68C6BA847565CC7200
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/53c48d25-63ee-31d8-92e0-3f33e0cc62a0.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     46455
IP address blocks:        76.77.16.0/23 maxlen: 24
                          76.77.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:6d:68:c6:ba:84:75:65:cc:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=5a70b113-efaa-4b3f-9f14-60a309c43650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:72:a4:5c:ea:05:39:21:b8:09:53:9e:7f:79:
                    98:d0:08:2d:94:46:ec:39:12:c5:41:89:b3:c5:5e:
                    ea:1a:9f:e9:fc:0a:4d:a7:c5:84:b0:54:49:a7:d6:
                    22:ed:9d:0e:e4:b0:f2:2c:a8:df:35:35:a8:43:6b:
                    4c:35:a9:dc:72:64:51:76:26:9b:4e:80:6c:ce:cc:
                    e1:a2:3d:c3:85:04:9a:1d:ad:a3:02:ec:a1:04:f5:
                    5d:40:f7:72:80:18:61:5b:4f:f5:1c:c1:0b:9a:f0:
                    89:98:d4:f1:16:96:b3:9c:c3:c5:8c:cc:f8:46:cb:
                    58:b2:c5:65:fa:54:f8:06:74:38:37:3a:f7:76:b2:
                    1c:b1:9b:39:9c:97:3c:22:59:3f:00:c0:6d:a4:8a:
                    92:d2:c8:4b:ed:75:ae:7c:a1:b0:62:67:b8:58:8f:
                    db:d4:ca:4c:86:37:3f:85:48:0c:8b:01:0f:80:85:
                    a5:81:48:98:c0:4e:19:22:35:36:30:c6:ef:16:c8:
                    78:8f:ed:79:0a:ff:dd:af:31:6f:6a:36:9a:ca:f0:
                    ed:3f:2a:c1:9f:2d:70:d6:3a:59:88:f8:66:dd:8c:
                    0e:96:0d:cc:38:9a:6c:89:73:60:d2:01:23:64:c3:
                    a5:20:dc:7a:c9:aa:fb:51:c1:55:d4:53:12:cf:7a:
                    5f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A5:8D:B2:AB:0D:A6:E2:DA:D6:1C:B8:0B:6E:F0:27:80:3B:D0:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/53c48d25-63ee-31d8-92e0-3f33e0cc62a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl

            X509v3 Authority Key Identifier:
                keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.77.16.0/23
                  76.77.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:76:65:69:1a:39:4c:f3:35:03:56:c0:0a:38:a0:6f:8d:1d:
         06:9e:5f:88:f5:52:e8:94:b7:9b:ba:82:20:45:79:a9:f2:c2:
         cf:97:70:89:a8:9b:b8:b6:19:a5:93:71:48:9d:88:ec:45:f5:
         af:a0:48:a9:12:e4:7a:ab:a6:77:e0:17:58:a1:0b:c9:22:b9:
         3e:26:a5:e7:42:e5:06:24:a0:5a:7d:30:e2:4f:62:ef:f1:14:
         e3:9d:49:e4:38:2c:26:a2:98:4d:ff:4a:f0:e8:39:cc:97:4f:
         54:a2:f2:72:38:ef:69:e6:0c:22:ad:c9:1d:3d:7e:ec:1a:e3:
         d3:4d:c2:cb:52:5d:f0:e5:0b:bf:80:b3:29:4c:87:f1:7f:ab:
         ee:16:f1:e1:c4:42:71:37:55:35:a1:90:d1:ab:3b:31:df:ca:
         4b:b0:c6:aa:0e:7e:23:e6:b6:56:9e:c8:95:de:22:4b:4f:db:
         c4:51:41:19:a7:a7:b2:cf:55:69:9b:30:97:3e:ae:cb:34:ae:
         81:c6:41:35:24:0e:b1:16:61:50:f4:07:cd:7a:10:af:17:b6:
         fc:ba:a9:94:79:0e:f2:bf:d2:3c:05:fb:00:8e:1c:0a:f9:5e:
         d6:4a:d9:2d:b3:f0:03:2b:16:e8:55:06:4f:9a:1b:78:c0:12:
         a4:de:6d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:31:47 2025 by rpki-client