Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/56b77f78-85c5-3e37-9902-ba0931abac6a.roa
File:                     56b77f78-85c5-3e37-9902-ba0931abac6a.roa (raw, json)
Hash identifier:          Lp7oWgJffNAlBYhRqZk90M2Mp8hWEM9Ws0L9R924A7Y=
Subject key identifier:   87:8C:79:38:E8:9C:ED:A3:B1:E8:05:D3:7C:D2:9D:27:DA:35:72:82
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640F52BFDA55C76E9B957780
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/56b77f78-85c5-3e37-9902-ba0931abac6a.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     577
IP address blocks:        198.235.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:52:bf:da:55:c7:6e:9b:95:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=7a79327f-9d63-4f1c-89d2-e9e4603fe315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8c:9b:f7:e4:55:f1:e9:dd:a3:07:fd:03:7c:
                    8f:71:99:03:f1:6b:3a:65:2c:01:ba:d3:86:2d:f8:
                    c2:95:bf:34:2e:64:b5:af:62:9d:bb:a0:10:21:85:
                    d4:d8:01:5c:69:42:b5:65:1c:39:eb:dc:18:bb:73:
                    9f:b6:8c:c1:1c:e7:50:14:e0:04:90:1f:f0:2c:07:
                    89:1b:9b:ac:e8:38:72:6e:c5:e2:c8:4f:f0:76:d7:
                    2a:2a:3d:01:05:82:26:2f:33:5a:11:e2:a6:44:9a:
                    c0:2d:4f:f3:5a:57:8e:05:39:fa:4e:cb:a8:b4:ad:
                    f8:e3:e6:d4:e6:3d:57:0c:33:5a:96:04:b4:4d:d3:
                    e4:b8:2e:ae:d2:78:b7:d4:24:99:52:15:ce:ed:7c:
                    53:d0:33:96:fa:04:9a:0c:d5:17:b2:7e:cc:ea:95:
                    6c:9a:67:5a:a5:d8:16:21:e7:db:a4:04:61:6b:26:
                    7b:a9:88:dc:3e:66:39:ac:1d:f4:ac:7c:96:a0:1b:
                    7f:bd:65:b6:41:ec:71:f2:18:22:57:3d:f6:65:2e:
                    9c:1a:53:16:db:94:71:d4:65:1e:2f:a1:e2:2b:82:
                    94:61:f6:04:26:b0:15:95:c0:13:28:23:7d:26:1d:
                    34:52:1d:7d:71:36:ea:be:ce:ff:c2:e7:53:ff:64:
                    20:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8C:79:38:E8:9C:ED:A3:B1:E8:05:D3:7C:D2:9D:27:DA:35:72:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/56b77f78-85c5-3e37-9902-ba0931abac6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.235.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:cd:41:28:8e:75:ad:89:91:8e:0d:a9:e1:03:0a:98:da:9e:
         88:a5:4d:71:fc:4e:15:c8:a5:0c:fc:04:52:ce:c8:f2:83:7b:
         17:f3:2b:42:2c:b0:c6:30:82:cb:c7:10:1e:91:4c:5c:36:f2:
         4a:0a:0a:78:3f:61:e6:47:22:9c:cd:e6:6f:ee:89:8b:30:3f:
         04:04:05:07:bf:2d:a2:ff:61:af:aa:26:73:3d:38:80:5e:25:
         9d:e9:f9:8e:81:34:2a:57:37:f5:58:13:39:d5:17:f0:4c:ef:
         10:26:4c:d5:ba:b8:9e:fe:a1:ea:7b:f9:0e:bf:ec:59:fd:17:
         99:24:8e:8d:33:a5:38:ca:19:36:c9:3e:ca:74:a1:90:c0:d9:
         12:f4:7c:35:26:8a:b6:9d:c3:25:84:41:b0:21:7a:13:1e:50:
         c8:e9:d8:d3:b1:7a:dd:68:43:96:d6:73:37:51:09:2f:74:dc:
         67:8c:03:48:ec:a7:a2:a5:b5:37:43:e3:35:f7:65:91:b8:e1:
         a1:56:a1:ed:e0:1b:2e:44:b1:91:c1:f4:f8:41:24:78:3e:bd:
         0b:7a:b2:72:cc:4b:17:e6:4a:3d:ed:f9:ad:3e:ce:51:61:bc:
         a7:33:93:72:49:49:11:d0:7a:8e:19:df:55:c9:bc:1a:6f:ac:
         42:c7:36:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:56:27 2026 by rpki-client