Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/eaef6dbe-f183-3b39-bbd6-a66371fd8ae5.roa
File:                     eaef6dbe-f183-3b39-bbd6-a66371fd8ae5.roa (raw, json)
Hash identifier:          mPkKtn7w2HOCTbRtRzozELIblPaUDceq/EIizKEI3dA=
Subject key identifier:   2A:9F:C0:26:BF:79:CE:9D:26:C7:37:E2:02:98:B7:15:82:0A:C2:96
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584D386A25C11DF80B23E63AE700
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/eaef6dbe-f183-3b39-bbd6-a66371fd8ae5.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     398699
IP address blocks:        139.177.82.0/24 maxlen: 24
                          139.177.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:25:c1:1d:f8:0b:23:e6:3a:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=3c727132-f1e9-460c-b02d-b8f2e11a240b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:02:f1:e1:e0:96:d4:09:7f:7b:3e:38:18:60:
                    70:94:b4:09:97:6f:21:40:87:74:ce:76:8a:e5:dd:
                    b4:03:4b:6d:cc:57:e6:f1:80:50:a4:0e:9d:e2:4e:
                    c6:fd:b2:d4:ab:4c:90:2f:c2:78:04:f4:ce:51:98:
                    b3:ab:c1:21:a0:9d:4b:18:7d:ad:87:a8:05:e2:20:
                    57:42:fc:2d:5a:6b:4e:2a:0b:0a:80:1b:49:14:4e:
                    52:54:d2:d7:f3:71:d5:d7:fa:0e:ef:4b:82:44:37:
                    ee:ad:da:b1:57:36:81:5d:a7:9b:92:1e:b2:4f:6c:
                    af:a7:70:f9:80:3a:8a:3e:3c:f9:ea:7c:0b:09:17:
                    14:53:b2:f8:ac:af:f9:0d:8c:23:19:6c:c6:df:93:
                    50:e5:68:96:7b:a0:6f:85:4b:29:10:e8:8a:50:5a:
                    01:66:a7:8e:3e:69:a8:0f:78:6f:5e:fb:85:23:05:
                    f2:45:28:e8:0e:19:f7:50:59:08:3c:f4:55:c6:3f:
                    eb:dc:96:d9:37:cd:c0:9b:48:25:2b:b4:9e:b3:7a:
                    e0:c3:cf:53:89:c6:9a:10:3f:cd:ab:15:42:a9:0f:
                    61:16:74:5e:55:8e:ef:a1:4c:65:ac:9d:60:cd:da:
                    96:b0:f0:ed:6d:55:de:0e:24:a3:63:09:07:c0:e8:
                    10:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9F:C0:26:BF:79:CE:9D:26:C7:37:E2:02:98:B7:15:82:0A:C2:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/eaef6dbe-f183-3b39-bbd6-a66371fd8ae5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:26:bd:8a:fb:11:2b:de:ae:3e:7d:46:64:a4:04:d4:8e:c0:
         ee:9b:b3:e8:dd:79:bb:10:06:02:be:b5:09:fc:3e:fd:0f:91:
         33:13:4f:77:ea:59:70:52:bf:44:6f:51:a5:16:fa:1b:55:63:
         21:f7:43:ee:f0:75:d6:6d:5d:ae:81:4b:f4:17:62:99:ac:6d:
         c7:34:77:eb:24:94:9a:3b:2b:04:0e:bd:98:82:83:57:c9:ab:
         7e:ea:a8:37:12:2b:f2:ed:28:a2:9a:5b:38:bd:68:49:ca:5b:
         6c:35:ef:05:9f:d7:ab:ca:14:17:80:a7:cc:60:e8:ec:f6:35:
         84:53:d4:c4:bb:39:38:6d:71:6f:d9:b0:22:c1:ec:0c:7b:20:
         03:bd:ce:ad:4a:28:f2:6b:98:36:e3:8b:35:2f:ec:ee:4a:73:
         86:f1:4b:1d:bc:94:fb:51:e3:89:90:c1:ea:61:c3:45:1c:36:
         9f:fc:94:1d:5d:06:15:85:78:4a:b4:16:10:42:b1:fd:53:45:
         59:b2:0e:80:46:75:b9:d9:45:c3:dd:be:f1:27:f8:c3:e8:ec:
         80:8e:aa:9b:77:1c:3a:aa:a8:66:c5:1b:a0:e5:e4:f6:2a:4a:
         69:0c:06:71:44:19:c2:92:e5:b1:4c:8a:e7:c3:3c:1b:15:dd:
         f9:ab:8b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:05:41 2026 by rpki-client