Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/996fdb20-fc5a-3408-8b85-ad4946b759e6.roa
File:                     996fdb20-fc5a-3408-8b85-ad4946b759e6.roa (raw, json)
Hash identifier:          DbbnY6/Ko8EmdFfKYczE19VSgZEZYlTjM3UTyjJJJLY=
Subject key identifier:   40:15:03:52:CB:EA:57:0F:35:33:D9:38:3A:AA:0F:7E:A1:5D:08:29
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584CA5F737B5313EBFEBFF4E8C1A
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/996fdb20-fc5a-3408-8b85-ad4946b759e6.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     13335
IP address blocks:        204.195.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:37:b5:31:3e:bf:eb:ff:4e:8c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=3f06911c-ada9-4b98-94c2-af21605ae85c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:df:f2:f3:3b:bc:58:08:c4:5c:0e:66:5b:07:
                    7d:22:8c:9c:15:ab:a7:1e:10:3b:67:af:08:50:7d:
                    99:9b:b0:25:e3:0e:04:84:f3:ae:99:f1:19:ee:74:
                    19:8a:94:9d:87:f7:6f:4e:2e:38:f1:8b:eb:cc:16:
                    25:3c:1e:c2:f3:e8:02:c7:da:5a:7b:4a:09:9f:77:
                    d3:3e:1f:f8:8a:93:cd:cd:d4:2b:f8:9a:54:69:d7:
                    27:32:1a:96:54:96:12:26:e3:ff:7c:0d:d1:dc:d9:
                    5b:c3:64:f4:a2:32:ed:e1:2f:66:9f:b7:8d:c4:7b:
                    f2:20:d3:3b:8a:f3:16:ef:af:63:df:21:69:75:b1:
                    a5:ae:91:0f:72:b4:eb:52:9c:de:b3:b0:43:da:9f:
                    da:c9:75:0f:c9:b5:32:16:10:f9:7f:cb:34:80:fc:
                    9e:43:58:13:3c:e7:9f:59:48:c2:4c:e9:5a:be:2b:
                    04:1f:0c:01:b8:d0:4f:4b:49:8d:4f:5b:5f:de:16:
                    53:ff:34:37:e8:53:04:78:c3:88:31:ad:6c:3e:d7:
                    b7:0b:5e:28:df:75:71:33:07:5d:6b:3b:bf:84:ee:
                    da:8c:a5:dd:6f:60:52:5b:cd:96:50:65:52:25:f9:
                    7c:41:1b:49:7f:a9:f7:5a:c2:c6:7c:3f:41:27:ed:
                    7f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:15:03:52:CB:EA:57:0F:35:33:D9:38:3A:AA:0F:7E:A1:5D:08:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/996fdb20-fc5a-3408-8b85-ad4946b759e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:9d:2a:84:8b:d7:17:71:e5:3c:b3:cd:06:12:7a:4f:1e:7f:
         e5:71:08:90:8c:f0:fb:a7:74:6b:f1:ac:64:f7:98:bf:e1:d0:
         39:4c:13:dc:f8:7a:ff:14:5f:54:93:9d:b6:47:57:b5:15:0d:
         aa:98:25:18:3a:d0:4c:b7:c6:c4:ee:f6:83:1a:a2:17:75:d0:
         e8:94:e2:89:3e:7c:75:29:61:35:c8:d5:6b:d2:ec:10:09:d6:
         e1:79:4e:d2:10:b2:21:30:89:6f:41:90:98:e3:ca:dc:86:ef:
         ff:05:ac:24:6d:92:5c:31:db:a1:a0:e3:ad:88:46:41:a5:68:
         52:00:44:1e:35:68:ad:dd:6f:f8:20:07:e3:6e:cc:87:b1:ba:
         0e:cc:8e:d4:a2:75:3a:c1:2e:ab:ae:7d:37:9f:3c:16:34:81:
         55:8e:91:f8:f6:e6:58:8d:87:d1:66:01:9f:2b:8f:2a:81:50:
         20:cc:df:6b:f7:22:90:5e:55:2e:76:75:ce:ea:15:88:1a:e9:
         88:60:fd:27:fa:b3:1f:c2:c5:01:56:bd:bd:b9:27:82:bc:21:
         8a:28:8b:75:97:18:7e:f6:cc:20:7f:92:6a:11:e3:1a:d8:74:
         a5:a8:76:4b:5a:0b:f8:27:67:08:ae:f0:e6:1d:3e:ad:42:74:
         30:c0:6d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:43 2026 by rpki-client