Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/a761b73b-e057-3f35-9a68-220b5a8fee8c.roa
File:                     a761b73b-e057-3f35-9a68-220b5a8fee8c.roa (raw, json)
Hash identifier:          CCB3RLTghPa82f3kzHtq9jRZLiNcV97jbZ3WFK8VNOs=
Subject key identifier:   30:AB:82:7B:50:3B:1D:90:18:FD:8E:98:FF:1D:21:FD:E6:56:4F:17
Certificate issuer:       /CN=469597d0-a870-46e2-b0a1-04a71dad0b25
Certificate serial:       010D0C9F4328584F576823A8EC9AFC6F69677380
Authority key identifier: D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/a761b73b-e057-3f35-9a68-220b5a8fee8c.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     6128
IP address blocks:        148.77.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:23:a8:ec:9a:fc:6f:69:67:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469597d0-a870-46e2-b0a1-04a71dad0b25
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=496af2eb-14d0-47e1-9d0f-b28481c0dfc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:df:cd:eb:f9:c1:cb:79:d6:8e:1a:4f:48:8b:
                    61:f8:e4:8c:e7:f0:d8:0d:65:06:c1:30:ef:1f:dd:
                    72:36:99:89:f3:a2:e7:bc:ab:20:75:bc:3b:8d:3a:
                    05:f9:03:a4:d8:37:75:3b:33:92:99:3d:f2:16:88:
                    36:5f:d2:25:42:8d:ed:71:f0:24:b0:0c:65:35:5a:
                    04:72:cd:e3:bd:0c:38:d0:19:f2:14:c8:c3:db:58:
                    34:3e:6a:d6:77:69:d6:22:d1:4e:10:34:d7:36:12:
                    6d:55:95:80:36:04:d2:60:68:2b:b1:4a:6a:9e:df:
                    48:b6:99:e9:31:b9:09:6c:57:4f:23:c6:db:4e:42:
                    b9:c0:0b:e3:1a:36:9c:f9:55:f6:19:0c:f0:84:bd:
                    63:03:dd:40:9d:ee:70:f7:89:29:1f:ec:1d:db:e5:
                    b9:5c:83:4a:42:6d:18:40:80:c6:4c:ee:02:f8:77:
                    08:2f:f9:d1:a2:37:64:01:5d:3f:03:69:02:96:81:
                    29:c5:ed:8b:a3:2c:c9:ed:4d:d0:9c:aa:19:94:e5:
                    8e:2b:3b:61:e1:2f:89:be:20:6d:f8:c3:50:63:a0:
                    a7:62:c9:88:be:8d:a6:28:9f:76:bb:bd:d4:3b:a0:
                    81:96:3a:a4:fd:94:e8:09:42:ed:ba:b8:ff:c2:52:
                    17:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AB:82:7B:50:3B:1D:90:18:FD:8E:98:FF:1D:21:FD:E6:56:4F:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/a761b73b-e057-3f35-9a68-220b5a8fee8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl

            X509v3 Authority Key Identifier:
                keyid:D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.77.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:21:f9:fb:ee:05:4a:e8:e4:bb:ac:2d:f4:79:ca:21:15:11:
         1c:e3:41:d5:d5:97:ee:e3:a2:ca:e1:fc:a6:23:8d:89:06:2a:
         73:f2:86:b8:39:eb:43:65:81:ef:ba:00:32:38:95:33:9a:b1:
         2b:cd:0e:c4:cf:0a:8d:ea:3e:d2:8a:48:e6:cb:e2:ee:c7:f1:
         b4:4b:0e:f9:84:02:77:42:0f:9f:03:4b:ac:5b:59:7a:54:57:
         71:05:4f:69:67:14:42:1c:ef:e1:3f:cd:4d:d7:36:fd:ce:69:
         47:ad:e9:59:37:56:95:aa:98:cf:6d:71:91:dc:55:a7:8b:15:
         4c:81:9f:ff:2b:f1:f9:30:b4:ec:3a:2f:36:8e:e3:93:2e:4d:
         09:2c:b9:88:28:f2:95:1b:5d:9b:b1:b7:f4:3e:79:39:b5:fb:
         ba:5c:ac:63:8f:bf:00:7a:46:c2:6b:1c:0e:17:39:31:82:5d:
         b8:97:db:36:ce:97:75:2c:27:73:97:17:0f:bc:c1:9f:c4:b1:
         99:00:0d:9a:f1:1b:bf:3e:60:04:8c:85:35:52:23:61:35:f9:
         9c:3f:8b:6d:9a:68:96:73:df:78:e0:81:98:57:90:1c:78:41:
         48:e9:c6:7d:66:31:2d:41:f4:47:5e:fb:c9:48:b0:8f:4a:e2:
         37:bb:0e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:58:19 2026 by rpki-client