Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/d6c7e221-42ea-3608-b01c-9a054a7550fe.roa
File:                     d6c7e221-42ea-3608-b01c-9a054a7550fe.roa (raw, json)
Hash identifier:          IhutlgEKxpKL+Kl7AyaceAHzSuHqXhm5IxOjRLkpSKo=
Subject key identifier:   5B:66:F2:4E:90:BD:A8:79:00:7D:63:97:A1:7E:0D:82:24:61:C9:ED
Certificate issuer:       /CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
Certificate serial:       010D0C9F4328584EC371C2A3BF1C10E03B10A740
Authority key identifier: E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/d6c7e221-42ea-3608-b01c-9a054a7550fe.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     33717
IP address blocks:        208.70.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:c2:a3:bf:1c:10:e0:3b:10:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=76667edf-7723-41f4-91f7-05a9af47870b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:da:fc:55:8f:06:62:70:aa:f5:4d:81:9d:d6:
                    33:be:e1:bd:e2:bf:5a:fa:0b:c3:ab:96:0e:eb:5a:
                    27:6d:e2:d2:dd:26:2d:96:b1:c3:26:34:e2:b2:b2:
                    81:f7:be:3c:bc:a5:4d:16:88:f6:ff:25:0c:66:f4:
                    34:61:43:a3:26:9d:50:c5:ed:75:f6:e0:76:61:24:
                    58:c7:c0:a9:03:2a:31:06:7b:2f:19:1b:f0:4f:1d:
                    6c:59:95:f9:f6:61:c8:58:56:f9:8a:37:29:b1:3c:
                    01:6a:0a:e7:f8:7f:ba:c4:eb:b4:2e:48:77:ef:69:
                    44:66:f1:7a:d3:55:4a:77:39:ad:1d:53:7a:d6:ce:
                    80:e7:fe:39:e2:42:03:02:90:be:52:dd:32:53:0b:
                    7b:33:00:9f:fe:12:d7:40:3b:4f:d6:b4:d6:99:85:
                    e6:a6:34:e9:8a:2c:53:77:90:c5:20:45:88:09:a2:
                    14:5a:2f:6e:f8:84:10:37:53:70:ce:74:e1:d9:d5:
                    f2:89:52:6a:9a:86:51:72:0b:02:c4:39:0d:d8:f4:
                    59:74:2f:e5:83:11:af:46:dc:b8:47:c2:cb:18:2d:
                    12:83:bf:28:15:af:78:f5:ba:1f:f6:13:49:52:1c:
                    3c:a0:45:4d:88:89:c0:78:60:d0:28:4b:b6:b1:a5:
                    04:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:66:F2:4E:90:BD:A8:79:00:7D:63:97:A1:7E:0D:82:24:61:C9:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/d6c7e221-42ea-3608-b01c-9a054a7550fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl

            X509v3 Authority Key Identifier:
                keyid:E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:73:aa:d6:27:9f:83:19:01:90:b8:bf:e6:77:a7:e7:1e:a4:
         d7:fb:eb:c7:a7:2b:06:20:d5:9f:de:40:25:65:2f:24:12:2c:
         58:7b:fe:68:9f:b9:76:5d:f3:11:3b:cd:a3:29:14:fb:ce:f6:
         ec:f8:41:83:83:ac:51:73:ab:4a:9d:9c:f3:de:6e:08:11:87:
         fe:1c:aa:cf:76:f0:12:0e:01:fb:61:f7:ce:7d:8d:70:51:bd:
         14:08:6d:ed:2c:ad:7e:03:e3:c4:68:bb:d5:a8:6b:a5:c5:db:
         e5:79:d7:08:9e:bc:bb:fc:64:56:ee:b8:1a:d8:e8:8e:36:d2:
         d5:ca:a3:4f:7d:5a:8a:c6:de:46:c5:5d:96:a7:e7:7e:8b:47:
         73:4c:2d:bb:66:72:bc:ad:2c:f2:ad:ca:0e:b6:04:61:9e:a3:
         69:54:7e:77:a8:9d:00:52:5a:97:3e:bf:8f:86:c3:f7:25:cd:
         d3:e4:29:2b:45:ce:3c:7b:90:ac:6c:ed:3c:84:e1:fc:84:3c:
         ee:fe:ff:5f:8e:80:82:a8:fc:4f:44:fd:d3:4e:9f:ed:0f:65:
         73:c4:70:eb:16:bb:7c:d5:77:60:75:75:63:ec:ce:25:c4:fa:
         05:ee:15:e7:ed:59:53:82:51:6e:d1:f0:b7:15:ec:5a:36:9c:
         93:25:68:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:21:21 2026 by rpki-client