Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/ac7d411c-2004-3fe4-9f0b-20be7c8f3c8a.roa
File:                     ac7d411c-2004-3fe4-9f0b-20be7c8f3c8a.roa (raw, json)
Hash identifier:          8Ju7CEgfIuE92JgQnF/w6MWQLyjjS+QJAiYOiOnc2Vs=
Subject key identifier:   84:80:AA:3D:6A:F7:9F:64:74:32:CF:6A:07:07:2C:C2:36:E8:24:8E
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584EA7874AF26431867F194E0B60
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/ac7d411c-2004-3fe4-9f0b-20be7c8f3c8a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     4922
IP address blocks:        76.77.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:4a:f2:64:31:86:7f:19:4e:0b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2600d456-aa30-4cb8-b357-0ef15429a233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f0:b0:7c:0b:6a:ff:d6:af:da:c0:77:93:0a:
                    fd:26:7e:a3:e2:40:6c:4a:9d:1c:ca:18:53:4f:75:
                    ae:50:1a:ae:7a:59:8f:52:69:30:ff:89:7a:be:98:
                    0a:49:b4:8d:df:af:d2:0d:fb:98:d9:b8:0f:1a:ff:
                    0c:ae:4a:4a:52:ca:37:0d:af:c9:d4:9d:9a:0b:99:
                    d0:93:e1:5c:ee:ca:dd:44:9e:84:6e:84:78:f0:b5:
                    2d:97:13:3d:2a:70:08:3a:5d:26:02:b3:16:7a:98:
                    98:20:2c:8c:05:95:de:33:7a:27:26:53:bd:4f:51:
                    9b:d7:c3:4c:37:03:5b:d7:47:8a:86:4d:eb:9a:23:
                    21:02:f5:4e:85:b4:ae:12:b1:d1:21:7f:d7:b1:62:
                    32:14:aa:55:f8:55:de:a8:0e:31:df:13:0b:6e:9c:
                    0b:47:f8:1a:4c:be:b8:50:18:08:80:5f:7a:ff:26:
                    44:89:db:97:93:3c:95:f9:f7:e6:46:64:c3:c0:d2:
                    b6:45:da:04:65:d8:4d:ac:6c:20:31:e9:49:64:c9:
                    5d:80:a7:06:ef:4b:fa:20:02:36:6b:94:be:06:c0:
                    7e:10:73:a5:79:c0:6b:3a:52:c3:7a:6d:5d:2d:dd:
                    6f:7b:ae:c1:3e:8a:2c:7f:17:be:c3:4f:ec:34:97:
                    e1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:80:AA:3D:6A:F7:9F:64:74:32:CF:6A:07:07:2C:C2:36:E8:24:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/ac7d411c-2004-3fe4-9f0b-20be7c8f3c8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.77.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:d5:15:bc:4d:50:e0:35:e1:eb:72:5b:bc:a4:a8:ba:1f:b9:
         77:76:08:a1:33:07:05:6b:da:8a:9a:19:ea:43:01:48:07:a2:
         29:a1:81:eb:ae:d6:c9:2c:24:9e:cc:7a:ab:2e:41:0b:42:45:
         47:eb:02:49:91:b8:e6:f0:43:ca:8c:f4:fe:5e:19:4a:39:cd:
         76:63:47:10:dd:f5:ac:b1:77:90:10:3f:87:56:1f:77:74:18:
         a0:6b:e4:bf:a2:82:0a:c1:47:bd:be:a1:6a:0f:f7:3b:4e:6c:
         a9:8f:ea:1c:21:1f:1c:76:68:59:41:0f:49:fb:de:6e:27:6e:
         55:96:57:01:df:81:12:2e:92:c2:fd:58:00:04:84:01:17:ec:
         24:20:05:06:df:e0:e2:6d:1a:01:bf:5b:30:40:da:29:a5:5a:
         4a:e6:f5:78:c7:8f:c8:36:b5:89:18:5d:80:62:13:07:6a:37:
         25:a4:af:a3:e7:9d:31:80:02:5a:b6:d4:34:30:14:32:94:c7:
         23:ef:3c:c8:d5:ca:fe:8c:68:e9:18:b5:68:71:9f:bf:59:a6:
         1a:1b:4b:c5:3e:11:50:d2:f0:62:4d:af:9d:b1:d8:f2:28:67:
         6a:62:8c:26:42:dd:cb:15:cb:7d:87:02:72:7d:9f:19:3b:0e:
         33:60:10:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:35:24 2026 by rpki-client