Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bad93590-57d3-32f3-bd80-03113a54a6eb.roa
File:                     bad93590-57d3-32f3-bd80-03113a54a6eb.roa (raw, json)
Hash identifier:          63zT8tAUtstqVHbxD+B5AFjBgojSIffE/BEUKG3Bmbk=
Subject key identifier:   75:77:55:01:B5:DC:4D:1B:BC:9A:13:0E:35:B3:BF:A8:B7:BC:22:13
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584EA796A8B4A49E52C68C326780
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bad93590-57d3-32f3-bd80-03113a54a6eb.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54113
IP address blocks:        157.5.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:a8:b4:a4:9e:52:c6:8c:32:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4985073b-83e7-4038-8a1c-93a194f76a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0a:cd:67:0b:61:62:86:39:a9:c7:7f:69:0f:
                    90:45:93:e4:07:18:4f:e5:a2:da:28:69:05:e0:1a:
                    51:39:2f:87:37:00:f7:4d:5e:a8:76:c8:5d:52:1b:
                    ca:02:3a:61:2a:6b:ca:65:81:60:e1:c7:a1:63:cf:
                    57:9a:ff:95:63:0b:62:99:8d:c9:1c:a5:31:cb:63:
                    79:fd:05:18:d3:68:64:07:3d:5f:58:db:90:b1:bc:
                    5e:56:e0:9d:a3:de:08:f6:50:3b:93:1e:ac:4e:b3:
                    79:93:4a:a6:dc:a3:45:bc:3d:85:59:8f:2e:62:ad:
                    6b:2e:4c:66:25:72:e9:ac:d3:7e:ff:83:56:f4:ce:
                    40:c8:20:11:5f:38:f4:1f:58:f6:db:6e:a1:b8:88:
                    1f:b5:03:89:01:3f:aa:3f:68:17:5f:a3:ab:1e:af:
                    70:c9:4c:a9:da:db:5f:93:ed:f8:95:57:15:c1:36:
                    13:27:5e:5e:b8:34:27:08:da:d3:d6:29:d6:84:56:
                    77:5b:10:d0:74:8e:8f:68:e7:a4:8f:8b:8a:06:87:
                    99:fd:33:d9:7d:97:e0:6f:5f:81:24:a8:8d:91:b7:
                    0c:55:06:2f:2a:63:f9:75:a7:50:1b:92:16:0a:12:
                    64:0a:7e:c4:71:dc:4b:3c:1b:e7:d5:3e:35:b1:29:
                    bc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:77:55:01:B5:DC:4D:1B:BC:9A:13:0E:35:B3:BF:A8:B7:BC:22:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bad93590-57d3-32f3-bd80-03113a54a6eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.5.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:50:26:eb:e1:cb:50:77:c2:91:23:db:e2:6e:be:04:77:f8:
         91:9a:a0:44:b8:c1:a9:5d:9a:e7:df:37:37:1b:ee:a8:a4:94:
         4e:8a:cf:42:b0:60:71:6d:87:f0:45:5c:4d:91:2a:b8:20:8b:
         5a:f6:72:5d:51:a0:8f:50:95:05:f3:a2:13:6b:fa:ad:82:eb:
         aa:a3:25:c0:e3:ac:fd:be:d8:8f:aa:08:08:b3:49:4a:b8:af:
         ab:5e:15:77:50:61:6f:58:37:d2:59:e0:73:79:82:9b:6b:de:
         bf:4c:c6:68:46:cb:b5:e1:bd:b1:ff:a1:44:fd:41:38:d1:9c:
         a9:8f:7a:de:dc:0e:ac:e9:88:ea:08:d3:10:90:11:e8:57:c0:
         8e:4c:66:86:05:77:2b:62:37:68:0a:8b:fd:87:47:19:c8:ed:
         e3:60:02:da:ba:cf:2f:21:18:80:41:3f:49:9d:32:dc:53:35:
         71:9f:84:72:74:b1:0e:37:f2:4c:65:2c:31:00:a8:1c:5d:43:
         a7:b1:a7:c8:32:a6:88:2f:1e:4a:56:50:f8:29:62:0b:82:01:
         a3:36:25:3a:86:8f:b1:e3:c4:f6:82:d6:96:77:25:0a:3b:33:
         da:d1:8a:ad:b3:c6:01:ed:12:e7:a9:f1:a8:03:3b:36:52:fd:
         93:d2:3c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:52:07 2026 by rpki-client