Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/baf50d74-f1d9-36ec-8124-a3df89fd4a1e.roa
File:                     baf50d74-f1d9-36ec-8124-a3df89fd4a1e.roa (raw, json)
Hash identifier:          ZT0Lzjsou5SL/hzPfr0K0VeQZGPRuByNTP6LMUcJpvw=
Subject key identifier:   74:53:81:B6:63:3C:69:6B:C2:98:C7:95:08:98:40:6C:66:D7:DF:7A
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584F27F2550EEE7E6CBFC598BA40
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/baf50d74-f1d9-36ec-8124-a3df89fd4a1e.roa
Signing time:             Sun 13 Sep 2026 01:00:12 +0000
ROA not before:           Sun 13 Sep 2026 01:00:12 +0000
ROA not after:            Sat 12 Dec 2026 02:00:12 +0000
asID:                     35180
IP address blocks:        139.177.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:27:f2:55:0e:ee:7e:6c:bf:c5:98:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Sep 13 01:00:12 2026 GMT
            Not After : Dec 12 02:00:12 2026 GMT
        Subject: CN=1984d509-a31f-41c4-86fa-0e4769cb0517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:77:4c:e1:54:c4:a9:25:de:d4:a9:df:af:6e:
                    64:1a:22:11:fa:26:dc:b6:5f:c6:3a:29:8b:01:a6:
                    20:28:2a:e2:fa:3f:57:bd:60:d2:e6:91:6d:f6:a6:
                    44:9c:64:d6:b7:b4:27:ac:4d:bf:9d:89:42:32:ee:
                    d9:96:1d:0f:a7:5a:81:17:08:79:5d:ef:8d:44:91:
                    f3:29:95:f8:19:97:f1:11:06:ce:ff:03:99:da:00:
                    fd:fb:32:c3:cb:dd:03:f7:ef:31:a7:18:c2:a9:24:
                    63:c3:9d:3f:fb:b4:00:e2:b8:5f:26:84:8e:61:5e:
                    9a:46:7c:74:4b:cc:cd:0d:b3:ca:ae:ba:b8:af:e5:
                    9a:2b:02:99:1d:6d:78:0b:36:87:88:fc:95:8b:73:
                    8a:e0:fb:de:a3:b5:33:83:6a:44:b3:98:6d:0c:08:
                    90:33:43:d4:1e:2a:e6:61:1a:98:d6:eb:90:6e:e7:
                    31:2c:ff:2a:bb:81:b6:d8:ee:1b:73:7d:7d:2f:59:
                    a4:2e:ba:b3:54:f6:62:75:3b:7e:80:3f:62:88:c5:
                    33:5f:15:ac:12:1a:ed:12:3a:91:2b:a5:bc:11:23:
                    c9:3e:02:a7:fb:56:d7:89:8a:31:1b:5e:9e:30:70:
                    09:f4:2a:ec:28:8c:4c:c2:14:69:9f:a8:52:ab:93:
                    90:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:53:81:B6:63:3C:69:6B:C2:98:C7:95:08:98:40:6C:66:D7:DF:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/baf50d74-f1d9-36ec-8124-a3df89fd4a1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:e2:d5:a1:4b:b7:6a:4d:a4:f2:86:6c:c3:f2:1b:c8:5c:c0:
         45:2b:81:38:80:49:29:a3:c7:b6:c9:4a:34:e1:b2:fc:bc:d4:
         68:53:fe:ed:78:72:2e:f2:39:95:06:d2:96:4e:00:a1:dc:4b:
         04:b2:74:06:fb:ef:26:66:e4:26:ad:4c:80:15:d7:8d:16:1c:
         2e:0d:8c:05:e9:b7:e1:b4:f7:aa:f4:b5:30:9f:aa:a5:63:ce:
         c8:7e:b9:51:86:c3:e2:da:84:aa:f4:72:9c:36:c9:14:15:29:
         bb:13:9b:5c:2b:fc:41:dd:0e:5e:a5:c5:2e:9b:0c:5e:dc:ce:
         c9:68:75:02:11:b8:78:51:29:5f:74:5a:a6:c2:e3:39:cf:97:
         4e:fe:f4:51:42:46:3d:67:56:0b:17:16:b5:9b:70:3b:3d:16:
         41:2a:e0:4f:ab:0b:99:0b:93:23:31:d2:98:5a:d6:93:08:b0:
         58:c4:de:a5:a3:f1:f6:e4:7e:a8:3a:9b:ee:01:32:bd:06:3c:
         5c:90:e3:a1:72:6b:23:97:21:71:23:b7:81:70:99:98:7b:ab:
         f5:9a:68:af:ac:f7:ab:d1:bc:1d:61:29:f5:42:fb:0a:d0:9d:
         48:ac:d7:7b:a9:e8:d5:b1:06:09:6e:d2:e2:67:be:9d:15:51:
         01:eb:08:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:26:29 2026 by rpki-client