Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/84195b21-d4cd-3e6b-bf2c-ec651c74b13c.roa
File:                     84195b21-d4cd-3e6b-bf2c-ec651c74b13c.roa (raw, json)
Hash identifier:          Nlc8pBEbNNdAoBHA5k4RuTh+jucJmVPNMtYHSqxe2YA=
Subject key identifier:   4B:0D:C0:1E:D7:1B:29:78:CE:0B:A7:56:5E:49:7F:82:36:4C:79:80
Certificate issuer:       /CN=6cc45f23-c458-4442-ae7b-a87738f24fe8
Certificate serial:       010D0C9F4328584F6D85D457EE53FE39275FDEC0
Authority key identifier: E0:9C:DA:DF:CF:B9:44:F0:7E:83:3B:BD:B3:68:C8:CC:7B:2B:64:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/84195b21-d4cd-3e6b-bf2c-ec651c74b13c.roa
Signing time:             Wed 07 Oct 2026 23:08:13 +0000
ROA not before:           Wed 07 Oct 2026 23:08:13 +0000
ROA not after:            Wed 06 Jan 2027 00:08:13 +0000
asID:                     40511
IP address blocks:        208.77.239.144/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/6cc45f23-c458-4442-ae7b-a87738f24fe8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/6cc45f23-c458-4442-ae7b-a87738f24fe8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6d:85:d4:57:ee:53:fe:39:27:5f:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc45f23-c458-4442-ae7b-a87738f24fe8
        Validity
            Not Before: Oct  7 23:08:13 2026 GMT
            Not After : Jan  6 00:08:13 2027 GMT
        Subject: CN=7fb20a99-0a7b-46cc-b824-0db434b7d837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c1:95:03:1c:9f:3f:07:6d:81:ba:da:f2:ec:
                    a1:21:51:47:69:77:5a:c9:bb:36:2b:81:2b:51:5c:
                    2c:73:24:0e:e2:dd:5a:2e:34:8a:ff:2d:26:6f:c5:
                    51:f1:d4:1e:6b:92:19:25:fb:c2:12:53:d4:35:b5:
                    41:78:2c:3b:1c:a8:2b:f9:99:8f:55:6d:9f:b4:37:
                    6e:38:84:78:01:58:82:d5:74:9a:ce:e8:3a:02:45:
                    c3:88:15:28:5a:77:fb:7f:f0:a3:0b:15:f5:3c:1d:
                    ce:83:af:bb:bc:b6:f9:9f:71:a0:f1:82:12:d0:0a:
                    cb:f9:ab:2c:20:a2:95:fa:e4:8b:09:ee:2b:5c:4a:
                    89:03:c1:da:c5:7e:6f:ff:c2:88:43:07:4a:84:f4:
                    ca:f8:ad:46:9f:64:48:ee:fe:00:76:71:54:ef:6e:
                    5c:90:14:24:9a:99:ca:d3:1c:d7:14:f6:db:c0:6b:
                    e6:f4:0e:92:ca:3b:77:7b:fd:37:cd:20:1c:91:48:
                    38:d6:93:f2:63:6d:8a:2e:46:45:14:8b:9b:eb:51:
                    05:9f:33:f7:ca:9d:e3:11:a4:ea:ba:0a:8c:c8:5e:
                    19:f8:f6:72:d0:ae:a1:72:cb:c1:97:c1:6e:5e:52:
                    ad:83:79:63:32:03:f7:b9:5c:f2:21:cd:cc:58:6e:
                    73:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0D:C0:1E:D7:1B:29:78:CE:0B:A7:56:5E:49:7F:82:36:4C:79:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/84195b21-d4cd-3e6b-bf2c-ec651c74b13c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8/6cc45f23-c458-4442-ae7b-a87738f24fe8.crl

            X509v3 Authority Key Identifier:
                keyid:E0:9C:DA:DF:CF:B9:44:F0:7E:83:3B:BD:B3:68:C8:CC:7B:2B:64:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6cc45f23-c458-4442-ae7b-a87738f24fe8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.77.239.144/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:06:ea:7a:e2:42:c0:f4:d2:74:76:ca:aa:d5:bb:8f:c0:da:
         d4:d3:5c:0f:79:34:0f:ab:b5:63:cf:bc:02:65:41:63:2c:45:
         b0:b3:a1:c3:5b:6c:75:e9:4c:42:db:0c:e3:f6:7c:1a:55:5c:
         70:73:0d:de:23:7b:4c:c7:83:4f:e6:83:bd:d3:0a:0b:35:e1:
         9d:d9:23:b3:21:67:39:0a:74:cd:dd:1e:a4:87:22:c4:3a:40:
         5d:38:ca:d0:5d:2e:84:89:1f:50:fd:60:65:9f:47:fe:5e:2c:
         df:1d:45:c5:0f:77:3b:f0:05:dd:17:f7:e8:89:eb:2d:67:57:
         e4:10:33:d8:b0:ad:6b:d0:31:e3:9b:50:cf:c9:85:20:f6:3e:
         49:76:ec:a6:c1:a3:90:b5:71:52:30:9a:59:98:62:82:dd:9b:
         aa:f7:bf:d2:b0:7c:b2:26:29:75:7a:75:01:1a:b0:20:2a:35:
         a4:d0:b3:09:8a:07:81:c6:69:58:b0:fa:dd:13:ad:2f:0b:1d:
         82:b6:e8:e9:bd:78:b2:24:c1:68:10:64:a5:7d:0e:91:09:97:
         6a:a8:5a:36:0c:60:16:85:bf:91:c4:fa:94:67:e8:c5:d9:d6:
         fa:48:1c:43:af:7e:62:c1:57:7f:00:5e:76:2c:b6:b5:a5:59:
         f8:cf:49:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:55:50 2026 by rpki-client