Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/f0c12dd2-83e6-3b1e-9ff5-b3b103077075.roa
File:                     f0c12dd2-83e6-3b1e-9ff5-b3b103077075.roa (raw, json)
Hash identifier:          e3O6L629msox/0HsPZL+RuwEnxYR+uLPCxt4OTgc05g=
Subject key identifier:   A1:D6:8C:14:78:22:73:08:23:9D:86:CE:85:54:78:B8:E7:16:F1:B9
Certificate issuer:       /CN=8b77a7d1-99e1-41fd-a1d7-901b6db5d45f
Certificate serial:       010D0C9F4328584C7681602030D7BC36E9A705D0
Authority key identifier: F4:AB:8E:0B:AE:72:8E:39:E6:31:A4:DE:75:CD:AD:E2:2D:95:33:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/f0c12dd2-83e6-3b1e-9ff5-b3b103077075.roa
Signing time:             Fri 09 Jan 2026 02:00:31 +0000
ROA not before:           Fri 09 Jan 2026 02:00:31 +0000
ROA not after:            Thu 09 Apr 2026 01:00:31 +0000
asID:                     399218
IP address blocks:        172.81.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:76:81:60:20:30:d7:bc:36:e9:a7:05:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b77a7d1-99e1-41fd-a1d7-901b6db5d45f
        Validity
            Not Before: Jan  9 02:00:31 2026 GMT
            Not After : Apr  9 01:00:31 2026 GMT
        Subject: CN=48957855-5f72-4667-9379-486220aa1354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:89:08:0e:24:4b:50:07:e3:c2:1d:e7:e7:a3:
                    97:79:09:e7:b6:fb:a6:19:a1:96:c4:2e:8f:d0:9e:
                    f9:26:48:dd:79:ef:9b:36:e3:f4:8e:c5:07:c0:f0:
                    1f:85:b2:91:c1:54:6a:92:56:fc:be:a6:20:e1:72:
                    30:4f:92:09:c6:7c:df:80:c4:86:c0:ba:a7:1d:2d:
                    88:ef:17:bb:11:2d:9f:e7:13:d8:ef:8d:0d:21:f8:
                    12:5f:eb:66:4a:84:fb:80:3b:47:0d:ea:66:dc:ee:
                    81:ae:8c:43:e8:62:57:7e:a9:18:5b:e6:55:2a:7e:
                    90:88:7c:61:a8:5d:c6:45:1c:f6:c2:10:ed:4a:d4:
                    c5:59:19:c6:1e:5b:35:42:39:1c:97:98:27:37:fa:
                    7f:e6:c6:ce:0e:94:72:d5:70:d8:ed:d6:1c:9b:b5:
                    e3:7a:e0:de:af:db:8d:ef:0b:56:f0:b6:f0:46:9a:
                    de:5d:97:a0:c6:66:54:9e:91:6b:bf:8c:fe:38:c2:
                    f2:79:09:d7:f7:49:18:9f:83:29:da:65:7d:21:00:
                    a2:0f:8e:45:1c:1d:c8:83:72:22:22:f2:15:e1:f5:
                    ab:ad:8d:ea:6f:a6:cf:9e:8f:14:93:c1:a8:bf:4f:
                    0e:b9:80:71:e9:4b:1e:fb:9e:46:aa:0b:e0:c1:8a:
                    ce:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D6:8C:14:78:22:73:08:23:9D:86:CE:85:54:78:B8:E7:16:F1:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/f0c12dd2-83e6-3b1e-9ff5-b3b103077075.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.crl

            X509v3 Authority Key Identifier:
                keyid:F4:AB:8E:0B:AE:72:8E:39:E6:31:A4:DE:75:CD:AD:E2:2D:95:33:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b77a7d1-99e1-41fd-a1d7-901b6db5d45f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:4f:74:e6:c9:83:78:52:7b:a8:b9:c9:f6:45:12:b8:0e:07:
         bc:f5:90:6b:57:9d:f7:e9:73:bc:d4:63:5e:0a:79:d7:2e:7c:
         01:cf:e0:1d:55:90:4a:2c:00:3b:29:0f:42:2b:e3:5e:3a:b1:
         ce:d9:56:d2:d2:e7:1c:f0:e3:2f:ca:a2:51:73:19:5f:b1:9f:
         d4:d1:11:78:93:b8:dd:80:ae:85:86:37:0c:da:d6:ac:db:4f:
         88:79:e0:78:d8:3d:60:f3:ef:fc:d5:24:92:98:18:7b:ba:f5:
         56:8e:77:a8:e4:0b:46:ef:16:14:8f:fd:00:d6:86:05:d4:76:
         09:f3:8b:91:96:88:3a:9d:57:50:8b:b0:e0:f9:50:b1:35:75:
         98:ac:7d:b5:7e:1e:ad:5a:c8:1a:c5:3d:fc:88:1e:02:86:e7:
         c0:f1:86:d0:3f:e8:2d:13:7b:2d:cf:32:ae:e3:e0:e1:b2:da:
         3c:31:9a:54:9d:fb:7e:92:24:ec:06:a5:be:e7:d7:69:fc:7d:
         00:3b:99:ae:b8:2e:af:c9:29:6e:d1:07:46:d5:f9:18:c0:c5:
         10:ae:fa:a1:bc:54:c8:5c:ab:0a:75:f9:4e:f9:c6:8e:f2:be:
         da:44:ae:9a:b8:bb:8c:8e:d1:3e:30:40:b4:cb:53:eb:ba:90:
         f4:f1:53:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:28:51 2026 by rpki-client