Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/87b77f2b-bacf-3751-8e20-9a5fec7cde18.roa
File:                     87b77f2b-bacf-3751-8e20-9a5fec7cde18.roa (raw, json)
Hash identifier:          fxH3TuwzzQq5ll3AMO0J/GBBgc4qeOp/cSNsCSGklhQ=
Subject key identifier:   F2:2D:44:D2:5B:F4:FA:EC:6C:27:A5:39:57:C7:AD:E6:56:20:83:F3
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584E9A7FDCA80C72932D70FA8AC0
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/87b77f2b-bacf-3751-8e20-9a5fec7cde18.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     834
IP address blocks:        198.1.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:dc:a8:0c:72:93:2d:70:fa:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=94784098-6564-4e2f-8379-a1bc768bc25c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:55:ef:8b:61:94:ae:7f:d1:01:47:ec:1d:3c:
                    58:df:5f:1f:07:f0:54:ff:eb:d3:6b:b2:32:22:2d:
                    7b:12:ef:4b:ca:81:52:74:d1:bb:11:92:c9:6a:15:
                    ee:5c:f1:c2:3d:d5:3c:c1:c7:6e:53:11:0c:50:61:
                    e5:e0:8c:6d:a3:2c:78:ec:fa:d1:92:0a:7e:63:85:
                    90:f9:95:3d:a3:f1:50:66:e3:a8:63:08:c1:7d:5c:
                    bb:c6:1e:eb:b9:ea:05:d6:60:46:8f:5f:eb:c6:5e:
                    f6:02:62:38:05:27:1f:09:48:d2:b3:10:1e:3b:a6:
                    8d:e2:cb:d7:98:2c:f8:36:68:e4:84:e4:cb:96:03:
                    17:64:ab:95:7b:0d:a0:33:e8:6f:af:1b:47:2a:72:
                    fe:0e:e6:45:e0:25:05:75:35:ec:0e:35:d1:74:6c:
                    9d:85:01:03:03:aa:8a:aa:9c:56:20:cb:34:f0:b4:
                    08:9c:c8:23:4d:15:fc:96:b0:3b:0b:24:8b:c0:8c:
                    55:d5:87:8c:3e:04:a5:cf:bf:d3:b0:61:c8:a6:ad:
                    41:e0:9a:27:af:43:91:f1:21:3b:ad:f9:13:2a:36:
                    36:fb:e7:4b:d3:63:67:e2:ae:d6:90:d6:9a:68:1d:
                    97:2b:d9:f8:e6:87:db:f4:65:eb:a6:79:14:e8:84:
                    b2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2D:44:D2:5B:F4:FA:EC:6C:27:A5:39:57:C7:AD:E6:56:20:83:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/87b77f2b-bacf-3751-8e20-9a5fec7cde18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:98:7a:93:25:ba:45:13:c0:5d:08:c8:74:97:0d:c8:a4:9f:
         4f:39:63:16:07:2f:41:ae:0f:e5:d3:9d:cd:40:32:b7:16:fc:
         ec:dd:b4:5b:49:9a:6b:f4:0e:2b:5c:1a:eb:64:34:0a:1d:6d:
         99:05:a7:21:a8:fd:11:2c:83:90:af:d9:0b:0d:b3:f5:1a:f4:
         4a:31:30:e4:33:7f:06:e1:5f:1d:12:a1:89:b7:b0:d8:f4:c6:
         58:80:4f:28:36:6d:79:41:51:56:0f:1b:54:3f:1e:9e:08:3b:
         59:30:c0:75:48:a8:6f:c4:79:5a:c0:4a:6d:9e:ca:7a:7e:1c:
         12:36:41:c9:c9:41:80:10:cf:63:23:d7:07:c2:08:a4:15:ff:
         e0:1e:ff:8e:d9:56:03:6d:e1:d5:9e:40:7c:49:c2:7d:36:a4:
         24:09:49:e0:ee:87:b3:35:07:bf:93:e4:b9:a2:3b:d4:2b:a2:
         6f:b2:a4:14:a1:9f:e3:84:b2:54:5c:59:b3:bb:46:f5:01:78:
         26:d4:42:d5:5a:e0:de:8a:0d:54:e7:34:13:5b:8e:16:bf:bc:
         30:7a:54:5f:e9:25:f3:b0:f4:04:4b:bc:c7:07:8b:2b:4e:2c:
         d3:ac:ed:a4:b8:fe:36:cc:56:dd:57:e1:47:77:e3:a8:56:75:
         c3:6c:06:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:40 2026 by rpki-client