Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/77ae744a-6c1c-35cf-9d0d-3e57effa766d.roa
File:                     77ae744a-6c1c-35cf-9d0d-3e57effa766d.roa (raw, json)
Hash identifier:          dVSGQZAkKg5zwhnl3C0lUj0rtaFHIMw/9h8L4kaoQAI=
Subject key identifier:   BE:C3:4C:27:78:2B:5F:BD:0F:6F:91:DF:B0:84:FA:A6:17:14:8C:DB
Certificate issuer:       /CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
Certificate serial:       010D0C9F4328584CBF172913BEBAF31BC5F03800
Authority key identifier: 3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/77ae744a-6c1c-35cf-9d0d-3e57effa766d.roa
Signing time:             Wed 04 Feb 2026 02:00:31 +0000
ROA not before:           Wed 04 Feb 2026 02:00:31 +0000
ROA not after:            Tue 05 May 2026 01:00:31 +0000
asID:                     20278
IP address blocks:        104.128.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bf:17:29:13:be:ba:f3:1b:c5:f0:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
        Validity
            Not Before: Feb  4 02:00:31 2026 GMT
            Not After : May  5 01:00:31 2026 GMT
        Subject: CN=558fd735-62ed-44e3-be9a-81491e4e81a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:68:f4:30:c4:79:db:e8:5d:96:20:cd:f1:18:
                    b4:e8:45:4a:46:cd:74:21:ea:47:57:48:3e:01:1c:
                    d2:78:c0:69:d3:e3:06:bb:2d:c8:f4:65:63:9c:e1:
                    2e:42:6d:0b:81:39:3c:f6:31:ec:8c:6a:f8:bc:c7:
                    86:ba:50:f8:2a:4e:fd:d0:db:7e:20:a4:4a:3b:2e:
                    5f:88:de:8b:83:c5:3c:f5:33:57:5b:6b:a4:bd:3b:
                    65:75:e1:15:bf:f6:e8:86:34:58:c0:d1:15:4b:93:
                    fc:92:ae:b1:5d:4a:e8:ac:31:1a:56:b0:24:5a:34:
                    d7:58:32:84:ce:0e:69:92:19:ca:ec:e1:48:5e:51:
                    6e:66:83:14:60:d8:1a:43:03:38:20:cb:08:be:7f:
                    de:7e:64:91:d1:3e:f2:e6:d0:3e:34:ef:82:9b:dc:
                    2a:eb:c6:7e:e1:00:c4:79:33:64:14:01:7d:09:d9:
                    1c:7b:ca:5d:7a:a5:bd:c7:ba:24:bd:25:0c:33:02:
                    28:47:fc:b0:7e:60:8f:5b:07:e2:62:16:06:79:37:
                    a2:cc:87:8c:59:06:18:29:b3:81:c8:e9:89:10:3d:
                    bf:f9:28:95:40:5b:76:be:9a:73:88:bf:15:f0:a4:
                    84:8e:28:55:45:6e:c8:d0:67:04:90:8c:72:fa:bb:
                    4c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C3:4C:27:78:2B:5F:BD:0F:6F:91:DF:B0:84:FA:A6:17:14:8C:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/77ae744a-6c1c-35cf-9d0d-3e57effa766d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl

            X509v3 Authority Key Identifier:
                keyid:3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:44:ae:d4:ed:ed:e5:2d:1b:44:09:e6:3a:51:ca:e4:a7:4f:
         b3:d9:d1:21:51:01:0a:c4:14:2c:10:a8:11:f2:73:a6:93:45:
         a3:86:8d:18:5b:c2:d4:4d:7d:2a:ce:f1:fa:0a:da:2c:e9:3a:
         c3:a3:74:a3:31:c6:f1:e9:e3:03:90:0e:b3:ba:68:cd:32:bc:
         68:50:74:ee:f8:28:bc:bb:b6:5c:1a:48:f1:a1:25:84:3e:b8:
         5c:2e:77:96:f3:d4:d7:6d:85:47:fc:80:47:4f:89:97:8b:3e:
         75:02:4b:0d:8d:04:a2:84:56:b2:67:7e:95:10:12:38:a0:26:
         f4:99:9a:9f:c9:6a:a6:c7:3f:92:1c:f8:81:9e:af:92:ba:7c:
         84:3e:a3:56:a5:67:ae:e9:cc:7e:7d:d4:2c:ee:0f:f6:ef:98:
         01:fb:35:9f:66:16:83:d8:9b:72:12:6f:66:ba:3b:f7:e9:08:
         0d:1d:ce:65:75:c8:3d:72:1c:da:3d:14:09:d9:54:1c:6f:9c:
         a4:33:ef:43:1e:8c:ad:b5:af:84:08:d7:0b:7c:f7:43:d1:8d:
         a0:5c:ab:4b:b6:21:42:4e:da:80:ff:4b:ca:a6:db:1e:be:27:
         b0:22:57:30:7a:63:f4:94:60:83:05:d5:d6:f6:42:bc:5e:f6:
         ac:e4:46:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:46:22 2026 by rpki-client