Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/7f6837a0-6f89-31b8-ad5f-f5ca90fe3535.roa
File:                     7f6837a0-6f89-31b8-ad5f-f5ca90fe3535.roa (raw, json)
Hash identifier:          THLlVkQXWA8Omc16JKiv3nTUtTN3dy4WKylBj8u0IYA=
Subject key identifier:   95:1C:E2:12:FC:C7:AF:53:00:8D:AE:81:5F:DF:65:CB:18:E7:E3:0A
Certificate issuer:       /CN=2777da36-faff-4a3d-a4c5-1a6ce89b194a
Certificate serial:       010D0C9F4328584F6C583A36AA9CFC7018FB7B80
Authority key identifier: E7:0D:6D:9A:55:D3:D6:4C:FC:9F:A8:21:DD:5F:19:99:24:8D:9A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/7f6837a0-6f89-31b8-ad5f-f5ca90fe3535.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     16509
IP address blocks:        212.8.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/2777da36-faff-4a3d-a4c5-1a6ce89b194a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/2777da36-faff-4a3d-a4c5-1a6ce89b194a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:3a:36:aa:9c:fc:70:18:fb:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2777da36-faff-4a3d-a4c5-1a6ce89b194a
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=4fe6f19a-8798-4ed7-b0aa-991c3bcd98b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:56:60:b8:59:55:69:eb:c1:2d:90:8e:ef:8c:
                    3e:18:0c:e8:e9:a4:2d:70:1d:66:ea:3b:9a:7e:a3:
                    e9:76:a2:13:f5:17:36:ea:57:a1:34:33:16:06:b6:
                    68:cc:ff:21:55:d5:dc:e3:c2:68:e2:e9:72:34:3e:
                    2b:d2:a4:6e:e7:96:e9:e4:68:7e:54:9b:34:60:24:
                    ca:1b:d4:fb:7e:8a:4c:99:8c:ef:fa:92:9f:a6:48:
                    1d:66:9c:57:99:dc:05:d7:8d:75:f9:03:13:f7:b4:
                    34:f3:ff:de:d9:bf:8c:1d:65:76:27:0b:7c:69:d9:
                    24:00:28:b7:d6:9a:1a:0d:eb:18:b2:52:65:f3:6f:
                    a7:ac:a7:33:96:d2:66:61:a4:26:72:f5:01:e1:7f:
                    cd:f4:0a:3a:af:d5:0e:4e:45:d0:6b:43:6c:63:6b:
                    41:56:63:c0:15:0e:6a:82:82:8a:da:02:72:3b:03:
                    a6:7e:40:dc:7e:7a:8e:6c:ea:08:4e:f3:7f:07:81:
                    2c:bf:5b:fe:17:30:cf:ff:ed:6d:c2:de:1c:a7:64:
                    55:ab:eb:f8:a4:24:a2:de:4f:58:23:29:d8:db:1e:
                    a6:df:df:18:03:3c:57:f2:d3:65:88:76:b8:e4:4f:
                    d8:78:78:32:8f:e2:61:c0:03:e7:4e:24:53:e9:e5:
                    9f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1C:E2:12:FC:C7:AF:53:00:8D:AE:81:5F:DF:65:CB:18:E7:E3:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/7f6837a0-6f89-31b8-ad5f-f5ca90fe3535.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a/2777da36-faff-4a3d-a4c5-1a6ce89b194a.crl

            X509v3 Authority Key Identifier:
                keyid:E7:0D:6D:9A:55:D3:D6:4C:FC:9F:A8:21:DD:5F:19:99:24:8D:9A:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2777da36-faff-4a3d-a4c5-1a6ce89b194a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.8.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:43:41:cc:66:70:d0:37:14:eb:52:5a:73:63:ba:71:ce:38:
         af:50:1a:7a:25:10:12:64:48:8c:35:f1:54:86:a4:1a:7f:e8:
         f1:7f:76:b5:05:ae:b7:ef:f2:e7:99:a4:ba:6b:2e:12:21:d2:
         72:67:cd:bd:46:53:01:97:07:e9:51:21:de:43:ea:f3:d8:24:
         6f:c4:1c:35:a0:08:ca:fe:e0:93:8b:cc:b2:88:ea:4e:28:3e:
         1a:4b:5a:fe:e5:bf:88:e5:eb:06:1f:ad:f5:ac:50:12:cf:71:
         8c:39:0e:f5:af:04:b6:be:78:c0:9d:c3:84:0a:1a:2f:82:ba:
         9c:d9:53:89:62:d1:aa:59:a1:08:17:99:cd:d1:4e:04:a4:b4:
         34:b1:e8:f0:0d:9c:c7:d8:50:46:f6:12:1c:6b:c8:79:44:cc:
         e3:69:a2:3e:ed:49:64:c7:e2:39:b6:96:02:4f:7b:f1:d0:78:
         e3:6e:c5:25:46:2f:4d:04:50:ef:74:5d:94:5e:1d:86:eb:a9:
         2c:c0:f2:41:93:39:ed:75:d8:65:ee:1f:71:3a:56:b8:f1:bc:
         33:2d:ee:2a:1c:9a:64:1e:e7:33:5f:d8:64:8b:aa:56:3a:1c:
         b7:53:2b:98:c5:85:15:f8:10:8c:86:3a:6b:d6:b2:6f:b2:20:
         f9:52:a2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:46:16 2026 by rpki-client