Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4d1c9c49-77bb-3bc2-8d11-b895d5f819b7.roa
File:                     4d1c9c49-77bb-3bc2-8d11-b895d5f819b7.roa (raw, json)
Hash identifier:          6uLj4NkMM67+CxXts++/6vSdt3nY1HUJq/OmDIXhxNI=
Subject key identifier:   ED:B5:D5:6E:55:63:69:D4:FD:33:34:FC:98:20:1C:6C:B1:48:24:E9
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584D746FCFBEEE1687EAA5C04B00
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4d1c9c49-77bb-3bc2-8d11-b895d5f819b7.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     376
IP address blocks:        192.77.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:cf:be:ee:16:87:ea:a5:c0:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=5075af78-cf72-47a0-b8c7-1858c29d5589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2c:6f:a3:7b:fd:5d:09:97:b9:68:df:c6:fd:
                    79:f4:d1:95:7b:33:8a:2f:e7:a0:88:e4:61:87:48:
                    1f:34:21:19:7d:56:55:24:5a:a0:f0:18:93:9d:75:
                    d4:f5:f1:52:0c:25:49:88:6b:8b:20:85:dd:c2:48:
                    f5:2f:5b:95:63:8e:fd:12:c3:b7:1c:e5:be:19:3c:
                    5a:55:1c:ae:92:ba:36:db:88:8f:71:41:44:6a:de:
                    07:f0:03:e9:57:79:e2:93:d4:32:9a:ec:46:b5:3e:
                    aa:f4:cd:8b:a4:59:af:49:3c:57:a7:90:21:d4:21:
                    6c:20:98:57:ee:ad:d6:ee:aa:b6:0d:2a:29:c7:0c:
                    dd:c7:7f:e9:1c:23:33:b8:9a:cb:f6:54:2d:bd:b3:
                    6c:57:ce:93:2b:09:40:d4:06:ab:43:f3:cd:fc:03:
                    78:a7:7f:f6:e9:54:10:40:6a:bb:cd:31:a5:1e:fb:
                    79:dc:a9:eb:34:3c:1a:f2:2b:ff:fa:d7:e1:0c:b0:
                    0a:ea:4d:4f:de:9f:7a:38:bd:28:e8:f5:e2:aa:c8:
                    62:da:8d:f0:3b:5c:70:6f:71:63:5d:c6:6a:bf:b6:
                    07:5b:82:99:eb:5b:0f:42:f1:11:db:a8:8d:da:25:
                    51:c0:ac:ca:6d:b6:3d:ae:c8:bf:a5:ae:12:ca:e8:
                    04:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B5:D5:6E:55:63:69:D4:FD:33:34:FC:98:20:1C:6C:B1:48:24:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4d1c9c49-77bb-3bc2-8d11-b895d5f819b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.77.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:9e:8b:f2:54:85:9e:81:76:03:86:84:36:d6:c1:af:04:40:
         a9:ec:f4:6e:70:ce:fc:9a:8f:4d:3d:79:09:af:de:40:2e:57:
         19:b9:1a:4d:e2:a2:37:ac:f3:e1:fb:01:3d:6b:33:50:ae:3f:
         ef:6e:2c:34:a5:99:ce:48:e3:8f:72:c3:36:d9:4d:45:49:25:
         91:bc:d8:c7:69:bb:5b:e1:95:a0:ac:0b:18:88:4b:9c:c1:9d:
         27:aa:f7:bc:0d:19:98:de:63:a2:c0:aa:c6:e0:f8:7b:8c:3f:
         eb:f8:92:bc:dc:51:4a:95:4a:bb:53:b8:25:5a:62:eb:ab:7e:
         7a:e2:57:d9:2c:e0:c8:8e:4b:e0:96:7e:26:ce:ef:2b:b7:df:
         9c:dd:30:ae:7b:a8:ef:c2:72:c4:86:38:99:9a:4e:a3:b1:26:
         5c:24:45:6d:46:9e:38:1c:b9:60:fe:67:f9:49:bb:f1:8b:69:
         5d:f4:37:63:06:36:6b:3e:59:0c:01:82:14:cf:1f:69:83:8d:
         f2:5a:7a:8f:12:77:8c:72:45:cf:06:b8:dc:94:1d:8f:c6:d6:
         5b:af:7d:d1:14:21:fb:1b:44:f4:c0:1c:0d:8d:61:df:40:73:
         33:60:bb:d9:aa:6f:3a:85:99:5d:8e:be:d0:61:a6:5c:fd:93:
         a5:c3:6e:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b8++7haH6qXASwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy
ZDk4MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk
NTA3NWFmNzgtY2Y3Mi00N2EwLWI4YzctMTg1OGMyOWQ1NTg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyxvo3v9XQmXuWjfxv159NGVezOKL+egiORh
h0gfNCEZfVZVJFqg8BiTnXXU9fFSDCVJiGuLIIXdwkj1L1uVY479EsO3HOW+GTxa
VRyukro224iPcUFEat4H8APpV3nik9QymuxGtT6q9M2LpFmvSTxXp5Ah1CFsIJhX
7q3W7qq2DSopxwzdx3/pHCMzuJrL9lQtvbNsV86TKwlA1AarQ/PN/AN4p3/26VQQ
QGq7zTGlHvt53KnrNDwa8iv/+tfhDLAK6k1P3p96OL0o6PXiqshi2o3wO1xwb3Fj
XcZqv7YHW4KZ61sPQvER26iN2iVRwKzKbbY9rsi/pa4SyugEUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO211W5VY2nU/TM0/JggHGyxSCTpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj
NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvNGQxYzljNDktNzdiYi0z
YmMyLThkMTEtYjg5NWQ1ZjgxOWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1
NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2
MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0
NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwE0uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADSei/JUhZ6BdgOGhDbWwa8EQKns9G5wzvyaj009eQmv3kAuVxm5Gk3i
ojes8+H7AT1rM1CuP+9uLDSlmc5I449ywzbZTUVJJZG82Mdpu1vhlaCsCxiIS5zB
nSeq97wNGZjeY6LAqsbg+HuMP+v4krzcUUqVSrtTuCVaYuurfnriV9ks4MiOS+CW
fibO7yu335zdMK57qO/CcsSGOJmaTqOxJlwkRW1GnjgcuWD+Z/lJu/GLaV30N2MG
Nms+WQwBghTPH2mDjfJaeo8Sd4xyRc8GuNyUHY/G1luvfdEUIfsbRPTAHA2NYd9A
czNgu9mqbzqFmV2OvtBhplz9k6XDbko=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:18:12 2026 by rpki-client