Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c896e91-34f7-429b-808d-10170106cf2e/2b1e82bd-93d6-3ad2-8a34-11ad8fcf42e4.roa
File:                     2b1e82bd-93d6-3ad2-8a34-11ad8fcf42e4.roa (raw, json)
Hash identifier:          J1Uc9KheGk1Dl6IC4yubkAq1UNGlm8gShdxzDV8p08I=
Subject key identifier:   74:16:0F:8B:03:20:A4:6A:5F:19:9D:2F:FA:67:CA:B2:11:D5:DC:9B
Certificate issuer:       /CN=7c896e91-34f7-429b-808d-10170106cf2e
Certificate serial:       010D0C9F4328584E9A7FAF01FA7971AFFDC29540
Authority key identifier: 49:8D:27:EC:73:83:BC:4E:A2:27:25:87:EE:22:9A:DE:9C:6E:CA:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c896e91-34f7-429b-808d-10170106cf2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c896e91-34f7-429b-808d-10170106cf2e/2b1e82bd-93d6-3ad2-8a34-11ad8fcf42e4.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     53589
IP address blocks:        204.77.14.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c896e91-34f7-429b-808d-10170106cf2e/7c896e91-34f7-429b-808d-10170106cf2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c896e91-34f7-429b-808d-10170106cf2e/7c896e91-34f7-429b-808d-10170106cf2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c896e91-34f7-429b-808d-10170106cf2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:af:01:fa:79:71:af:fd:c2:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c896e91-34f7-429b-808d-10170106cf2e
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=b6686d0d-b993-4696-8df5-355ea9f85a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0a:30:58:d7:94:f4:86:e5:40:10:3f:57:23:
                    4f:16:73:44:4a:d6:62:e3:d8:3f:05:b5:e7:fb:2b:
                    5a:03:da:8e:aa:09:b3:64:d5:3e:14:21:91:89:27:
                    98:62:f3:17:c8:81:71:12:e8:70:9c:2a:43:eb:3c:
                    cc:70:b9:e6:04:d1:bf:8d:58:9a:1a:bf:df:b2:a4:
                    90:2b:e6:4c:3b:47:60:61:2c:e8:97:59:75:66:3a:
                    ea:dc:c2:e5:20:4f:0f:38:98:3f:7c:9a:91:b5:1d:
                    c6:10:c8:3d:85:d5:40:82:e2:8f:41:24:87:bf:ec:
                    5c:66:17:2c:69:06:cc:20:fb:62:39:6d:42:5d:fd:
                    ac:e0:55:17:d4:5d:36:ff:65:94:38:18:2d:b8:70:
                    35:3a:b8:5d:2c:70:9a:b8:f4:7e:6c:ae:89:20:97:
                    95:d3:3f:3e:22:0b:64:38:76:82:a0:6c:c4:83:52:
                    61:06:e8:97:3f:76:17:0b:ea:29:55:3f:7a:23:11:
                    54:02:21:9e:cb:c5:97:9f:41:f4:61:5c:cd:a7:1f:
                    ca:f5:04:98:37:20:df:d4:e9:74:1a:b7:3c:ff:d2:
                    07:8d:9a:b0:d9:52:cb:c5:48:36:bb:d6:4b:2e:64:
                    ee:36:88:dd:0e:87:8c:90:a8:96:7d:33:23:f7:60:
                    64:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:16:0F:8B:03:20:A4:6A:5F:19:9D:2F:FA:67:CA:B2:11:D5:DC:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c896e91-34f7-429b-808d-10170106cf2e/2b1e82bd-93d6-3ad2-8a34-11ad8fcf42e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c896e91-34f7-429b-808d-10170106cf2e/7c896e91-34f7-429b-808d-10170106cf2e.crl

            X509v3 Authority Key Identifier:
                keyid:49:8D:27:EC:73:83:BC:4E:A2:27:25:87:EE:22:9A:DE:9C:6E:CA:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c896e91-34f7-429b-808d-10170106cf2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.77.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:47:7c:ac:b3:fe:6e:11:47:d1:9c:3e:fb:d6:68:15:1c:bf:
         15:06:03:91:f7:35:01:ee:4b:c8:bd:3e:28:3f:38:2f:06:22:
         48:4b:ed:2d:1b:f9:72:6f:6d:f4:bf:67:de:65:b0:69:69:e8:
         64:a8:a9:61:64:79:76:9a:cb:82:e8:9b:07:a5:55:13:f5:fa:
         ca:97:a8:a2:42:bd:25:cc:6d:60:ad:45:f3:69:75:37:be:dd:
         f5:78:b1:7a:89:a8:82:cf:9c:3d:f4:d2:ce:9b:d3:59:6f:c5:
         d7:31:db:51:d7:35:d3:83:0d:4e:ab:9a:43:93:71:d0:e4:4b:
         80:2a:a8:4e:2a:80:13:18:29:cf:9c:db:99:ed:b8:03:db:a9:
         43:ff:83:6e:9f:3d:c3:1b:2b:01:be:59:a0:d2:27:38:b0:82:
         3a:a4:f5:8c:e3:5a:1e:52:cb:b8:ff:c6:aa:87:e9:11:a8:2c:
         7d:b2:80:7f:2d:57:76:88:d7:9c:42:7e:05:15:50:b5:2c:9c:
         69:9d:4f:d3:fe:e9:0a:03:62:0d:e7:80:86:01:79:f7:72:a0:
         1d:79:b0:a5:0c:e5:2f:8b:07:4d:64:73:a9:85:80:09:f9:e2:
         dd:c3:90:0c:94:0e:7a:6f:df:1f:7d:50:ba:bc:f7:fb:30:3f:
         d0:59:ea:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:21:13 2026 by rpki-client