Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/82cfd18e-d980-3672-8e95-948020976b8e.roa
File:                     82cfd18e-d980-3672-8e95-948020976b8e.roa (raw, json)
Hash identifier:          HoErVdwq5p8OC51uhxli1n8pE0z5No9RhJM2YMFBY+c=
Subject key identifier:   63:D4:96:0A:53:A1:8C:E0:A1:CE:64:31:80:26:C4:60:B4:58:FC:A3
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584D2D3F7BCA9C670711668FC000
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/82cfd18e-d980-3672-8e95-948020976b8e.roa
Signing time:             Sun 15 Mar 2026 13:00:41 +0000
ROA not before:           Sun 15 Mar 2026 13:00:41 +0000
ROA not after:            Sat 13 Jun 2026 13:00:41 +0000
asID:                     31898
IP address blocks:        170.114.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2d:3f:7b:ca:9c:67:07:11:66:8f:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Mar 15 13:00:41 2026 GMT
            Not After : Jun 13 13:00:41 2026 GMT
        Subject: CN=f4d9f077-2470-429e-bc09-829008942fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4a:6c:48:d8:5b:64:af:78:81:67:9a:b4:c5:
                    1f:f8:5f:fd:a8:6f:4a:26:b0:dd:a4:61:f5:ff:05:
                    10:cf:4c:16:11:98:5f:3e:01:7f:cf:e7:7c:88:a8:
                    08:15:bf:f7:ef:fa:3b:17:a6:b4:0e:95:6c:b5:da:
                    2c:af:fd:c2:03:a2:84:e4:95:76:49:11:02:c8:5f:
                    89:b2:53:79:0f:f6:4d:e2:65:a2:6a:87:2e:dd:28:
                    c2:2b:87:d4:8c:4d:9b:16:3d:a1:7d:83:1d:f0:7d:
                    6f:ab:47:a3:de:58:d4:dc:54:fb:a5:bf:04:04:26:
                    b0:8c:34:64:34:60:3f:ec:13:8c:e7:71:7f:2f:85:
                    0e:fe:66:19:2b:74:8f:2e:92:b2:9e:0c:7f:f9:91:
                    e7:c1:ee:0c:e1:6f:de:0f:7c:50:6f:ad:21:80:26:
                    ff:c9:f2:e2:ab:82:48:18:23:b3:3d:b7:77:1c:21:
                    6d:9c:10:f4:0f:e6:19:e2:f4:a6:89:aa:00:9d:08:
                    58:17:89:53:cb:88:a2:f8:cc:bf:05:47:a3:6c:a8:
                    c9:b6:3f:e7:f0:20:0d:40:a1:22:2f:ef:2e:32:94:
                    85:82:47:4d:d9:71:d3:4b:4a:21:1f:66:0e:b4:4b:
                    32:0a:0b:55:ea:c4:9f:88:95:e5:25:ef:d6:f2:31:
                    4f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D4:96:0A:53:A1:8C:E0:A1:CE:64:31:80:26:C4:60:B4:58:FC:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/82cfd18e-d980-3672-8e95-948020976b8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:b6:5b:1b:ab:ea:3a:b9:df:e5:b0:73:9c:f1:84:90:44:85:
         4c:fc:80:3c:4e:3b:35:52:09:e5:eb:2c:44:37:77:97:74:00:
         aa:cf:b8:24:c4:60:37:aa:cd:55:35:3a:b0:a9:c7:f5:67:2f:
         ad:d8:5e:a5:04:26:72:91:d7:63:2f:87:56:2e:55:b6:43:54:
         c4:b0:c4:17:8e:17:94:06:f5:6b:47:9e:63:10:22:2a:52:38:
         bf:b7:f6:d5:31:d9:71:ca:08:1c:57:fb:7b:fb:1c:1d:8a:d1:
         a2:3f:14:b6:e8:95:53:4b:31:79:b0:8f:87:3f:32:23:70:7d:
         44:03:70:23:e7:52:22:21:2d:9a:bb:28:aa:bf:85:f8:9b:bc:
         5e:33:aa:83:5e:bd:1b:9c:62:94:ef:e7:cc:20:8b:7a:54:14:
         4c:00:50:8f:34:7d:94:7b:a6:1f:38:d4:03:96:f3:ec:94:b3:
         a9:29:9c:78:8a:95:68:c2:97:2f:e1:63:7e:33:b6:7b:e6:35:
         6c:3a:0b:a0:5e:8b:e8:12:da:ba:a7:81:dd:2f:2b:fb:db:ee:
         0f:45:5d:4d:9f:c7:4c:65:e2:51:6e:98:b8:c9:73:8e:aa:f6:
         ef:6b:3a:69:5f:e8:b5:f6:ad:15:22:f5:9e:af:80:d0:14:3e:
         31:fe:84:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:28:23 2026 by rpki-client