Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8377ba0-d92d-4969-a666-84ce4e67eb24/5e24a212-ff8c-3f99-b45f-f90ef0c7f813.roa
File:                     5e24a212-ff8c-3f99-b45f-f90ef0c7f813.roa (raw, json)
Hash identifier:          diNE6RJ6byzQdXBtxEy5e7aBmSaGMAXnqnPZzpY01EU=
Subject key identifier:   E3:6B:C3:06:F2:93:7F:A2:E7:F5:2B:77:45:94:D3:58:FE:90:E0:8A
Certificate issuer:       /CN=f8377ba0-d92d-4969-a666-84ce4e67eb24
Certificate serial:       010D0C9F4328584F3FAD30F3E5F12BDE9477B500
Authority key identifier: FE:5F:C0:80:58:74:0D:BE:B7:4A:A8:60:2D:D3:71:E8:85:23:D1:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8377ba0-d92d-4969-a666-84ce4e67eb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8377ba0-d92d-4969-a666-84ce4e67eb24/5e24a212-ff8c-3f99-b45f-f90ef0c7f813.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     396982
IP address blocks:        149.77.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8377ba0-d92d-4969-a666-84ce4e67eb24/f8377ba0-d92d-4969-a666-84ce4e67eb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8377ba0-d92d-4969-a666-84ce4e67eb24/f8377ba0-d92d-4969-a666-84ce4e67eb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8377ba0-d92d-4969-a666-84ce4e67eb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:30:f3:e5:f1:2b:de:94:77:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8377ba0-d92d-4969-a666-84ce4e67eb24
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=b95d2f3a-0f65-472a-b090-fd9a35c0c5c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9e:cc:cd:80:65:f2:f4:d7:81:f3:3a:e1:27:
                    37:86:55:1f:be:c0:05:3d:65:82:47:89:80:99:1b:
                    bd:51:41:8b:46:ff:16:ac:7a:46:27:d2:43:93:d8:
                    72:82:70:eb:9d:b1:38:04:b0:e9:cc:11:3e:25:21:
                    f4:a8:c6:d6:9c:4d:45:33:65:fe:0e:81:50:63:f5:
                    ab:83:59:df:3f:7e:c3:08:65:26:32:6f:66:ed:2c:
                    68:6b:43:bd:9d:e7:6b:cd:86:04:97:06:b1:0f:76:
                    b3:2f:d0:c7:bd:62:d5:b7:d4:96:33:0e:1c:90:37:
                    c8:b4:7c:1a:b0:a2:0e:f1:60:55:cf:9e:8e:eb:69:
                    e3:d2:f2:4c:c3:d7:0d:ed:b7:89:33:08:3b:3b:48:
                    01:46:88:03:cf:3e:ba:16:60:c1:8e:b8:00:04:ab:
                    43:53:88:21:f3:81:3e:15:eb:1d:71:3d:39:fa:9f:
                    f5:a7:0a:c6:6f:83:35:80:72:e8:42:0c:1a:28:82:
                    63:01:26:a7:13:1a:c0:6d:57:8d:60:c5:94:d4:23:
                    f4:75:83:6b:f4:d9:47:48:ce:27:63:fb:b2:a6:8b:
                    8f:65:28:13:94:75:14:92:76:4f:78:8b:49:cc:db:
                    ba:9e:d2:2c:ff:f3:b1:df:65:8d:aa:d3:76:2a:4e:
                    a5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6B:C3:06:F2:93:7F:A2:E7:F5:2B:77:45:94:D3:58:FE:90:E0:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8377ba0-d92d-4969-a666-84ce4e67eb24/5e24a212-ff8c-3f99-b45f-f90ef0c7f813.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8377ba0-d92d-4969-a666-84ce4e67eb24/f8377ba0-d92d-4969-a666-84ce4e67eb24.crl

            X509v3 Authority Key Identifier:
                keyid:FE:5F:C0:80:58:74:0D:BE:B7:4A:A8:60:2D:D3:71:E8:85:23:D1:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8377ba0-d92d-4969-a666-84ce4e67eb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.77.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:bb:3d:cd:06:46:15:40:97:0e:0a:b2:1e:63:bf:98:61:29:
         77:61:ad:0e:2e:62:e6:3a:8f:71:a2:72:4e:5d:63:e3:da:d9:
         aa:16:12:e3:f1:a3:1f:96:2a:6b:73:50:fd:4a:62:a9:b6:38:
         5d:c9:29:73:ca:6d:7d:27:96:bc:c5:62:8b:9e:b3:71:29:48:
         72:9f:65:61:a4:44:75:6b:3e:88:d9:f4:17:91:25:77:5a:a6:
         ba:41:74:ec:d4:c5:eb:ee:ba:53:77:65:42:93:07:31:8a:ed:
         af:8b:08:17:d3:19:98:0b:9d:42:a2:e5:29:4a:2d:12:75:fc:
         84:d2:13:50:8b:05:b8:92:4f:5c:cc:39:fd:ad:15:49:c7:80:
         4f:92:8b:de:87:d1:42:03:72:37:cf:3c:c9:d5:f8:6e:08:c4:
         16:5b:b4:ce:ce:8c:f5:4e:65:69:bd:3b:7c:a8:3c:4a:6b:9a:
         00:e0:a3:23:67:ca:d4:a3:c7:f8:66:03:56:51:8c:ee:2b:f0:
         4b:4c:d8:c3:b3:9f:4a:47:e4:46:f0:10:c2:52:00:e3:ab:fd:
         2e:73:5c:f3:24:2b:2a:31:e5:60:9d:8b:b0:af:e2:8b:27:8a:
         7f:78:7f:be:19:ee:79:6a:da:3b:cf:16:2f:67:9f:2d:b0:21:
         88:3a:d8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:06:24 2026 by rpki-client