Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/77ece1a4-e556-303c-8861-f2d0b738cc0a.roa
File:                     77ece1a4-e556-303c-8861-f2d0b738cc0a.roa (raw, json)
Hash identifier:          eObafURRJpxCnmdAJyIREzgtrgYV8DNh4V8QllRuO4A=
Subject key identifier:   04:DF:4A:C4:98:46:A6:8B:AA:C6:EE:30:D5:FC:7B:98:35:AE:63:C6
Certificate issuer:       /CN=06b2da7d-ae03-4c12-bd29-f0c285888740
Certificate serial:       010D0C9F4328584F02423D3CB57E21E6474A6B40
Authority key identifier: B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/77ece1a4-e556-303c-8861-f2d0b738cc0a.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     8075
IP address blocks:        206.195.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:3d:3c:b5:7e:21:e6:47:4a:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06b2da7d-ae03-4c12-bd29-f0c285888740
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=7604c9ec-1d00-4c41-bcff-bc90ce3fe766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8f:49:ab:44:64:f2:58:f1:44:61:6e:da:ec:
                    50:0b:7c:2d:ef:a9:61:3d:6d:61:20:bc:da:65:be:
                    2a:57:06:67:00:85:5e:ba:0d:37:37:a1:e9:bb:40:
                    e5:94:ee:fa:cc:4f:dd:ca:fe:3b:bb:d0:1f:d3:4b:
                    2a:c1:c0:0c:57:7d:a4:9f:f3:7c:07:54:e7:4b:f4:
                    82:d8:2a:20:0f:2d:38:63:db:b0:de:d7:b5:94:c7:
                    7c:50:ec:d3:fe:fa:5f:11:8b:8c:cd:14:96:fc:a0:
                    d5:ed:df:6d:02:f6:a5:29:25:5b:cf:90:52:c7:8d:
                    7b:80:1d:0a:f8:2c:27:f6:ce:3c:8f:d5:73:be:c4:
                    dc:84:0f:d3:bd:60:55:56:20:24:3d:f1:f1:b7:c8:
                    d2:dc:b1:1e:8b:c3:df:c3:02:05:dd:be:4e:33:87:
                    83:29:b4:49:38:b2:6f:ff:e0:a0:31:b7:64:ef:5a:
                    ff:a5:02:26:03:d2:ee:71:91:e0:18:59:fb:51:41:
                    1a:fd:cd:e3:60:e2:b1:53:10:29:79:0b:de:75:d1:
                    ac:e0:43:c9:15:a5:e9:cf:08:50:01:e6:6e:eb:45:
                    75:44:6a:34:92:ab:67:c8:4e:55:9b:d9:77:54:d8:
                    9e:a2:b7:6e:76:ff:d2:48:62:69:69:1d:3b:20:60:
                    a0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DF:4A:C4:98:46:A6:8B:AA:C6:EE:30:D5:FC:7B:98:35:AE:63:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/77ece1a4-e556-303c-8861-f2d0b738cc0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.crl

            X509v3 Authority Key Identifier:
                keyid:B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.195.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:4e:7a:ad:69:e0:80:84:78:5e:bd:72:ce:91:f9:33:0a:e2:
         19:41:b5:11:30:69:4f:69:09:59:22:23:b3:fc:92:e8:5f:7b:
         5d:1b:bb:aa:bb:8e:e5:de:f6:26:9b:6f:ee:e4:f5:51:0e:6a:
         90:a4:40:2c:68:d4:6d:a2:0a:b8:96:19:76:17:10:af:b2:ca:
         26:6e:99:ae:bf:4d:4c:80:55:62:00:c8:54:ab:47:e6:86:64:
         13:9c:c1:18:99:67:2d:31:1e:64:5b:61:b1:75:08:94:b9:c5:
         76:54:d4:71:da:2b:cc:e7:47:c3:f5:4a:6e:d4:fb:41:64:38:
         db:c0:7e:c3:28:0f:73:74:16:3c:3d:81:fe:f4:10:14:d9:86:
         e5:62:ad:6c:d0:3e:22:64:1e:0a:f9:3c:35:be:96:dc:c7:ab:
         86:df:8c:24:0f:f9:7a:dd:56:e5:d0:4e:e9:4d:9f:4c:78:4b:
         5f:05:d8:61:bc:7d:db:e9:50:8f:f4:17:b9:7f:10:16:3b:a1:
         fa:8e:54:7e:cf:e5:d2:db:7c:8c:d7:87:73:05:5f:3d:90:94:
         80:e2:73:63:51:97:1e:3d:83:a3:0f:d8:6b:f7:11:73:21:52:
         1f:1f:3d:9a:9e:2d:c3:45:e5:8a:a9:e3:04:5c:a8:25:eb:8b:
         c2:ad:06:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:29:49 2026 by rpki-client