Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/c3adee4b-e85f-3ceb-a791-e58e571c0c25.roa
File:                     c3adee4b-e85f-3ceb-a791-e58e571c0c25.roa (raw, json)
Hash identifier:          EHNy2AbRXmb8lLHRehK4FPa9yzZSvV8G+t9dLZ9X0gU=
Subject key identifier:   6B:C5:D8:96:A8:EF:65:CE:43:38:0C:DC:CA:58:61:3D:2A:02:D9:96
Certificate issuer:       /CN=dac5cea7-cd25-4a27-9b63-bd82366932b1
Certificate serial:       010D0C9F4328584E6B0A2F0951B7152C19BB67E0
Authority key identifier: F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/c3adee4b-e85f-3ceb-a791-e58e571c0c25.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     396502
IP address blocks:        161.129.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:2f:09:51:b7:15:2c:19:bb:67:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac5cea7-cd25-4a27-9b63-bd82366932b1
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=649b8271-d9c1-4805-b99d-d500fcce71c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7a:43:79:59:98:45:2d:41:9d:e0:ce:4b:1b:
                    60:16:c1:b1:3f:20:6d:0c:47:5e:bf:68:b1:ee:14:
                    ba:00:24:c3:e5:e8:6f:2f:6e:00:4a:8f:e7:6a:59:
                    77:5d:37:1c:14:7d:b7:46:99:b5:99:22:e6:b2:20:
                    78:53:92:d6:b5:42:26:38:f0:52:43:bf:1f:4d:27:
                    7b:06:e3:2b:10:c3:e0:ab:79:f0:15:7a:1d:ef:65:
                    51:1e:03:56:ea:8d:c5:cc:86:6b:5b:84:ee:8a:aa:
                    9c:11:df:ad:e7:02:d8:38:cd:0d:47:7b:ad:2c:59:
                    b0:d8:52:ac:1e:f9:c1:16:bd:ab:50:db:09:19:91:
                    c7:eb:41:7a:42:79:ed:80:ac:33:ad:c8:77:85:5b:
                    b0:e5:bf:d4:4d:b4:dc:59:cf:37:d2:f7:11:f6:0f:
                    7d:df:42:da:50:db:a8:34:cb:39:d7:d0:1e:23:0b:
                    b9:a4:28:09:76:f4:3b:82:6a:33:6d:16:81:30:cc:
                    bd:ba:5d:64:3d:09:c2:51:7e:6b:ce:25:11:61:df:
                    c3:37:4d:33:57:26:53:5b:59:03:79:14:d0:4a:1a:
                    37:d0:92:97:ac:25:7c:a1:05:02:13:ad:5a:df:6f:
                    c5:46:0a:05:5f:68:9c:e3:e1:37:65:25:ac:b3:b0:
                    cd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C5:D8:96:A8:EF:65:CE:43:38:0C:DC:CA:58:61:3D:2A:02:D9:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/c3adee4b-e85f-3ceb-a791-e58e571c0c25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl

            X509v3 Authority Key Identifier:
                keyid:F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:41:30:7f:bb:2d:b8:82:c2:ff:2a:bc:53:2a:fa:bd:48:76:
         67:3d:5d:a0:1e:39:1d:2f:67:29:28:4f:53:ee:ff:a2:bf:a1:
         45:1a:95:96:f0:12:92:e8:91:73:7e:4d:78:f0:48:29:ac:cd:
         dd:2b:4b:9e:8e:e7:a9:25:59:f6:19:0d:36:20:c3:03:a7:67:
         dd:31:30:8f:f3:66:01:ff:f4:c6:e4:90:3c:d4:90:a5:7b:00:
         c3:81:31:09:d3:c2:1d:c0:55:14:d3:a1:fd:5b:c9:b7:a7:24:
         69:81:b9:08:2a:35:bf:ca:f6:18:4b:4c:fa:15:0d:b0:cf:f5:
         98:91:20:fb:ff:97:b6:4e:61:a0:dd:e8:69:12:3a:24:a3:d2:
         de:84:38:ca:0a:4e:05:03:2e:eb:26:b7:37:d7:01:9a:da:76:
         61:1b:13:b4:7e:a8:ff:ce:fa:63:a5:6b:da:82:75:92:88:d3:
         69:44:c1:4b:9a:d9:57:c1:69:79:4d:44:0d:74:bc:ba:49:05:
         0f:5c:f1:b8:6a:69:37:e5:e8:f0:38:44:b8:27:70:b0:ac:18:
         e1:6c:92:79:56:86:4a:e4:08:ad:f8:d0:e1:f4:ce:42:8b:d0:
         9d:7e:aa:80:8a:ec:9e:76:76:bb:bf:4d:52:1e:44:a9:f5:c4:
         f8:3a:f5:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rCi8JUbcVLBm7Z+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGFjNWNlYTctY2QyNS00YTI3LTliNjMtYmQ4MjM2Njkz
MmIxMB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk
NjQ5YjgyNzEtZDljMS00ODA1LWI5OWQtZDUwMGZjY2U3MWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3pDeVmYRS1BneDOSxtgFsGxPyBtDEdev2ix
7hS6ACTD5ehvL24ASo/nall3XTccFH23Rpm1mSLmsiB4U5LWtUImOPBSQ78fTSd7
BuMrEMPgq3nwFXod72VRHgNW6o3FzIZrW4TuiqqcEd+t5wLYOM0NR3utLFmw2FKs
HvnBFr2rUNsJGZHH60F6QnntgKwzrch3hVuw5b/UTbTcWc830vcR9g9930LaUNuo
NMs519AeIwu5pCgJdvQ7gmozbRaBMMy9ul1kPQnCUX5rziURYd/DN00zVyZTW1kD
eRTQSho30JKXrCV8oQUCE61a32/FRgoFX2ic4+E3ZSWss7DNvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGvF2Jao72XOQzgM3MpYYT0qAtmWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kYWM1
Y2VhNy1jZDI1LTRhMjctOWI2My1iZDgyMzY2OTMyYjEvYzNhZGVlNGItZTg1Zi0z
Y2ViLWE3OTEtZTU4ZTU3MWMwYzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGFjNWNlYTctY2QyNS00YTI3LTli
NjMtYmQ4MjM2NjkzMmIxL2RhYzVjZWE3LWNkMjUtNGEyNy05YjYzLWJkODIzNjY5
MzJiMS5jcmwwHwYDVR0jBBgwFoAU+JBSGwgPViIKwWgKRaFYd8tXPl4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9kYWM1Y2VhNy1jZDI1LTRhMjctOWI2My1iZDgy
MzY2OTMyYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYFNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABpBMH+7LbiCwv8qvFMq+r1Idmc9XaAeOR0vZykoT1Pu/6K/oUUalZbw
EpLokXN+TXjwSCmszd0rS56O56klWfYZDTYgwwOnZ90xMI/zZgH/9MbkkDzUkKV7
AMOBMQnTwh3AVRTTof1bybenJGmBuQgqNb/K9hhLTPoVDbDP9ZiRIPv/l7ZOYaDd
6GkSOiSj0t6EOMoKTgUDLusmtzfXAZradmEbE7R+qP/O+mOla9qCdZKI02lEwUua
2VfBaXlNRA10vLpJBQ9c8bhqaTfl6PA4RLgncLCsGOFsknlWhkrkCK340OH0zkKL
0J1+qoCK7J52dru/TVIeRKn1xPg69eM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:23:44 2026 by rpki-client