Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/f78e47d3-ef6c-3185-b8c6-7337a70ecef1.roa
File:                     f78e47d3-ef6c-3185-b8c6-7337a70ecef1.roa (raw, json)
Hash identifier:          SQ4WV5zHqqifsyzq6JyCAtBnmJ3fFLrrArGO4Y+Yeec=
Subject key identifier:   C8:49:8E:3D:63:3D:2E:77:80:F5:17:6D:BE:AD:FC:F5:CD:6C:1D:CA
Certificate issuer:       /CN=76554884-d362-4eab-82d1-ed9e4c9b289a
Certificate serial:       010D0C9F4328584EA79CA3548500F9DCBAF66100
Authority key identifier: 04:95:91:7C:FE:2D:FF:E0:7B:45:BF:CD:0E:72:A9:8C:A2:C4:25:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/f78e47d3-ef6c-3185-b8c6-7337a70ecef1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36363
IP address blocks:        216.170.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/76554884-d362-4eab-82d1-ed9e4c9b289a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/76554884-d362-4eab-82d1-ed9e4c9b289a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:a3:54:85:00:f9:dc:ba:f6:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76554884-d362-4eab-82d1-ed9e4c9b289a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c795e567-0987-4492-af01-55981ca8dc5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d3:a8:dc:6a:6f:e3:34:08:91:ef:27:ba:d2:
                    0a:0e:f2:2c:9f:19:da:75:69:81:fe:96:76:f1:59:
                    de:1f:3f:a0:e4:15:da:2c:a1:63:a2:e9:8a:6b:1a:
                    c2:91:82:dc:21:5b:e4:90:67:e1:fd:ff:95:0b:c6:
                    4b:7f:59:fe:38:72:e5:d5:a3:95:0d:7f:31:cb:13:
                    a8:3b:70:a4:af:b4:ae:3b:53:83:24:87:a2:a4:af:
                    28:e0:17:62:35:c5:11:0e:48:76:c4:fc:fb:6e:4b:
                    ae:1b:e0:4c:2b:9e:32:ed:c8:ad:cf:04:aa:c4:20:
                    5a:03:c5:34:1c:f3:11:60:75:3b:2f:2c:c6:a7:ab:
                    af:4a:98:76:45:f6:96:ae:f9:5a:92:22:13:16:7b:
                    a6:2e:9a:2b:97:2e:50:84:c1:e3:d4:a2:15:4c:04:
                    b3:df:7b:87:34:de:5a:ad:39:8b:48:6e:3e:20:5f:
                    67:cc:fb:a7:18:17:ec:f0:bc:3d:89:68:1b:34:9c:
                    02:c5:32:93:d0:3e:f6:7d:84:58:f0:f0:eb:43:b4:
                    5e:2d:1d:ba:c1:d8:c4:51:5f:d2:7d:b8:06:37:86:
                    0b:8d:be:dd:fa:c7:e8:82:18:b7:23:e2:7b:f5:96:
                    66:b4:aa:28:c4:f6:13:7b:23:57:51:29:9c:6e:ed:
                    7e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:49:8E:3D:63:3D:2E:77:80:F5:17:6D:BE:AD:FC:F5:CD:6C:1D:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/f78e47d3-ef6c-3185-b8c6-7337a70ecef1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a/76554884-d362-4eab-82d1-ed9e4c9b289a.crl

            X509v3 Authority Key Identifier:
                keyid:04:95:91:7C:FE:2D:FF:E0:7B:45:BF:CD:0E:72:A9:8C:A2:C4:25:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76554884-d362-4eab-82d1-ed9e4c9b289a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.170.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:fe:62:c4:24:8c:3b:62:62:df:3a:6a:f3:4c:b2:87:97:8e:
         03:1a:be:44:f7:89:e8:fa:29:2b:af:00:a1:47:be:a4:04:d8:
         50:c2:d3:c3:1c:cc:b8:da:bd:49:80:dd:4d:48:1b:f9:07:c3:
         3c:10:65:ad:70:5e:7a:f5:b6:9f:00:8d:9b:26:80:6e:bc:79:
         bf:f5:36:39:47:61:b1:5a:a1:73:90:5c:d8:00:78:ed:48:ec:
         17:b0:d8:94:9a:c6:ef:46:5c:89:1a:87:2a:da:be:c1:68:aa:
         bf:70:fe:89:ca:70:08:03:dd:c0:1d:fd:5d:dc:67:f5:84:46:
         34:d6:6e:f7:d9:10:b9:e6:91:92:e4:f8:02:cc:51:6d:26:66:
         1b:aa:36:b7:c1:18:65:6b:29:7a:67:2b:7b:94:4d:05:67:e7:
         3e:c4:a6:47:5c:7a:7e:fc:b4:6f:5f:d7:12:9c:db:ac:11:71:
         9a:77:14:5c:37:fe:5c:65:5a:d3:96:19:d3:4a:93:33:c4:58:
         37:80:01:6a:1a:a9:14:b4:86:df:3b:56:78:8f:5b:f0:fd:9c:
         f8:5e:3e:4e:5b:74:cf:e5:45:6b:e3:49:84:e3:2f:d6:85:a9:
         6b:f8:d6:2f:79:0a:2e:b9:c0:53:2e:4e:71:15:61:65:1c:33:
         ae:cb:9a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 22:59:05 2026 by rpki-client