Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/322c7c8c-acec-33d7-9ea3-07e354992704.roa
File:                     322c7c8c-acec-33d7-9ea3-07e354992704.roa (raw, json)
Hash identifier:          oIUT1XtNz8+7XaoJqYXLCpoH4nQ4UKlHVF71HdyMUvo=
Subject key identifier:   A8:09:F3:EC:A5:19:1D:6B:7F:B9:FA:1B:5C:51:B5:D7:CC:DC:A9:6E
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584EA79AD0EF47DDFF4C23BF4A40
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/322c7c8c-acec-33d7-9ea3-07e354992704.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54113
IP address blocks:        157.5.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:d0:ef:47:dd:ff:4c:23:bf:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1f2547d6-9193-4f7f-ad17-3727a3be90f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1e:9b:5d:37:fd:5c:9d:28:f9:eb:6c:9d:af:
                    68:f9:15:bf:97:f8:37:03:98:84:7d:22:50:6f:3f:
                    36:51:37:ea:a4:6d:98:1b:11:78:7b:fc:8b:b8:c5:
                    0f:e4:ca:5f:89:06:8a:57:4f:60:f0:30:6c:66:61:
                    f6:16:f9:fd:2c:a7:fd:81:5f:26:2b:74:10:e6:61:
                    6b:f7:19:e0:6f:d6:db:69:5b:a5:62:ee:ca:e9:29:
                    f9:dd:b7:4f:03:9d:ac:2a:05:80:48:59:84:8a:4c:
                    51:87:a5:1e:01:73:54:d7:d2:f3:39:d9:b5:87:16:
                    fa:81:15:8c:a7:43:f6:92:e0:8a:b1:9b:25:f4:6e:
                    bf:aa:50:e6:44:b4:24:d8:f6:0f:03:fd:65:e0:13:
                    30:c7:a3:ac:c2:c7:8f:9f:39:89:3f:af:fa:15:87:
                    72:22:f2:5e:c7:8d:e6:69:c8:73:e8:d5:eb:3b:b1:
                    b0:2d:02:f4:8b:f6:14:1b:21:32:4e:04:5a:59:17:
                    51:21:72:4b:37:e7:8f:06:24:17:27:0f:ae:8b:3f:
                    64:cf:93:49:e0:62:02:13:19:17:cb:3f:64:2d:6f:
                    b0:d2:5d:bc:97:f6:fc:44:51:c6:5c:6a:0a:45:47:
                    24:af:61:8d:c6:78:33:60:51:b9:e8:9e:c1:f1:db:
                    82:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:09:F3:EC:A5:19:1D:6B:7F:B9:FA:1B:5C:51:B5:D7:CC:DC:A9:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/322c7c8c-acec-33d7-9ea3-07e354992704.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:c7:26:40:c1:3b:70:96:4a:53:2d:ff:94:dd:bc:32:b8:1a:
         e8:f1:73:3e:10:7b:78:aa:26:68:6d:ab:bf:2e:4f:90:3d:ba:
         7c:68:70:bb:b5:e4:9d:a3:45:9c:61:cc:e9:32:fa:59:cc:6a:
         37:06:ad:ec:0e:1b:5c:6e:c4:b7:8d:11:fd:cf:a5:60:c6:e1:
         06:0b:0e:0c:7a:7f:51:c2:31:ec:f3:81:06:98:e6:37:1b:0d:
         b4:b5:a9:64:d0:85:ce:ad:17:a4:79:6a:c0:59:58:0d:40:df:
         64:4d:3b:23:24:22:62:40:42:fa:0f:f0:a7:28:2e:b6:95:82:
         73:20:66:52:b7:04:60:cd:6d:5c:91:51:fe:5a:3f:a1:9c:67:
         b5:ac:64:05:66:37:81:54:8a:91:72:f4:af:77:fc:b2:fb:b0:
         4a:5f:d3:71:77:05:11:83:f3:d3:fb:bf:40:7b:76:0e:8f:10:
         7a:3f:65:24:53:21:65:41:09:c9:2f:0d:55:79:31:1b:0f:d0:
         13:27:39:6c:db:37:f4:ad:82:72:c6:8c:ad:e1:a2:51:fa:9d:
         6f:0f:b6:7b:25:ce:ea:a4:5d:6b:8d:2b:6b:16:b8:ad:fa:d7:
         74:22:25:d4:23:d2:8e:f7:e2:5e:f8:76:ef:da:72:2d:43:18:
         24:4d:ca:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:20:19 2026 by rpki-client