Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b2d5451-e009-44fd-801c-81ad2a5b84bc/77156f9b-3bed-3540-85d4-4e98278e8271.roa
File:                     77156f9b-3bed-3540-85d4-4e98278e8271.roa (raw, json)
Hash identifier:          vGM1Qb4OvMlwumyTM0nOVyyWlsJrV8/TEuKuTkZ1wo8=
Subject key identifier:   68:22:CE:1C:91:E4:DE:A4:EC:23:0F:68:72:2F:95:AE:BD:2A:E8:8B
Certificate issuer:       /CN=4b2d5451-e009-44fd-801c-81ad2a5b84bc
Certificate serial:       010D0C9F4328584FB6711241170DD8D763C39E80
Authority key identifier: 59:F9:C8:D8:FF:74:5C:4D:6E:1A:F8:4C:8E:18:13:B9:B0:2E:27:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b2d5451-e009-44fd-801c-81ad2a5b84bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b2d5451-e009-44fd-801c-81ad2a5b84bc/77156f9b-3bed-3540-85d4-4e98278e8271.roa
Signing time:             Tue 03 Nov 2026 02:00:13 +0000
ROA not before:           Tue 03 Nov 2026 02:00:13 +0000
ROA not after:            Mon 01 Feb 2027 02:00:13 +0000
asID:                     401045
IP address blocks:        66.97.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b2d5451-e009-44fd-801c-81ad2a5b84bc/4b2d5451-e009-44fd-801c-81ad2a5b84bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b2d5451-e009-44fd-801c-81ad2a5b84bc/4b2d5451-e009-44fd-801c-81ad2a5b84bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b2d5451-e009-44fd-801c-81ad2a5b84bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b6:71:12:41:17:0d:d8:d7:63:c3:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b2d5451-e009-44fd-801c-81ad2a5b84bc
        Validity
            Not Before: Nov  3 02:00:13 2026 GMT
            Not After : Feb  1 02:00:13 2027 GMT
        Subject: CN=da6025cd-7d49-4b51-a79a-e3b71daba4dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ba:06:47:4a:82:d6:65:dd:17:f5:b4:2f:16:
                    3f:71:85:f5:74:de:42:c5:06:9d:e2:b4:5f:4c:cb:
                    05:f0:12:75:27:46:cc:87:42:75:06:f0:f0:57:9a:
                    53:bc:fd:c2:b6:ba:8c:01:d5:f6:ae:3a:dd:ee:71:
                    c6:fc:f3:a0:32:29:bd:1b:b6:e0:3e:7d:82:85:85:
                    59:80:19:7c:b4:ff:cb:ac:c1:14:9b:fa:d8:b5:a4:
                    14:8b:ff:39:64:bf:01:02:12:1f:f3:bd:af:75:25:
                    93:e1:8e:f8:ff:db:59:f4:77:84:a1:7f:82:d4:d9:
                    50:bb:d8:e8:a8:11:55:f6:b0:11:87:a1:94:5c:45:
                    3a:70:90:15:ce:63:0f:fa:2b:fe:18:b9:d0:bb:8c:
                    b3:6e:d7:de:5b:80:3d:69:63:76:25:c9:0b:74:fd:
                    c5:c6:a3:a1:47:ad:b7:4b:0c:b5:85:44:6b:fa:c1:
                    5a:0e:3c:32:8f:d6:f0:0d:98:0d:e7:f2:e1:e1:73:
                    ed:c6:48:75:2a:88:cd:f4:b4:1c:ce:ef:49:78:ac:
                    ad:d3:3a:ea:fb:f4:bc:7d:d1:f5:14:43:a5:ad:3a:
                    74:98:3a:9e:8b:74:5d:8b:61:ab:48:e3:cd:70:52:
                    fe:dd:9d:d3:20:b0:22:2e:6e:29:c2:d2:b9:c9:92:
                    e9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:22:CE:1C:91:E4:DE:A4:EC:23:0F:68:72:2F:95:AE:BD:2A:E8:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b2d5451-e009-44fd-801c-81ad2a5b84bc/77156f9b-3bed-3540-85d4-4e98278e8271.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b2d5451-e009-44fd-801c-81ad2a5b84bc/4b2d5451-e009-44fd-801c-81ad2a5b84bc.crl

            X509v3 Authority Key Identifier:
                keyid:59:F9:C8:D8:FF:74:5C:4D:6E:1A:F8:4C:8E:18:13:B9:B0:2E:27:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b2d5451-e009-44fd-801c-81ad2a5b84bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.97.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:23:97:8f:ee:42:8b:00:e6:9b:25:59:70:99:82:da:d3:c4:
         2f:3b:49:5c:5e:49:39:ff:86:8f:eb:57:3a:36:af:59:23:e4:
         5c:14:cd:23:30:38:d5:6c:28:4e:23:33:50:e6:7f:40:86:42:
         d8:50:a5:d9:b3:12:ba:d6:01:cb:ee:fd:f3:5a:d0:23:0a:25:
         03:23:d7:9a:bf:15:b5:83:20:d9:68:58:5e:66:85:c7:4a:77:
         8d:16:f9:26:f5:12:1e:31:19:ac:7c:b5:62:c1:5f:09:03:a6:
         08:5b:75:64:9f:3a:40:41:8a:8d:76:ee:40:88:36:85:79:e3:
         10:86:67:78:0a:84:d3:17:f3:d6:df:dc:3a:27:82:e1:c6:16:
         bb:35:47:c8:f8:09:e2:d7:48:33:dd:4d:91:10:c6:65:4b:21:
         09:fe:d2:da:21:a3:1f:45:90:07:0e:c3:dc:86:8d:bb:b4:c4:
         a2:d7:f2:fa:2a:03:dd:44:8d:5d:19:df:94:00:93:77:c3:6f:
         5e:1b:f4:71:1a:b5:85:ed:19:b0:87:53:6d:29:c8:34:42:cf:
         0d:a4:1d:7d:ef:24:bc:5b:2f:33:6e:15:65:ba:8c:22:d7:d0:
         c2:ad:9e:87:77:fb:e1:4d:40:58:84:7c:22:d1:ed:70:9b:e8:
         f0:e4:81:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:46:16 2026 by rpki-client