Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/77385484-ead0-3641-8864-f230513fc039.roa
File:                     77385484-ead0-3641-8864-f230513fc039.roa (raw, json)
Hash identifier:          90i/fOriwMY7ygFCj3QuIqiaYKxcYTXET13k6x2/WTg=
Subject key identifier:   78:C1:A7:0F:85:29:68:0F:E2:BD:82:1E:8D:A2:DD:82:E5:22:AD:21
Certificate issuer:       /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
Certificate serial:       010D0C9F4328584EA79B28DA348B2CB852AAFD90
Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/77385484-ead0-3641-8864-f230513fc039.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13335
IP address blocks:        137.66.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:28:da:34:8b:2c:b8:52:aa:fd:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b7cf31f2-65a6-4241-a370-e0263b81e34c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:dc:d8:67:f6:85:ed:15:32:fc:17:7a:b9:51:
                    c8:41:4c:8f:06:36:6d:07:f2:c9:af:cf:aa:10:33:
                    e8:7e:e0:b5:ce:d5:64:37:12:20:51:c8:76:ab:b0:
                    2d:27:f6:58:58:42:63:14:80:b3:14:8d:99:4e:ee:
                    3e:cf:fd:45:69:83:51:1f:74:a8:70:95:17:8f:c0:
                    b9:92:31:41:e3:b4:a8:af:9a:0a:59:21:8d:46:e0:
                    e0:0e:01:22:d9:f0:9f:56:02:23:7e:2d:26:f5:61:
                    50:35:a3:8d:51:b2:c5:fa:c9:74:84:2b:32:46:11:
                    48:bf:7f:fd:1a:0e:01:2d:95:4a:4e:44:a6:8a:b9:
                    8d:b6:76:69:c7:a1:7a:5d:d2:a4:fb:c7:98:f2:c7:
                    ed:3c:fc:13:22:d2:b5:8e:f3:d5:0a:f7:8f:88:ae:
                    bf:88:46:3b:bd:8f:3b:eb:9c:96:9b:8b:5e:ae:40:
                    ff:4c:9c:3f:45:44:27:24:19:8e:f7:ae:bd:ea:94:
                    ee:9a:58:4e:f8:28:d7:56:2f:05:0b:5f:13:68:c7:
                    63:17:83:d6:09:ca:d3:a8:2b:c3:1c:82:70:af:35:
                    88:0b:b5:f6:3a:17:12:77:78:6a:41:22:15:97:e9:
                    06:0d:c3:98:67:66:de:ab:e2:ee:f2:37:c5:65:e4:
                    ae:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C1:A7:0F:85:29:68:0F:E2:BD:82:1E:8D:A2:DD:82:E5:22:AD:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/77385484-ead0-3641-8864-f230513fc039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl

            X509v3 Authority Key Identifier:
                keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.66.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:fb:7e:a4:99:a8:6d:78:7c:a7:23:ca:c4:67:fc:bb:0e:e4:
         65:ac:bf:6f:29:97:e5:1d:11:17:ee:3e:41:21:9e:bd:67:21:
         66:63:ab:b4:1a:52:22:c7:e4:ff:57:d3:93:8d:14:4c:52:8d:
         f3:a7:fa:01:7f:3f:5c:58:b7:b7:21:ac:58:a0:cb:b6:09:5d:
         4c:da:59:ac:82:4b:f4:32:08:4e:04:7f:36:8e:71:39:4e:f4:
         d1:4d:c4:8b:f8:c3:12:1c:62:af:20:8d:cd:e4:52:c6:83:73:
         90:c5:f5:eb:d1:2b:f6:ad:f2:3b:94:99:59:7b:38:d8:61:29:
         7e:8f:87:64:bd:00:13:9b:be:92:4a:ec:c3:60:97:73:f6:e6:
         90:bb:63:c8:ac:4b:7f:24:8f:f6:05:fb:19:db:dc:23:43:80:
         91:d5:fa:7f:c1:6a:d6:49:7c:15:cf:80:bd:3b:c0:84:01:cd:
         ef:2a:a0:56:97:c0:9a:c2:b3:f8:fa:05:d5:95:6b:73:01:10:
         f6:52:56:4b:64:22:f8:e8:5a:84:e1:47:80:e2:16:0e:f7:7d:
         f7:6a:63:c5:92:83:da:24:1d:30:69:b1:48:9e:93:49:02:19:
         e2:cb:66:3f:61:96:05:ef:28:08:f6:ca:58:a2:65:0c:6f:19:
         c9:ca:72:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:10:41 2026 by rpki-client