Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eb0455e-053d-4489-9bbe-feb693df63c7/da3f8644-f756-351d-95f1-c812f7da7ba4.roa
File:                     da3f8644-f756-351d-95f1-c812f7da7ba4.roa (raw, json)
Hash identifier:          ES8ae6//sgGxzT0EggD0F9M9R7XUKTNmKau2hBvR0Yg=
Subject key identifier:   58:9F:35:18:87:08:C2:04:10:80:15:31:D8:01:4F:65:2C:64:B1:60
Certificate issuer:       /CN=8eb0455e-053d-4489-9bbe-feb693df63c7
Certificate serial:       010D0C9F4328584CAE5E8570CC5B402F54FE3600
Authority key identifier: CC:C1:0A:0D:92:6E:4A:8E:42:AC:37:CB:56:18:39:DE:DA:C3:31:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eb0455e-053d-4489-9bbe-feb693df63c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eb0455e-053d-4489-9bbe-feb693df63c7/da3f8644-f756-351d-95f1-c812f7da7ba4.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     55044
IP address blocks:        204.77.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eb0455e-053d-4489-9bbe-feb693df63c7/8eb0455e-053d-4489-9bbe-feb693df63c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eb0455e-053d-4489-9bbe-feb693df63c7/8eb0455e-053d-4489-9bbe-feb693df63c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eb0455e-053d-4489-9bbe-feb693df63c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:85:70:cc:5b:40:2f:54:fe:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eb0455e-053d-4489-9bbe-feb693df63c7
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=eb17e820-731b-4c8e-915b-e0259dc81d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:34:2b:81:72:d9:d0:df:a7:80:70:ea:41:5f:
                    28:2f:35:7b:6c:23:af:cf:8a:5f:d9:70:85:ff:ff:
                    ec:4c:8d:a1:af:ed:ac:3f:10:42:72:fc:7a:6b:86:
                    3e:1d:db:44:a9:29:56:ce:1f:47:09:b3:21:df:f4:
                    58:81:a2:9c:e1:e4:54:81:2b:06:ae:1f:ab:2c:d9:
                    e9:36:09:a9:b6:89:bb:e1:46:43:88:d8:70:fe:53:
                    d9:5b:21:89:1b:d2:e8:0f:cd:d6:22:55:55:2b:b9:
                    d5:61:9e:d5:b2:97:05:58:ef:ab:5c:1b:96:3d:f6:
                    af:09:3f:57:50:a3:5a:f8:11:d7:f0:f3:f0:98:48:
                    8c:d1:0e:61:73:97:a6:03:84:91:ab:1f:b5:ad:c0:
                    40:93:7d:68:d7:f1:fe:76:fe:19:fb:0e:14:45:1d:
                    74:20:97:e3:9d:78:a8:e4:8b:dd:52:fe:29:81:07:
                    86:40:71:37:16:4a:13:1a:b7:9d:b2:92:2a:54:45:
                    d5:c3:36:c8:37:3c:db:ec:c8:7c:fe:78:fe:01:b4:
                    99:ff:a8:ce:35:a1:46:c8:03:84:01:7e:50:ec:38:
                    80:be:86:5e:af:55:bb:7c:26:e9:d3:d0:51:48:8c:
                    de:74:5f:62:96:01:00:e4:25:0e:1c:20:81:12:24:
                    c2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9F:35:18:87:08:C2:04:10:80:15:31:D8:01:4F:65:2C:64:B1:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eb0455e-053d-4489-9bbe-feb693df63c7/da3f8644-f756-351d-95f1-c812f7da7ba4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eb0455e-053d-4489-9bbe-feb693df63c7/8eb0455e-053d-4489-9bbe-feb693df63c7.crl

            X509v3 Authority Key Identifier:
                keyid:CC:C1:0A:0D:92:6E:4A:8E:42:AC:37:CB:56:18:39:DE:DA:C3:31:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eb0455e-053d-4489-9bbe-feb693df63c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.77.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:3c:03:54:31:db:0b:4e:9a:3c:a1:13:c9:1e:eb:79:4c:60:
         94:58:23:bd:c3:de:66:ce:95:e5:c8:b6:90:77:6c:f1:8e:32:
         bc:9e:cd:e4:52:ce:3f:87:99:28:87:06:d2:74:a8:b8:c4:99:
         55:19:3e:8f:37:42:33:23:b1:70:32:c7:7f:b9:05:b0:8e:dd:
         b1:1b:32:38:5e:97:09:a4:4d:1f:b2:54:2b:e8:16:eb:30:ec:
         96:96:1e:3d:1f:0c:ea:ba:d9:7c:5d:25:f3:c8:fb:5b:73:3d:
         90:5e:4a:0e:71:bd:66:f6:98:df:91:ac:d9:7c:00:db:c0:84:
         34:38:82:00:3a:01:c1:88:96:e6:c4:e7:1f:8c:55:be:db:e5:
         88:77:64:32:b2:ce:49:86:45:f8:7c:e4:f0:c1:a5:d8:db:b5:
         fb:b2:ff:c6:c7:7e:c5:16:44:3d:e9:8e:1c:df:0d:39:64:51:
         fa:2c:83:88:3d:80:36:3e:6e:5e:ab:5f:16:44:75:5d:fe:ed:
         d1:04:b4:8e:d8:55:74:f8:a4:0f:4a:b4:c4:65:28:09:3b:2e:
         55:8f:11:c4:81:e9:2d:af:aa:6d:ca:1d:a9:3c:02:13:a5:e8:
         6b:9e:5f:14:f7:32:c9:a2:a9:73:bc:5c:8f:ee:55:4c:ca:95:
         80:1d:c4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 21:41:53 2026 by rpki-client