Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/ac7d411c-2004-3fe4-9f0b-20be7c8f3c8a.roa
File:                     ac7d411c-2004-3fe4-9f0b-20be7c8f3c8a.roa (raw, json)
Hash identifier:          qDrHi/SKBrdcvqYsI9HMbAtVKJtZtSdSiYommb7td7k=
Subject key identifier:   6D:76:41:E7:20:75:FF:95:8E:D3:9E:B6:0F:DC:A1:25:A8:DA:DC:06
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584DCAFB1E282FB9CA1DE6073900
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/ac7d411c-2004-3fe4-9f0b-20be7c8f3c8a.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     4922
IP address blocks:        76.77.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fb:1e:28:2f:b9:ca:1d:e6:07:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=16e567f6-047e-4d6c-83c6-e2d113d6aaf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5a:86:c3:0b:4e:ea:b1:ae:c7:72:1f:d9:c0:
                    e3:f4:ba:c4:18:6a:3a:93:03:98:3a:1b:a3:9d:6c:
                    8d:51:32:b3:27:2f:ec:d2:b1:36:c4:a2:3d:68:28:
                    e5:49:c8:9c:c2:04:10:84:c2:d9:52:4e:8c:f1:03:
                    dd:39:6b:00:52:06:b9:db:ba:78:1a:76:ec:0d:11:
                    7b:d6:ef:9a:34:8a:06:19:10:5f:66:96:b8:ae:13:
                    55:e0:24:83:e3:3f:26:82:09:55:83:58:30:fd:04:
                    9f:79:be:e7:30:fc:49:52:d7:49:1b:ce:8a:8f:f8:
                    d4:c1:9e:2f:9b:59:95:23:ef:0f:86:fa:00:da:0b:
                    a2:ad:ed:b7:12:aa:90:65:f0:bb:50:81:9d:08:b7:
                    ab:61:3a:b9:c8:27:f9:fb:9d:25:0f:2c:51:99:c0:
                    15:5c:90:50:0e:3e:16:7c:8f:75:23:b3:c6:6d:0b:
                    1a:d9:a1:55:4f:1f:ab:89:69:e4:87:a3:9c:7c:bf:
                    79:8c:b5:46:65:b7:45:6f:85:8d:6c:74:82:c8:84:
                    a2:73:1b:40:f6:c7:a4:5c:ac:11:22:00:af:87:b6:
                    ac:c4:36:41:74:ae:48:65:cd:93:26:cc:88:6d:2a:
                    c4:be:fa:50:13:83:17:b4:af:29:c1:ed:29:3a:2c:
                    f9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:76:41:E7:20:75:FF:95:8E:D3:9E:B6:0F:DC:A1:25:A8:DA:DC:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/ac7d411c-2004-3fe4-9f0b-20be7c8f3c8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.77.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:6c:cb:6c:73:da:ff:05:c2:90:46:09:4f:1e:23:ab:92:a2:
         b8:68:4f:d1:a2:15:65:67:c0:b7:c0:8e:38:6f:4f:00:c8:71:
         e6:d8:e7:fc:dc:7d:6f:84:2f:ec:a2:82:c2:e7:fc:0f:bf:50:
         de:57:e2:9e:1b:5b:e2:c2:09:e1:67:fb:ad:9d:bf:f4:bd:b3:
         4b:d6:a2:14:fc:1a:05:1e:3d:86:7f:15:af:07:28:61:ae:6c:
         48:e9:ed:b7:35:27:dd:40:d2:b0:15:0b:e2:37:93:cc:cf:3b:
         0f:52:06:33:3e:9d:41:e2:ce:0f:80:b6:c2:e0:f2:45:9d:d1:
         4a:1d:a0:96:62:17:4c:5b:5c:24:17:6b:32:b8:2a:44:59:0b:
         66:a7:1e:32:b4:f8:fb:42:c1:d4:6c:ca:ff:72:fd:5b:62:8a:
         06:3c:7b:0b:27:0c:a9:ba:c4:98:95:53:9d:d4:31:ae:97:a7:
         49:19:f3:a2:88:55:28:b1:8a:58:74:e9:26:f1:1c:d7:51:63:
         43:57:e0:7e:36:b3:6e:6c:c0:0f:70:2f:5e:2e:17:ff:02:05:
         83:7a:7f:50:ea:fc:bc:61:a3:bc:a9:20:17:e0:8f:0f:00:a0:
         ca:53:58:34:a2:eb:81:25:6f:a8:cf:2f:03:d4:fb:6e:4c:6c:
         16:2f:47:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:28:14 2026 by rpki-client