Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/76040847-6a3d-3ae1-bd25-a834e1274210.roa
File:                     76040847-6a3d-3ae1-bd25-a834e1274210.roa (raw, json)
Hash identifier:          DfTF+srnOl3+YecqCexO36vx1d7zbtauUnPZL+8RV9Y=
Subject key identifier:   A9:98:25:50:5F:3F:2A:77:C4:7D:D2:EE:73:13:38:D5:DB:17:15:D8
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F655E2581A04011F90239DE56
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/76040847-6a3d-3ae1-bd25-a834e1274210.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     33363
IP address blocks:        97.78.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5e:25:81:a0:40:11:f9:02:39:de:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=3eaf8e64-a066-4d8f-95a7-bc19cb69eec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5d:a0:05:57:91:9a:37:d7:5a:6a:45:50:26:
                    b7:14:08:62:c9:81:b7:72:15:47:75:31:e2:69:aa:
                    d4:d0:3e:60:0f:0d:f1:71:b8:6b:0d:68:2e:1e:9d:
                    0e:60:07:f3:05:4d:95:6e:6d:fa:aa:65:5b:f5:f4:
                    97:e7:5a:7c:80:a6:c2:25:ac:42:ae:ff:a9:00:45:
                    f0:80:15:07:dd:7d:28:65:38:da:44:94:be:a3:86:
                    e1:17:55:bd:d5:c6:e1:e4:e5:43:d6:24:e5:f8:0f:
                    dc:c7:88:b6:02:e8:04:55:2f:c4:91:9b:23:07:fc:
                    c9:80:94:70:e2:0f:aa:96:aa:a7:de:19:6e:6b:fb:
                    59:77:73:3f:76:35:18:71:03:5d:8b:64:ff:93:b7:
                    d1:9c:8e:e3:b0:2e:74:d5:47:20:0e:50:3a:fe:24:
                    aa:24:2a:30:f6:a4:99:e7:59:fb:ea:36:c3:02:fe:
                    35:28:2e:5f:44:4a:67:0d:7b:be:8e:31:47:58:88:
                    23:86:16:2c:7f:20:7b:b8:f7:62:a1:29:8a:de:d7:
                    de:1e:3b:7c:8f:e6:95:f4:ee:d9:55:3b:72:4d:a9:
                    cc:7e:e0:87:a8:1d:66:d2:77:a4:59:0d:ed:7a:77:
                    73:66:be:6e:c2:97:bb:ca:bc:7a:f2:67:78:de:cd:
                    1f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:98:25:50:5F:3F:2A:77:C4:7D:D2:EE:73:13:38:D5:DB:17:15:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/76040847-6a3d-3ae1-bd25-a834e1274210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.78.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:66:99:42:64:06:bb:8a:51:ea:86:38:9a:e1:2f:fa:6a:a7:
         5c:cf:31:1a:88:94:05:34:72:dc:34:e4:d5:04:5f:a5:44:21:
         ec:51:95:c5:39:6a:99:1d:14:73:ab:5a:a6:9c:e1:c2:2f:ef:
         59:b6:de:9f:18:6c:00:29:70:ea:36:5b:3d:74:94:76:b9:f6:
         91:da:15:3b:f2:87:cd:c9:94:1f:59:92:46:dd:02:6a:98:2e:
         a9:9c:dd:ef:e2:58:87:3d:3f:77:30:e9:9e:8b:77:2c:1e:7f:
         f9:17:48:45:4f:21:e0:b0:9c:68:58:58:51:b9:62:b9:7b:b9:
         16:76:e5:ac:99:f1:33:bf:57:00:85:e2:2e:93:ae:bd:90:02:
         08:b8:9a:c4:d5:8a:09:9d:a7:ec:17:ae:74:ca:a7:66:83:fa:
         6d:81:6f:48:c6:7d:fe:9a:e9:bc:a5:1c:a0:5c:b5:61:71:5a:
         5f:d9:95:3f:a3:e8:4a:60:ad:09:e3:b1:da:8f:f8:d0:0c:02:
         cc:04:69:32:91:1f:ae:94:40:6e:26:dd:4b:39:4a:c6:9c:ba:
         49:4e:03:10:57:77:0a:6f:44:86:d4:b4:25:de:21:43:08:f3:
         11:ab:7f:00:a0:f0:c1:80:d4:cf:d7:24:b1:a0:0e:b3:39:46:
         5a:46:8d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:40:11 2026 by rpki-client