Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/8ff51c7e-6d24-3e09-b5e2-2e7323efd1ec.roa
File:                     8ff51c7e-6d24-3e09-b5e2-2e7323efd1ec.roa (raw, json)
Hash identifier:          A12odoeP/r3aPKKBQvymh7Cp0uOJEFUh5Wnja6XewB0=
Subject key identifier:   C4:5B:4A:BA:E9:94:CE:79:E0:79:58:76:11:7B:17:AC:FE:86:69:19
Certificate issuer:       /CN=9cc943d8-e468-4794-9399-2ba32cf0dad3
Certificate serial:       010D0C9F4328584E2D9F1284F6CF743CB24BF800
Authority key identifier: 88:6B:99:8B:24:2C:6A:9F:82:E4:47:37:A2:2A:06:D3:D5:4D:4F:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/8ff51c7e-6d24-3e09-b5e2-2e7323efd1ec.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     397833
IP address blocks:        185.77.142.0/24 maxlen: 24
                          192.95.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/9cc943d8-e468-4794-9399-2ba32cf0dad3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/9cc943d8-e468-4794-9399-2ba32cf0dad3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:12:84:f6:cf:74:3c:b2:4b:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc943d8-e468-4794-9399-2ba32cf0dad3
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=7ee94be4-31d8-4ff4-8b98-277903145fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:05:38:7b:e8:39:e9:ce:25:79:1f:18:61:9e:
                    4c:00:d9:79:5e:5d:a9:f2:69:59:05:6f:1a:b5:c7:
                    f7:3f:60:2b:1b:39:4d:03:cc:f0:3f:19:d8:63:9c:
                    19:d1:57:17:f3:60:91:18:e0:e9:0c:81:22:f8:c7:
                    c6:fb:bc:a2:e4:b5:9b:70:04:5f:09:19:6c:cd:9c:
                    d8:26:b9:e4:a8:0e:f1:5f:80:1e:e4:43:01:a2:92:
                    38:86:6c:f7:48:f3:9f:c4:94:9e:e0:1a:39:dc:56:
                    af:43:6d:74:8a:91:96:04:a7:b1:9c:0d:c7:37:11:
                    82:f2:d0:15:ec:68:f7:66:21:b2:a1:ad:3e:65:e7:
                    1e:4d:5f:c0:28:2f:84:24:a3:5c:28:40:6e:63:08:
                    1c:71:64:b6:af:3b:5f:3a:71:4e:37:b2:c0:54:06:
                    7a:75:4d:cb:20:82:53:89:f6:9e:57:40:2b:58:fe:
                    c9:a8:37:e3:a9:22:cc:e0:11:84:e5:51:34:8e:c4:
                    9b:8c:fd:df:f5:ab:e8:3e:47:9d:59:aa:d2:f1:3f:
                    2b:00:b4:8d:5e:23:86:eb:c0:f9:b7:f5:98:ff:40:
                    ef:67:e6:16:6a:d1:28:e1:81:94:a6:4f:96:70:62:
                    c6:d2:72:61:bd:c8:0f:76:ff:1e:a3:69:ee:fa:18:
                    c6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5B:4A:BA:E9:94:CE:79:E0:79:58:76:11:7B:17:AC:FE:86:69:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/8ff51c7e-6d24-3e09-b5e2-2e7323efd1ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/9cc943d8-e468-4794-9399-2ba32cf0dad3.crl

            X509v3 Authority Key Identifier:
                keyid:88:6B:99:8B:24:2C:6A:9F:82:E4:47:37:A2:2A:06:D3:D5:4D:4F:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.77.142.0/24
                  192.95.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:4f:51:14:77:7e:ef:48:9a:8a:cf:b7:56:61:73:48:33:53:
         6a:47:d6:73:7d:c6:21:2a:37:08:b6:50:b8:61:11:8c:4e:c2:
         05:ed:d4:eb:88:ae:73:0b:8c:15:1f:82:89:95:a1:8e:a8:ee:
         03:3b:c2:89:39:e4:9d:36:18:c3:3d:54:73:28:db:2d:19:ab:
         b5:b5:97:07:9a:da:42:a0:dd:23:99:c9:48:57:f2:2b:67:09:
         96:2c:0b:06:11:41:1b:94:2b:c7:46:41:23:9e:c9:94:98:e6:
         be:93:51:ff:4a:8c:64:6f:7c:20:64:dc:af:5c:18:8c:ef:a7:
         f8:59:f3:50:51:31:3c:8d:4f:ab:35:c9:07:27:7e:ff:78:28:
         8c:a4:da:7d:f1:ab:95:6a:a4:96:2b:bc:d1:28:4f:04:d7:5f:
         68:7a:c9:37:9f:75:4d:1c:a4:95:8c:71:80:2d:9c:3f:dd:03:
         eb:ba:24:24:24:b6:98:ed:cb:a6:f7:83:32:49:c6:d1:9e:0d:
         64:a3:2d:77:b9:ac:f8:32:d4:10:54:8b:53:bb:20:2f:8b:68:
         c6:55:16:d7:60:97:07:5d:b8:af:be:41:1f:7d:c3:90:77:74:
         6e:e0:20:ce:bc:e7:c2:e2:e1:44:c6:58:f8:e4:05:a4:17:de:
         21:cd:35:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 22:51:46 2026 by rpki-client