Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/37698785-0c34-30f7-8f44-16fa0a3a2b7d.roa
File:                     37698785-0c34-30f7-8f44-16fa0a3a2b7d.roa (raw, json)
Hash identifier:          qzENr6zhEyzpN9sZ9/ej9/OxQA15MR1rRr9e3W4Tq5c=
Subject key identifier:   66:0B:E8:34:AC:D5:EF:32:7A:2D:7C:EC:0F:5F:C7:55:8C:09:F9:79
Certificate issuer:       /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
Certificate serial:       010D0C9F4328584F50C178DC63E287785CBE7900
Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/37698785-0c34-30f7-8f44-16fa0a3a2b7d.roa
Signing time:             Sun 27 Sep 2026 15:49:56 +0000
ROA not before:           Sun 27 Sep 2026 15:49:56 +0000
ROA not after:            Sat 26 Dec 2026 16:49:56 +0000
asID:                     395886
IP address blocks:        104.166.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:c1:78:dc:63:e2:87:78:5c:be:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
        Validity
            Not Before: Sep 27 15:49:56 2026 GMT
            Not After : Dec 26 16:49:56 2026 GMT
        Subject: CN=4c198603-c3b4-4afb-afc1-420fa8f14c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:11:78:b4:bd:e9:d3:fa:25:85:8f:6c:76:42:
                    95:74:49:57:fd:79:ca:3a:8c:75:ad:61:1e:66:8a:
                    14:b2:11:d5:23:55:2b:f6:60:ad:68:38:ab:80:32:
                    00:b0:9a:19:d0:97:ae:47:4e:e2:40:10:e2:bb:b9:
                    44:02:1f:82:cc:6f:db:7a:4f:41:1b:99:5b:7f:3f:
                    88:34:34:8c:7c:47:f7:f3:a5:0b:84:31:56:55:79:
                    0a:db:c5:eb:ad:75:7a:6e:fd:c3:f8:82:a4:91:9d:
                    c6:41:3c:6c:72:00:6c:d0:c4:e7:bf:c3:91:37:63:
                    40:80:a6:bc:27:3c:08:65:17:3c:26:8e:8c:4a:e2:
                    3f:c2:99:88:0e:bd:cd:56:6d:61:b2:e5:9d:96:24:
                    b3:b4:50:5a:8a:d6:65:a3:71:dc:c7:ee:5a:21:1b:
                    46:4b:62:a3:3f:2a:cd:ff:f7:e1:6b:22:9d:1c:1a:
                    ff:ec:79:4d:db:12:d2:bc:58:3c:95:b8:01:8f:22:
                    46:c8:e8:12:5b:58:19:29:d7:46:6c:7e:22:60:67:
                    cd:e2:67:ea:96:cd:73:a4:f1:ef:32:58:1d:21:5f:
                    3e:f6:cb:66:24:7a:d5:e5:d3:39:b4:42:af:5b:c1:
                    86:1d:1f:74:e8:13:9e:4a:93:44:d7:51:78:30:d3:
                    a0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0B:E8:34:AC:D5:EF:32:7A:2D:7C:EC:0F:5F:C7:55:8C:09:F9:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/37698785-0c34-30f7-8f44-16fa0a3a2b7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.166.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:de:6e:38:19:bc:0c:49:eb:53:20:d0:1d:a5:f9:b4:93:74:
         3c:f8:98:3f:82:f0:9e:66:28:80:7d:75:f6:42:8e:8d:84:c1:
         9a:93:a3:45:2a:9a:68:bc:64:e3:ff:d5:ea:49:c2:60:32:6a:
         92:a9:e8:82:96:65:57:03:b5:7e:f1:9e:a2:1a:6c:f3:95:36:
         42:75:d9:45:cb:e7:b5:ea:e8:4d:60:59:3c:c3:b1:b3:19:d6:
         07:00:a6:9f:33:96:41:69:62:2b:0a:ed:64:2e:e4:e7:40:e8:
         87:33:9a:61:8d:c8:d1:5e:fc:ef:df:7a:fc:af:4d:4d:90:95:
         7a:37:fc:6c:e8:b7:33:34:0f:bc:fe:e9:4f:ba:38:90:99:50:
         ff:22:ee:ac:d7:c8:3a:31:39:6b:69:ee:c9:15:1e:6a:80:06:
         7f:a9:51:b5:36:d6:61:f4:bc:09:05:1d:56:ba:6b:75:0f:a7:
         2d:95:9f:c9:3e:25:7b:16:22:fd:c4:2f:70:27:27:b1:0a:80:
         08:5a:81:d5:96:a4:39:cb:be:4c:4e:98:72:1f:d1:71:4d:a4:
         a8:9f:f5:95:1d:13:93:7a:e8:cb:7c:27:a4:6e:3f:96:8b:d7:
         fb:bb:eb:dc:1b:98:c9:7f:ec:e5:bf:39:9a:75:5b:8e:57:69:
         3f:98:d6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 21:12:38 2026 by rpki-client