Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/a4b2ba11-4348-31c4-97b6-1f46622da36f.roa
File:                     a4b2ba11-4348-31c4-97b6-1f46622da36f.roa (raw, json)
Hash identifier:          tSbTns3kLDtwWzEsIIin/iC18MpEndYTN4LsxJgYOcY=
Subject key identifier:   6C:89:70:AC:7B:56:F2:7B:55:B4:23:09:CC:4B:11:B6:FD:AC:65:3E
Certificate issuer:       /CN=9f4a0908-708d-490b-9f22-60855d3d69b3
Certificate serial:       010D0C9F4328584D5ED638C973588685E4D34E00
Authority key identifier: 4B:A1:AF:02:F6:57:F1:AC:8C:2A:41:4E:2F:85:84:70:50:DA:81:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/a4b2ba11-4348-31c4-97b6-1f46622da36f.roa
Signing time:             Thu 02 Apr 2026 07:19:11 +0000
ROA not before:           Thu 02 Apr 2026 07:19:11 +0000
ROA not after:            Wed 01 Jul 2026 07:19:11 +0000
asID:                     16509
IP address blocks:        167.234.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:d6:38:c9:73:58:86:85:e4:d3:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f4a0908-708d-490b-9f22-60855d3d69b3
        Validity
            Not Before: Apr  2 07:19:11 2026 GMT
            Not After : Jul  1 07:19:11 2026 GMT
        Subject: CN=aa7a398f-6d17-4988-b483-b5500dff3dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:dd:6d:ca:12:fc:0c:b6:e8:0e:59:21:e5:2a:
                    f3:3b:8d:95:d2:bb:d5:f9:24:4d:c2:32:27:5c:d7:
                    f6:f7:3b:7d:39:07:36:28:b4:d4:f3:99:7f:4d:5f:
                    e0:2b:14:65:bc:c2:2d:9b:fc:aa:e8:e8:f2:42:1b:
                    e8:66:36:85:24:1d:e9:7b:a9:ad:6d:82:10:d3:e4:
                    4b:c7:5d:8d:4a:ad:57:88:40:d9:38:76:a3:b9:87:
                    3a:79:db:73:69:d4:a9:7f:0d:73:3a:1c:e4:36:e8:
                    31:8f:f5:77:a6:4b:e9:41:4f:ff:23:95:d2:89:c9:
                    90:4d:6e:e3:bd:04:45:90:54:f5:e6:a5:0e:4d:c4:
                    05:85:75:ff:61:c6:57:e3:bf:6e:55:ab:32:cd:f7:
                    fb:34:3b:7c:c4:96:ff:a7:3b:34:4e:a7:0b:6c:bd:
                    ba:fc:d5:07:d6:fd:4c:06:9e:8d:fe:9c:d2:18:3c:
                    b0:75:2d:0e:c9:72:08:33:99:db:2f:95:7f:21:56:
                    1b:47:20:44:92:8d:f6:51:53:37:79:3b:70:4e:bb:
                    d7:32:6b:f6:0c:e8:77:04:a3:d9:b7:c9:e2:ab:47:
                    84:3d:9c:c8:90:e3:62:eb:96:bc:69:51:d7:70:0b:
                    c8:31:d3:d3:10:5c:40:1d:c6:71:9d:0b:36:4a:1c:
                    c4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:89:70:AC:7B:56:F2:7B:55:B4:23:09:CC:4B:11:B6:FD:AC:65:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/a4b2ba11-4348-31c4-97b6-1f46622da36f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3/9f4a0908-708d-490b-9f22-60855d3d69b3.crl

            X509v3 Authority Key Identifier:
                keyid:4B:A1:AF:02:F6:57:F1:AC:8C:2A:41:4E:2F:85:84:70:50:DA:81:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f4a0908-708d-490b-9f22-60855d3d69b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.234.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ed:c9:06:0f:c9:7c:c0:04:45:58:c5:02:fd:a4:93:a3:9c:
         b5:c0:b9:28:88:9c:bd:2f:14:eb:4b:db:ae:5d:ba:d1:52:c9:
         37:1d:aa:5c:07:46:b6:b2:c0:cb:b1:82:26:a6:80:02:6b:4b:
         a6:38:92:18:43:23:dc:ea:4e:08:16:9c:a6:f1:52:b8:87:4b:
         4a:0c:e0:6d:79:59:21:0b:25:36:b0:a9:07:24:47:5e:1f:f3:
         43:73:f4:37:ec:5f:0d:bb:7e:f4:21:58:df:23:32:b3:72:db:
         0c:45:24:d1:e6:04:90:4a:81:61:46:0d:ef:6a:10:e7:a8:f8:
         b5:6b:fd:99:46:d2:41:9b:a3:de:18:f6:78:6a:cb:5a:64:e2:
         63:59:94:72:c4:5a:7f:5f:53:15:d3:f4:78:54:6c:58:43:0e:
         d2:ba:1a:84:7b:9a:c8:93:c5:1a:7b:d7:e4:0e:78:fb:ae:8b:
         46:a1:bd:41:ce:79:f0:2b:c0:45:01:8d:97:d2:d2:4a:a3:e7:
         f6:81:cb:71:e1:ec:c6:c5:00:d6:e3:e9:bd:ef:fc:83:e4:53:
         79:5f:7c:6c:9e:cb:9d:37:ac:af:ce:03:55:c4:d2:20:3b:f6:
         22:ad:b3:1a:7c:5e:cd:aa:97:5d:e1:35:31:a4:f5:62:80:ed:
         fc:4c:07:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 21:39:11 2026 by rpki-client