Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/877b99aa-8982-35d0-901f-ab3357cb228e.roa
File:                     877b99aa-8982-35d0-901f-ab3357cb228e.roa (raw, json)
Hash identifier:          26yn0tbCjsbvrg5nPilQmyYkvJOrSCH2XofO8gSZyjg=
Subject key identifier:   CA:8D:7D:68:A9:56:7B:73:70:0B:89:A9:E5:A7:E7:D5:0B:65:04:6F
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EA7874C371FCC9A336CFFCDC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/877b99aa-8982-35d0-901f-ab3357cb228e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     212238
IP address blocks:        96.126.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:4c:37:1f:cc:9a:33:6c:ff:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3552ba40-b16e-49a4-9002-3199b6ea6c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5e:b9:a6:0e:3c:0b:1d:00:23:ac:29:68:f2:
                    f1:1f:4b:5c:6b:74:74:5a:b9:65:3d:04:07:1a:82:
                    cf:9a:53:6b:45:0c:bd:26:58:c9:61:8f:20:70:ae:
                    10:95:0f:47:92:bf:f9:e7:41:ab:36:52:68:4d:2b:
                    8b:70:9c:83:34:68:8c:25:09:50:8d:ea:01:bf:6a:
                    82:9e:52:9d:62:9e:a5:07:a3:55:1e:cd:47:6a:93:
                    e5:73:b1:a9:37:52:c7:59:c9:52:6d:f5:ea:e0:ea:
                    84:f9:40:ec:e7:fb:61:1d:75:44:c3:30:83:8b:05:
                    a1:8a:66:0a:ad:91:5f:ab:ea:c3:73:f3:cd:85:f8:
                    7d:b0:17:30:5f:95:7b:aa:bc:c6:3e:9f:6a:94:87:
                    0f:78:fe:87:d1:14:53:be:9b:1a:65:3e:1a:3d:31:
                    bc:54:2b:b2:86:b5:fc:f4:c8:99:69:ca:f6:cc:39:
                    e3:2b:fc:52:f8:1b:c7:82:fd:ca:27:04:d1:36:fe:
                    27:77:58:6a:2d:59:58:84:d6:37:74:7e:45:9a:db:
                    c2:ea:1c:e4:a9:b0:b4:e1:d8:07:f4:7e:9a:1b:88:
                    6b:f2:12:18:28:c3:a2:d1:3c:ae:6f:9b:c8:3c:0c:
                    42:ee:37:c6:f7:88:74:7d:76:26:eb:cc:15:e3:e4:
                    cc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8D:7D:68:A9:56:7B:73:70:0B:89:A9:E5:A7:E7:D5:0B:65:04:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/877b99aa-8982-35d0-901f-ab3357cb228e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.126.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:c7:87:db:9c:c4:44:50:1a:8a:0c:16:e5:69:f4:65:db:35:
         f3:e7:b6:52:24:da:88:74:75:4b:83:ae:d1:d8:a0:90:81:be:
         3f:f8:07:2e:7a:ef:68:ef:a9:f3:6d:97:54:40:78:49:a1:7e:
         83:8a:62:db:f8:f8:59:23:b5:9f:2c:1f:1b:13:f3:fa:56:18:
         f9:c9:e1:76:60:fb:b0:eb:b1:76:ec:ba:8c:04:84:21:59:2e:
         36:cd:a5:a8:9d:cb:fb:60:27:23:09:7c:f1:f6:67:72:d6:b4:
         f1:88:01:11:2e:54:e6:94:ac:bd:a3:a3:da:97:d2:53:2a:fc:
         e3:1b:e6:f4:ff:73:bf:bf:f4:1f:96:e0:82:5f:c4:f0:cd:ca:
         13:77:76:dd:b6:83:ea:3a:5d:53:b1:34:65:e1:ce:d0:ff:be:
         38:f6:36:dd:5f:11:bd:9a:ef:5a:af:7a:32:66:4c:2c:d6:47:
         c7:c6:3a:98:72:16:53:c9:c1:67:60:bb:ee:03:f6:7f:a6:85:
         ff:de:c0:d7:cb:f1:f9:70:01:bb:8e:86:0a:c0:ab:0d:bb:0c:
         32:f3:01:1e:68:32:aa:f8:89:28:cf:b5:5a:17:ee:12:0c:0a:
         43:f8:e3:bd:5b:fb:cc:b5:d3:55:93:51:0a:8e:98:0e:1c:b6:
         1f:61:95:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:11:09 2026 by rpki-client