Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adc7f503-0611-4e83-bbe0-29c68f153bcc/77187a88-3505-3a73-8dc1-c6db5dc1416d.roa
File:                     77187a88-3505-3a73-8dc1-c6db5dc1416d.roa (raw, json)
Hash identifier:          A18ZbjjZMBwVcwklzEBk7cOgCsEBwiUs9vUGssI0+TY=
Subject key identifier:   D7:82:75:AE:FA:FF:21:4A:91:4B:15:D4:6C:41:93:B3:2A:67:FB:2B
Certificate issuer:       /CN=adc7f503-0611-4e83-bbe0-29c68f153bcc
Certificate serial:       010D0C9F4328584CBDB1E71DB4996418AAE16C00
Authority key identifier: D5:3E:57:29:29:DA:34:80:00:32:EB:38:70:59:95:FA:94:E4:6C:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adc7f503-0611-4e83-bbe0-29c68f153bcc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adc7f503-0611-4e83-bbe0-29c68f153bcc/77187a88-3505-3a73-8dc1-c6db5dc1416d.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     54945
IP address blocks:        192.80.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adc7f503-0611-4e83-bbe0-29c68f153bcc/adc7f503-0611-4e83-bbe0-29c68f153bcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adc7f503-0611-4e83-bbe0-29c68f153bcc/adc7f503-0611-4e83-bbe0-29c68f153bcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adc7f503-0611-4e83-bbe0-29c68f153bcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:e7:1d:b4:99:64:18:aa:e1:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adc7f503-0611-4e83-bbe0-29c68f153bcc
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=337f883c-248d-4a6c-bf8e-27b89350077d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b3:d9:bd:f6:90:37:f1:f6:14:7b:e6:98:e9:
                    f0:b8:b6:a2:01:51:1f:ba:f5:b8:d6:5e:0f:9c:85:
                    c5:98:c2:38:c8:6b:2f:3c:85:26:76:ae:f6:78:c8:
                    64:e7:5b:e9:39:fc:d6:89:3f:36:20:0f:b7:80:4c:
                    26:69:e6:f6:78:47:b9:8a:a2:62:7f:e4:b5:8e:63:
                    1a:ed:fc:1c:2a:d7:18:85:12:7a:f2:02:14:8f:9c:
                    80:68:69:f0:dc:01:fe:28:43:86:c4:9b:39:d9:82:
                    82:71:20:61:e5:4a:3f:45:9d:d4:f5:b9:94:27:56:
                    8c:84:f1:7c:b4:85:a1:58:89:51:d1:72:0b:1c:b5:
                    b7:f3:45:67:2b:7d:af:07:b0:e9:10:fa:a3:7a:9e:
                    de:79:71:48:30:f2:37:3c:db:a8:b9:b6:2a:1c:c0:
                    93:f0:0f:47:e8:f6:a3:ad:a7:22:63:24:3b:1a:4e:
                    9d:9d:d6:39:62:0d:5a:8b:d9:a7:8d:31:04:44:07:
                    5a:3f:b1:c2:3d:9d:1b:c9:06:08:9f:70:2d:a4:64:
                    a8:41:77:9e:a8:16:cd:e4:be:f5:c0:a8:38:a1:59:
                    c1:3b:b1:fa:a7:47:08:e1:ec:a2:b1:71:28:72:b7:
                    75:a2:73:58:1b:28:34:8a:2b:b3:1e:08:61:1e:22:
                    fe:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:82:75:AE:FA:FF:21:4A:91:4B:15:D4:6C:41:93:B3:2A:67:FB:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adc7f503-0611-4e83-bbe0-29c68f153bcc/77187a88-3505-3a73-8dc1-c6db5dc1416d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adc7f503-0611-4e83-bbe0-29c68f153bcc/adc7f503-0611-4e83-bbe0-29c68f153bcc.crl

            X509v3 Authority Key Identifier:
                keyid:D5:3E:57:29:29:DA:34:80:00:32:EB:38:70:59:95:FA:94:E4:6C:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adc7f503-0611-4e83-bbe0-29c68f153bcc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:62:43:82:fa:db:72:48:45:09:3d:5f:38:59:50:dd:cb:cc:
         d1:0a:2a:9f:3c:f5:8c:e0:6e:b7:1e:a2:cf:32:11:14:f3:42:
         15:13:51:be:36:fb:49:18:7d:43:4b:04:4a:f4:d0:c2:b1:87:
         6f:ea:a3:7b:fa:88:fd:0e:50:59:73:17:f5:ff:ea:d6:d6:b1:
         61:a2:0a:0e:84:90:31:cd:fe:57:0c:14:d6:74:fe:30:f9:f3:
         0f:2c:5a:69:ec:a6:ee:f6:67:eb:ba:26:2a:90:2a:6a:9f:2a:
         c7:db:b4:6f:e6:65:ef:30:32:04:35:f6:54:e5:48:94:a9:a0:
         f1:7e:3e:86:c1:a4:b9:d3:93:df:70:4a:6c:d5:92:fa:93:b4:
         19:39:21:af:a8:07:19:6f:92:59:20:58:1b:12:6a:5b:ab:d9:
         0a:46:f7:29:89:21:e9:70:d4:84:c2:df:2b:76:06:9e:72:f3:
         11:96:2d:f0:79:00:02:cc:40:e5:38:c2:ed:3a:0e:26:40:de:
         41:f6:0f:89:28:60:d9:e4:8a:03:27:23:d9:32:3f:69:3e:53:
         d3:72:fa:81:92:dd:dd:b1:79:2e:34:7d:39:e9:5e:00:3b:f7:
         a9:59:c2:a5:47:60:cd:a5:f1:06:26:a7:21:ae:ed:14:a2:89:
         f1:15:40:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:25:16 2026 by rpki-client