Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/e364b824-5fe5-38af-824d-46c6a062cb2a.roa
File:                     e364b824-5fe5-38af-824d-46c6a062cb2a.roa (raw, json)
Hash identifier:          wIuHcKEWpKBl31KrSdI+9FN4qahElcIvyUpgRU12LQ4=
Subject key identifier:   64:60:81:69:21:FA:75:C5:1A:2B:BF:73:E4:45:9C:EC:04:6C:CA:E3
Certificate issuer:       /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial:       010D0C9F4328584F497509D01C516957C694CD40
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/e364b824-5fe5-38af-824d-46c6a062cb2a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     46294
IP address blocks:        76.77.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:09:d0:1c:51:69:57:c6:94:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=35ea07a8-649b-481f-af54-2d7c0b16db9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:54:51:88:bf:e2:95:04:84:89:1c:7c:29:8b:
                    78:27:ef:8f:f8:b6:4b:24:be:33:f4:67:d5:ae:2a:
                    46:f2:ae:bd:51:39:56:9b:8c:c6:df:1e:b7:07:c2:
                    a2:b9:03:e4:08:dc:cf:c9:34:e5:c6:6c:63:c7:8a:
                    05:c4:30:1c:ca:9a:0c:16:d0:c6:aa:2d:ba:71:3a:
                    34:5a:43:56:b7:12:05:e4:92:45:0f:29:ea:7f:a6:
                    90:67:2f:e2:59:c8:eb:6b:b3:a8:ac:f0:b2:06:f1:
                    c9:47:fa:7d:64:d9:de:5b:e9:04:10:ed:04:19:c6:
                    ea:de:3c:34:53:9a:6f:a6:e8:a2:56:17:79:3e:58:
                    55:62:06:11:d5:83:5d:1e:fb:98:03:c5:b6:05:38:
                    85:81:70:ae:7e:17:e0:c1:ba:db:6e:b1:6c:1b:35:
                    e6:c5:e6:9c:91:8c:1f:5e:65:a8:40:56:aa:8c:dc:
                    b0:2b:6d:fd:c2:cf:43:cd:10:2d:ca:5a:5a:cb:31:
                    41:b7:55:3e:24:9c:16:f9:e5:33:9c:3c:b7:59:f4:
                    7f:47:6e:ec:6c:f0:1b:2a:a6:2d:c3:69:d0:10:a4:
                    06:ec:d8:6d:65:fc:62:ea:62:df:49:cc:a2:f3:5c:
                    66:77:5f:a8:96:e7:83:41:17:55:f8:75:be:da:a9:
                    16:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:60:81:69:21:FA:75:C5:1A:2B:BF:73:E4:45:9C:EC:04:6C:CA:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/e364b824-5fe5-38af-824d-46c6a062cb2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl

            X509v3 Authority Key Identifier:
                keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.77.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:a4:c1:c0:24:e1:94:da:40:fc:2c:ec:6c:0b:07:7d:72:8d:
         6f:ca:0a:94:2b:e3:78:7e:a0:a1:00:75:68:71:b0:12:be:97:
         ed:c3:1e:4f:d3:50:56:64:1d:9a:de:14:b3:77:9a:8f:ef:1d:
         87:2e:c9:66:08:0a:cf:c9:05:da:9a:ea:06:29:c1:ee:62:8c:
         8c:1b:67:1c:bf:13:f1:27:62:58:4a:50:9d:e8:c0:da:38:fb:
         6b:b2:ae:2e:16:fe:a7:2e:8b:55:3e:2f:15:8e:dd:fd:c4:98:
         9c:df:45:7a:9f:33:86:43:af:89:41:91:5f:c7:3c:5a:1e:74:
         ba:1a:74:ff:cd:57:bb:0a:36:17:d5:b6:56:9f:5a:34:5b:0b:
         84:24:70:cb:25:90:e5:bd:31:4c:d4:49:83:01:3e:e2:a9:98:
         44:7b:92:3e:58:ba:cb:b4:7d:cb:10:a1:17:d1:f8:0c:93:9e:
         5e:41:39:63:57:15:d1:c7:9a:c7:0e:51:76:71:77:bb:bb:3f:
         83:8f:d2:94:6a:1f:18:da:05:04:75:72:81:7a:6e:f5:e4:8c:
         0b:bd:e0:61:07:78:f2:94:c9:0d:ab:99:86:0f:3a:9f:31:72:
         da:29:a5:d6:50:a4:7d:c5:b0:b1:2b:ca:b3:8e:f2:65:50:a1:
         d9:96:df:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:42:05 2026 by rpki-client