Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/77b072c9-bf36-3297-8288-257450a6ef69.roa
File:                     77b072c9-bf36-3297-8288-257450a6ef69.roa (raw, json)
Hash identifier:          TKgdMzZN1gDbCH7x74UZQWDJoOePj+KSAZYCYdvGY90=
Subject key identifier:   89:59:8F:2C:81:26:A4:5F:89:E8:5D:E2:27:A2:85:1A:BF:61:01:F2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498674B1AB08430FDA89DC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/77b072c9-bf36-3297-8288-257450a6ef69.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396612
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:74:b1:ab:08:43:0f:da:89:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=65abf2d0-1d21-4232-98b0-a69c64d15cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:68:4e:f7:64:1c:d6:2e:5d:44:6b:fb:fa:52:
                    30:31:bf:7e:d4:49:aa:36:01:38:96:ca:22:0d:5e:
                    05:d3:a5:2e:7c:35:37:e2:b1:21:c4:eb:24:33:9f:
                    a5:d9:8b:8d:ce:91:fd:76:01:0e:91:f9:58:c7:16:
                    32:8d:a8:7b:e6:2f:f0:6b:d0:8a:eb:f3:6a:ad:52:
                    7f:94:10:47:35:cd:c2:71:d9:f2:a6:34:13:e5:e3:
                    4b:17:0f:97:92:3c:08:78:82:e8:56:96:1b:a7:fd:
                    b9:e7:77:17:c9:14:af:28:6d:2e:72:f1:a3:0e:cf:
                    a5:0a:6a:15:28:62:b1:a9:1e:c0:99:37:71:9a:34:
                    6c:af:72:2b:5a:6d:ae:5f:ca:65:1b:2a:ac:a5:e2:
                    fa:32:a0:d4:10:ce:00:eb:83:4c:49:47:15:35:f2:
                    bd:97:c9:88:a2:62:28:cc:9b:d8:38:4c:c4:ea:75:
                    d8:bd:fa:73:d3:91:4b:b2:98:2d:84:42:db:0e:dd:
                    ff:1c:50:13:2c:7b:18:b7:37:be:3c:ca:0f:4b:6d:
                    0f:8b:df:85:0f:1d:c1:57:f5:99:23:7e:f2:06:4f:
                    80:f3:a8:23:cb:03:1c:34:99:6b:a5:2a:2c:d1:81:
                    ae:e9:b0:07:68:9b:33:b2:03:e8:f8:e3:a3:13:c5:
                    e4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:59:8F:2C:81:26:A4:5F:89:E8:5D:E2:27:A2:85:1A:BF:61:01:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/77b072c9-bf36-3297-8288-257450a6ef69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:ee:25:10:0a:ce:de:1e:50:83:fb:e8:71:ed:62:63:b8:94:
         04:4a:ec:1b:79:d5:cd:e6:bd:da:94:e7:1a:d8:4e:91:2b:fc:
         fd:5f:68:b6:96:a1:81:65:41:a5:d5:77:bc:fb:e1:15:b3:a8:
         57:a1:24:1e:7b:bd:f1:db:02:9a:45:4d:07:7f:02:5f:e4:fa:
         b0:c1:e0:7a:d5:e6:98:af:8e:64:08:18:58:3f:52:2f:a5:e8:
         d0:04:a3:64:ed:19:c8:d2:88:b5:ae:a2:fa:7e:90:36:26:c4:
         6e:dd:35:63:0d:17:88:be:db:08:12:b8:f5:04:3a:a6:f7:72:
         87:37:d1:d4:b0:c0:cf:cc:0a:75:2e:f5:c4:a2:84:ee:79:1c:
         23:c5:f4:6f:5e:74:59:7e:92:4b:58:26:a9:3b:89:ad:a9:05:
         cb:de:a7:e3:5d:1b:14:59:39:20:07:1c:ad:41:71:c0:fe:18:
         b5:d5:cd:3d:59:25:77:a8:03:b2:83:d8:ef:ea:99:43:63:80:
         02:b7:3c:a9:52:ef:c3:7f:4d:dd:dc:3c:7d:eb:18:f4:3c:9b:
         0b:46:a6:73:95:5e:33:f9:d3:3c:d9:b2:e1:61:5f:12:6c:2e:
         dd:0e:23:20:10:20:7e:9a:72:0a:00:e8:f1:47:3e:90:7f:cb:
         0c:70:78:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:30:09 2026 by rpki-client