Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/03802e80-f89f-3807-98ed-5a1b96165055.roa
File:                     03802e80-f89f-3807-98ed-5a1b96165055.roa (raw, json)
Hash identifier:          9f2XFYr0/Gj1sBFRVv+z0kmD286SVveA9ND9Wb6tmaU=
Subject key identifier:   3C:46:77:D9:54:15:E8:9B:23:3C:03:9E:E4:8C:D5:B6:BB:B3:42:61
Certificate issuer:       /CN=112c6636-0b34-4e47-95cc-29a6b53a3388
Certificate serial:       010D0C9F4328584EA790ABE20B94D0E56B2DEF00
Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/03802e80-f89f-3807-98ed-5a1b96165055.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     29967
IP address blocks:        161.195.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:ab:e2:0b:94:d0:e5:6b:2d:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=763c2e25-897e-4c72-8a45-70fe1f38ce0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d1:ae:b9:27:9b:cb:94:ed:a7:9f:b0:28:bb:
                    0a:cf:17:d8:d3:ff:44:85:a0:87:ea:70:39:14:b6:
                    9b:40:89:ca:4a:6a:07:ae:31:5e:ba:3a:ec:75:da:
                    80:a9:22:27:30:54:b5:83:b2:c4:cc:39:55:11:a7:
                    35:01:29:33:1e:33:bc:66:8e:14:98:ad:9f:03:06:
                    8d:4a:26:36:05:38:bb:29:b7:5d:a7:ba:b1:fd:5d:
                    55:42:de:b1:41:32:f5:5a:c9:40:50:0e:52:6e:f9:
                    53:27:08:95:c0:e6:0d:2a:23:c8:75:0d:99:e2:15:
                    52:90:c7:4a:8e:e1:b5:11:e4:7d:1a:77:fb:8a:94:
                    bb:ea:78:08:15:09:ba:8a:9a:90:fc:96:08:23:e2:
                    bd:4c:db:04:9d:2c:aa:bf:2f:b9:e5:92:07:56:e9:
                    74:46:75:d4:18:20:72:90:b9:7e:ce:2e:a6:74:bb:
                    99:f4:d2:b5:87:4b:87:af:19:31:6f:5c:e0:44:64:
                    3c:1c:0e:90:69:6e:ba:59:c1:6e:7d:be:65:6a:b1:
                    4f:70:84:d4:7b:8b:08:8e:f8:62:b9:de:b9:94:d3:
                    ab:a1:28:e5:54:ce:65:69:97:f8:7b:2f:0c:2b:12:
                    cc:f5:62:69:da:d9:a6:7e:4a:84:b7:fc:37:2c:27:
                    4a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:46:77:D9:54:15:E8:9B:23:3C:03:9E:E4:8C:D5:B6:BB:B3:42:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/03802e80-f89f-3807-98ed-5a1b96165055.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl

            X509v3 Authority Key Identifier:
                keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.195.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:3a:dd:89:54:15:e3:86:4b:9a:84:f7:e5:94:d0:8a:0d:21:
         65:0b:77:0c:c5:ab:8d:74:69:dc:6f:d7:23:e8:34:e2:68:b1:
         75:8c:f2:b5:bc:3a:8d:21:63:3a:22:b1:ec:a6:cd:69:69:d4:
         4c:01:1b:fa:04:ec:ee:25:6f:10:da:e1:d0:9f:f7:84:d8:c8:
         ec:d1:a6:63:58:e6:46:cd:98:48:01:c6:6e:d2:1e:bd:78:c4:
         12:e1:6b:22:94:6e:21:38:51:54:7c:b4:6b:d4:cc:7d:08:ef:
         73:c4:86:ff:97:71:f5:1e:be:bf:ba:51:29:c6:35:8f:65:4f:
         02:9f:17:d7:5f:bc:8a:fc:80:80:38:0c:5f:a9:5c:4a:41:88:
         7d:aa:ab:f8:f1:5a:d9:90:18:16:7d:83:03:1f:56:ea:1d:20:
         49:51:8d:a6:97:00:b6:41:fc:5d:1b:46:b1:e5:6a:01:9a:1d:
         27:5f:68:2a:bb:e8:ae:04:e5:47:3b:47:5f:31:19:a1:77:fd:
         a9:4d:23:73:42:80:6d:77:bb:9f:0e:cd:c1:5f:09:94:cf:1d:
         65:ba:4d:bb:88:99:a2:e9:c9:66:21:27:c8:8b:29:d6:14:a5:
         d3:59:97:dc:0a:48:14:11:7a:56:11:42:17:30:0c:86:0e:8d:
         ed:d4:f3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:26:53 2026 by rpki-client