Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/3cc7131d-7a60-3712-92dd-3528026436b0.roa
File:                     3cc7131d-7a60-3712-92dd-3528026436b0.roa (raw, json)
Hash identifier:          gqvk+YhyW0/E8WbWExmoduEmQd1AJKdoufVvXT0WLoE=
Subject key identifier:   6C:0C:47:24:3F:F7:52:26:4B:51:14:63:AC:91:D3:0A:08:69:48:40
Certificate issuer:       /CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5
Certificate serial:       010D0C9F4328584CBF1726DDD062F14A7BC51300
Authority key identifier: 53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/3cc7131d-7a60-3712-92dd-3528026436b0.roa
Signing time:             Wed 04 Feb 2026 02:00:31 +0000
ROA not before:           Wed 04 Feb 2026 02:00:31 +0000
ROA not after:            Tue 05 May 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        148.59.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bf:17:26:dd:d0:62:f1:4a:7b:c5:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5
        Validity
            Not Before: Feb  4 02:00:31 2026 GMT
            Not After : May  5 01:00:31 2026 GMT
        Subject: CN=ba451320-a502-4765-92d6-4cdd7a471b2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:08:5c:9c:b4:7a:95:65:7d:6f:27:c1:24:17:
                    3b:41:6b:cc:3b:46:22:7b:bf:3c:49:52:bd:4c:98:
                    77:4e:f4:21:4d:2c:11:58:e3:2e:2e:a6:57:17:22:
                    0a:4a:bb:ae:4c:8e:7c:a2:da:14:77:a1:2b:00:de:
                    5b:4d:97:60:3f:07:40:24:71:4b:72:01:8e:1b:b1:
                    8b:bc:b5:8d:38:a7:85:c8:47:11:e6:0c:9e:04:22:
                    c2:44:11:aa:eb:0d:7e:ec:d5:35:cf:d9:72:c0:c3:
                    a4:1e:52:ce:17:53:33:42:95:db:86:2a:98:7f:76:
                    19:7a:de:c9:db:92:3c:76:6c:89:ab:dd:33:b6:64:
                    ef:59:6b:fe:2d:5c:37:2b:b7:cd:4e:eb:0f:ba:b1:
                    54:46:e2:b4:77:50:bc:57:1c:8d:4e:88:ab:56:d3:
                    56:42:08:6f:83:f7:5a:9f:f5:5f:f2:71:16:2d:f2:
                    13:5c:d7:51:68:72:cc:3c:0d:a9:e3:89:b7:65:c4:
                    cb:63:98:95:c0:2b:1b:e1:62:0c:11:5d:02:d6:92:
                    09:7b:2b:0a:57:e5:57:a7:e4:3c:02:fa:49:3a:20:
                    3d:02:31:fd:a5:b1:43:3c:56:2c:5b:98:f4:14:dc:
                    31:19:c1:d2:e6:fd:b0:45:c6:b1:59:55:09:8e:22:
                    75:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0C:47:24:3F:F7:52:26:4B:51:14:63:AC:91:D3:0A:08:69:48:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/3cc7131d-7a60-3712-92dd-3528026436b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl

            X509v3 Authority Key Identifier:
                keyid:53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:69:34:28:03:33:d0:31:5d:4c:12:09:c4:43:b1:20:f0:ca:
         3a:04:f3:5e:b1:1a:95:e6:b1:30:4b:0a:5e:4f:82:bf:60:76:
         b3:4b:74:9a:c2:7b:73:44:43:12:06:a8:a6:fe:af:f9:53:9a:
         db:40:92:62:47:a5:6e:9a:b6:c6:18:a1:18:d0:0e:ad:bc:c8:
         d8:8e:80:8b:15:a3:43:d4:24:2b:22:fb:aa:ba:b8:d0:a5:c5:
         0c:3c:2e:9b:72:21:78:2e:c8:a0:c2:4d:ed:09:1e:a0:ae:ae:
         45:b8:e3:af:aa:34:02:36:07:a7:5e:d5:aa:d3:bf:5e:dd:a1:
         47:9a:84:66:77:da:b7:8b:9a:ae:82:60:d3:66:41:67:8c:22:
         71:5c:77:5a:1c:84:30:d1:50:e7:25:78:fd:31:ac:cf:b5:b0:
         09:92:f3:62:af:57:b3:4b:74:31:c7:67:18:0c:9a:c4:21:95:
         b9:9e:20:7b:8b:4a:83:3d:90:7f:d0:18:41:57:d3:ad:f5:c7:
         0f:7a:2b:37:b0:ad:8e:99:00:7c:bb:0e:e3:9c:3d:c7:3a:cd:
         03:9d:e9:90:11:68:80:0a:9d:8a:74:1b:51:3d:44:e0:34:33:
         c9:62:0e:59:5a:fc:35:01:45:6f:d8:e5:e3:b4:c8:98:70:32:
         c4:b8:0c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:40:01 2026 by rpki-client