Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/816d777b-00c5-4092-8137-58d07034f145/0b77ff5e-b0d3-32ff-b6c0-468133b2878d.roa
File:                     0b77ff5e-b0d3-32ff-b6c0-468133b2878d.roa (raw, json)
Hash identifier:          5oRCXLPcS7eZlkpo58xXk68gZWyJR2v2RYEMdFZ4S08=
Subject key identifier:   71:96:1E:65:2E:C4:A3:5F:3B:83:6B:F6:5D:60:9B:0E:4A:C2:BE:57
Certificate issuer:       /CN=816d777b-00c5-4092-8137-58d07034f145
Certificate serial:       010D0C9F4328584F5E62E6AC62622E5994B55C80
Authority key identifier: F5:90:E5:51:5F:54:E5:2A:1E:3C:30:7D:9E:4A:88:37:D1:5C:9D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/816d777b-00c5-4092-8137-58d07034f145.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/816d777b-00c5-4092-8137-58d07034f145/0b77ff5e-b0d3-32ff-b6c0-468133b2878d.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     402084
IP address blocks:        142.249.31.0/24 maxlen: 24
                          209.135.147.0/24 maxlen: 24
                          2606:2a80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/816d777b-00c5-4092-8137-58d07034f145/816d777b-00c5-4092-8137-58d07034f145.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/816d777b-00c5-4092-8137-58d07034f145/816d777b-00c5-4092-8137-58d07034f145.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/816d777b-00c5-4092-8137-58d07034f145.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:e6:ac:62:62:2e:59:94:b5:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816d777b-00c5-4092-8137-58d07034f145
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=2e678541-b9ff-4636-b67c-51b260ca83fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:76:26:7d:61:c7:95:5a:6c:55:54:1e:be:c7:
                    12:2b:f3:9b:e5:05:30:91:2c:61:d3:32:c5:a0:7e:
                    b7:b3:da:1d:90:fd:e7:57:ee:2e:73:fa:46:e7:2d:
                    e6:7e:d3:b0:63:5d:7e:f4:0d:fd:ad:bb:64:b1:bd:
                    a8:f1:55:f4:8d:c7:51:e8:53:f4:08:36:6f:6c:88:
                    56:05:eb:50:cf:a9:06:39:3b:cf:2e:5b:7c:8e:57:
                    09:a5:b0:87:58:93:fe:26:6c:8c:38:b9:b0:42:07:
                    53:70:b9:86:bd:96:25:fa:4e:26:f0:02:ae:91:eb:
                    d9:99:a7:95:be:16:18:fd:c2:84:be:9a:48:2f:76:
                    a1:a5:48:4b:73:92:95:98:5e:31:71:0c:25:80:69:
                    cb:6b:da:47:50:60:d2:72:3b:90:c9:62:f3:aa:37:
                    34:4a:aa:79:49:75:76:ed:04:3a:f5:07:53:be:af:
                    d2:f3:95:41:1c:af:86:1f:6c:7d:2f:55:37:1d:de:
                    96:5f:ec:02:31:63:ca:c9:fb:a1:79:f6:53:f7:6c:
                    0c:e4:e6:28:8f:b8:ea:e9:e0:83:bf:bd:80:64:32:
                    af:1b:66:ec:08:29:38:95:ab:b3:81:73:e1:20:46:
                    f2:47:74:94:04:ee:78:fc:a0:16:86:fb:d7:d5:5c:
                    ee:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:96:1E:65:2E:C4:A3:5F:3B:83:6B:F6:5D:60:9B:0E:4A:C2:BE:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/816d777b-00c5-4092-8137-58d07034f145/0b77ff5e-b0d3-32ff-b6c0-468133b2878d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/816d777b-00c5-4092-8137-58d07034f145/816d777b-00c5-4092-8137-58d07034f145.crl

            X509v3 Authority Key Identifier:
                keyid:F5:90:E5:51:5F:54:E5:2A:1E:3C:30:7D:9E:4A:88:37:D1:5C:9D:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/816d777b-00c5-4092-8137-58d07034f145.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.31.0/24
                  209.135.147.0/24
                IPv6:
                  2606:2a80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:f8:52:d0:2e:3f:4f:8a:96:1e:35:e0:b0:25:c9:84:ab:1a:
         e3:31:f0:2e:60:a3:46:1a:f4:3b:9f:25:a8:d7:db:4e:68:9d:
         a3:dc:bf:74:42:e8:bf:96:56:3d:b1:ad:25:a4:c3:d4:e8:8d:
         4f:f1:41:58:c6:9a:2a:e5:37:a4:f1:d4:11:2e:de:bf:6d:50:
         5a:36:39:1e:7b:7f:4b:41:7f:ba:4f:6d:52:73:7d:e1:ee:3b:
         95:0e:1c:43:e8:d2:da:db:a6:bb:c5:f0:85:24:23:c0:cf:19:
         02:b0:13:24:2c:24:5b:b3:18:79:40:6f:56:3b:8f:dc:8e:1c:
         c2:2c:00:84:ed:e7:2c:6d:3f:dc:00:41:75:b2:52:c8:aa:f3:
         d0:fe:c5:38:f5:2d:29:8e:eb:98:06:4e:1c:61:a4:62:7c:1b:
         f5:4b:b9:0b:43:03:e9:c7:15:f7:31:27:7a:ca:e8:dc:4b:df:
         c1:aa:5a:85:bf:cf:56:9b:e5:ad:46:00:bf:c0:03:7d:84:99:
         29:57:a8:60:88:49:13:3e:1d:5c:3a:33:61:27:06:b8:af:7f:
         7e:a4:b0:f4:fb:d4:45:69:a4:97:1e:d8:82:9d:87:b4:e5:05:
         08:cf:8b:12:be:da:f7:d3:b1:a3:15:21:ec:ab:ef:5a:ef:82:
         f2:3c:df:c9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Oct 6 22:09:52 2026 by rpki-client