Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/b304990c-ce3f-3a3c-8cdc-1bcef8506c06.roa
File:                     b304990c-ce3f-3a3c-8cdc-1bcef8506c06.roa (raw, json)
Hash identifier:          7mEr9uax1IQhD8BHzpNM5ILN1vSw7KHk9cTKNH2fa6Q=
Subject key identifier:   FE:FA:B6:E3:53:0C:0D:70:68:A3:36:81:B6:CF:0D:21:20:75:58:C7
Certificate issuer:       /CN=664e4c51-f7b5-453e-a7b0-8081a6404662
Certificate serial:       010D0C9F4328584E7D2F7E48D3D97AC33DFE7100
Authority key identifier: AE:05:4A:9B:BB:A9:94:F0:70:AC:83:1B:55:05:B4:5D:05:E3:C4:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/b304990c-ce3f-3a3c-8cdc-1bcef8506c06.roa
Signing time:             Mon 13 Jul 2026 21:00:12 +0000
ROA not before:           Mon 13 Jul 2026 21:00:12 +0000
ROA not after:            Sun 11 Oct 2026 21:00:12 +0000
asID:                     62731
IP address blocks:        169.197.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/664e4c51-f7b5-453e-a7b0-8081a6404662.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/664e4c51-f7b5-453e-a7b0-8081a6404662.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7d:2f:7e:48:d3:d9:7a:c3:3d:fe:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=664e4c51-f7b5-453e-a7b0-8081a6404662
        Validity
            Not Before: Jul 13 21:00:12 2026 GMT
            Not After : Oct 11 21:00:12 2026 GMT
        Subject: CN=4f6f83f8-1e18-45d2-b997-ecf0e230400b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a7:12:92:7d:da:1c:42:c3:4a:a4:2d:dd:52:
                    e4:f2:e7:40:72:3d:06:d6:5d:ff:ba:b2:12:31:5a:
                    04:c1:2e:16:7a:01:00:d2:79:52:91:ea:29:c0:ad:
                    a6:f0:aa:1e:b5:97:e3:f0:fc:58:98:8e:df:04:9f:
                    a4:66:38:aa:cd:e2:95:59:21:8e:91:0a:de:cb:5b:
                    5a:52:66:6e:fd:33:f8:06:46:b1:d0:f9:c2:0b:f1:
                    68:ca:f8:cd:8e:4c:55:7d:7b:69:6c:31:03:a3:d5:
                    02:b2:5a:a0:c0:4d:d1:be:9a:11:ea:68:c9:20:e0:
                    7e:a7:4a:fb:47:46:ff:c5:a5:86:56:f7:cb:2f:4c:
                    d5:d9:71:d1:09:15:6f:d9:ad:0b:cc:3e:22:a9:bd:
                    98:ee:20:80:8e:04:b5:cc:2b:0d:05:64:47:f1:8d:
                    45:c9:ff:69:69:f4:01:e0:bf:8c:44:d1:6a:ef:10:
                    75:8d:b9:b2:c0:4c:a0:61:69:5b:24:98:86:da:33:
                    54:7f:f7:c0:38:96:09:48:1e:f3:d4:57:7b:d3:c8:
                    45:55:24:6d:35:55:a9:a9:4c:f1:90:2e:be:2f:3f:
                    d3:fb:f9:1e:eb:d3:f1:a1:e7:1f:f9:15:31:ff:f0:
                    22:b6:e4:80:f2:12:ed:6b:3a:39:6b:fb:24:e0:e3:
                    bf:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:FA:B6:E3:53:0C:0D:70:68:A3:36:81:B6:CF:0D:21:20:75:58:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/b304990c-ce3f-3a3c-8cdc-1bcef8506c06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/664e4c51-f7b5-453e-a7b0-8081a6404662.crl

            X509v3 Authority Key Identifier:
                keyid:AE:05:4A:9B:BB:A9:94:F0:70:AC:83:1B:55:05:B4:5D:05:E3:C4:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.197.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:70:ba:6c:4b:81:ec:5a:a4:15:c9:3b:65:24:e3:3e:b6:d8:
         30:01:de:e1:a2:4c:d5:82:9f:f5:ea:3d:61:a5:36:75:da:dc:
         45:4c:1b:a2:25:de:53:0b:cf:4b:80:76:23:1d:4a:e8:51:5f:
         c5:c3:d0:d8:5e:84:2a:ef:6a:66:81:4c:b1:da:64:25:e8:26:
         44:0c:7b:82:02:96:79:58:6d:e2:d1:5b:c8:ca:d3:fc:4c:c6:
         87:73:d0:3a:76:99:23:39:13:44:7c:9a:7d:e6:8e:0b:2f:6d:
         0d:94:19:a7:6b:fd:69:ca:76:6a:50:d2:39:30:e9:b9:51:5e:
         72:a1:80:4e:76:5a:6c:59:6d:29:82:5a:c2:ac:53:31:62:b2:
         06:3c:23:60:65:35:0e:2b:c8:d6:5a:26:ba:88:37:38:5b:11:
         1d:bd:ca:ae:75:c3:fc:95:39:a0:43:5d:c1:4c:16:d5:71:f4:
         59:01:c2:a9:7d:a6:5c:be:b9:87:e3:0d:cc:d3:bb:80:5a:d4:
         56:0f:1e:88:f7:a5:e1:cc:1e:27:a9:82:d1:5b:5a:c8:f8:a4:
         54:0c:4b:93:d5:1e:fd:d0:12:c6:8a:cf:e3:83:00:d7:be:b6:
         1a:62:63:01:d3:19:a8:2d:50:6f:04:13:c6:86:ec:29:35:17:
         51:84:2b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:14:45 2026 by rpki-client