Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/77b2f57e-d588-3a37-b4ad-da94b0080555.roa
File:                     77b2f57e-d588-3a37-b4ad-da94b0080555.roa (raw, json)
Hash identifier:          w3em8VZST1fCIEQ3q+L9ttEu1Nzwe/9CwqsPLjRE2v8=
Subject key identifier:   62:E1:09:02:DF:A1:2C:E8:C3:42:7E:02:79:EA:F1:A5:86:3B:B0:5F
Certificate issuer:       /CN=dc5ff8c3-fae5-403f-be02-38072ae2ddc6
Certificate serial:       010D0C9F4328584ACE0B90C19D1021470D424FC0
Authority key identifier: A3:EC:A4:62:68:89:8D:A9:13:14:E8:A6:5D:A4:F9:D8:02:6F:75:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/77b2f57e-d588-3a37-b4ad-da94b0080555.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     399091
IP address blocks:        172.81.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:90:c1:9d:10:21:47:0d:42:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc5ff8c3-fae5-403f-be02-38072ae2ddc6
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=59b09f78-17a9-46e4-89df-4c2dfcacba7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a0:f0:8f:0b:70:93:88:f2:49:47:79:9b:8e:
                    5f:18:15:c5:83:51:8b:14:89:dc:4e:9d:09:d6:05:
                    7b:b2:a6:6e:5a:86:a3:85:14:78:f7:65:0b:ed:c4:
                    66:d1:04:0f:cd:86:af:92:0e:dd:f8:eb:94:69:dc:
                    b4:09:72:54:99:4f:bf:58:11:a4:b5:ab:e3:56:aa:
                    10:10:88:67:32:26:ea:46:c0:1b:41:2c:4f:24:55:
                    b7:33:2c:bf:89:3a:c2:02:10:69:9f:64:c7:30:cc:
                    0d:40:fb:25:86:43:73:6f:58:b2:8c:99:a4:e2:4f:
                    9a:66:ac:63:bf:a2:08:d7:f4:5b:e7:35:8e:df:57:
                    31:85:35:ee:ae:dc:00:bd:3a:81:14:00:b9:d2:4e:
                    25:86:66:d1:54:57:09:9e:b5:ec:f1:78:14:2f:76:
                    c6:af:b9:91:09:4f:9d:e6:b7:b3:54:7e:87:78:86:
                    33:eb:57:3c:8a:24:2a:a0:2a:2d:78:e1:e4:39:2e:
                    05:b9:4f:ea:54:0b:2d:2a:97:d4:61:b3:59:c5:a6:
                    f1:e5:25:2a:63:18:75:01:69:6f:97:9d:0b:7a:96:
                    de:60:04:9d:a6:d2:bf:3e:ad:3d:c3:f2:0f:9a:91:
                    a3:7e:29:7d:8e:ee:e6:3f:12:5c:0b:4f:3f:18:6e:
                    06:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E1:09:02:DF:A1:2C:E8:C3:42:7E:02:79:EA:F1:A5:86:3B:B0:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/77b2f57e-d588-3a37-b4ad-da94b0080555.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.crl

            X509v3 Authority Key Identifier:
                keyid:A3:EC:A4:62:68:89:8D:A9:13:14:E8:A6:5D:A4:F9:D8:02:6F:75:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dc5ff8c3-fae5-403f-be02-38072ae2ddc6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d0:34:65:4f:c6:b5:1b:fb:c1:2b:66:cf:d5:70:18:7c:68:f9:
         07:93:9a:e7:83:04:4d:5c:4b:03:b7:b5:49:e5:a3:6c:17:89:
         a2:80:af:dc:3a:e5:c7:e1:b8:61:43:92:88:2b:33:4a:f9:3b:
         40:e5:34:41:48:70:02:51:26:51:f3:23:a1:e6:9e:85:79:6b:
         00:98:f1:bf:36:ea:c1:74:cb:cb:bb:fa:b4:32:15:88:35:80:
         b9:17:72:c7:e5:95:1b:bd:bb:bd:4c:5a:46:22:c7:be:65:73:
         5a:e2:3f:ea:4b:49:f7:7f:65:74:63:dd:6f:34:6d:58:9f:1c:
         79:5d:18:5d:07:7f:df:42:3e:ca:d1:70:c6:31:66:72:e9:aa:
         73:19:c5:59:2a:bd:2d:99:0e:83:a0:3a:5d:0c:f8:9f:0e:4f:
         6a:6c:d8:19:d8:10:35:5d:36:30:32:fd:c1:d3:55:5a:97:20:
         39:e6:ae:51:e6:56:b6:ce:2d:05:8a:64:79:15:1b:9c:2f:79:
         6b:76:fd:91:77:3e:66:6d:74:98:4b:66:85:5e:14:36:64:e5:
         ad:99:3b:cc:b5:93:e0:45:7e:4b:5c:10:08:fc:5b:62:6e:fd:
         48:20:3d:05:6e:72:b8:8a:98:87:d7:53:a9:c7:61:b4:5c:b1:
         75:2c:30:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:56:18 2025 by rpki-client