Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde/77729a5b-1b7a-33f8-a44a-15a9a2253033.roa
File:                     77729a5b-1b7a-33f8-a44a-15a9a2253033.roa (raw, json)
Hash identifier:          u+ybQ/t7NXRKUOvDSsYxBj8ddumdDoc5734kNs9mVFg=
Subject key identifier:   39:D9:1E:B2:F5:BC:0C:00:FF:B6:9C:5A:8C:CC:D5:3D:C5:05:7A:60
Certificate issuer:       /CN=c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde
Certificate serial:       010D0C9F4328584E1A1442F54BB807EC8FF43900
Authority key identifier: 81:DE:FC:06:1A:2C:35:27:26:BA:55:1A:1F:45:9F:4E:75:D4:C1:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde/77729a5b-1b7a-33f8-a44a-15a9a2253033.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     396982
IP address blocks:        156.77.176.0/24 maxlen: 24
                          156.77.177.0/24 maxlen: 24
                          156.77.178.0/24 maxlen: 24
                          156.77.179.0/24 maxlen: 24
                          156.77.180.0/24 maxlen: 24
                          156.77.181.0/24 maxlen: 24
                          156.77.182.0/24 maxlen: 24
                          156.77.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:42:f5:4b:b8:07:ec:8f:f4:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=15be02db-b1cd-45ed-863f-f25e2224cf83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:92:b8:cd:9b:5e:21:c5:8c:f5:15:c9:5e:aa:
                    bd:05:ce:f4:94:e7:2f:db:d3:c0:79:ab:57:7a:ea:
                    d0:3a:07:8d:19:39:99:1d:c0:66:55:b3:a5:38:f2:
                    87:76:49:bc:54:f0:47:db:3f:e3:34:c4:56:8d:d2:
                    74:7f:db:be:02:d9:df:bd:24:90:ea:35:a9:16:cd:
                    59:34:83:97:8b:30:a3:6d:f9:15:0a:68:4d:94:13:
                    ce:6e:55:28:7a:d5:4e:93:25:64:4b:d9:ab:9d:6e:
                    0b:03:3d:8f:0f:7f:03:f0:80:5c:e8:94:c9:32:ea:
                    15:80:9c:58:75:96:aa:a6:84:5d:db:06:d0:ed:16:
                    8d:e0:3b:7b:04:31:49:3f:ab:24:4e:2d:a8:cb:70:
                    be:15:d8:1d:9d:ca:bc:26:74:17:00:d3:1f:27:bf:
                    05:87:52:f2:21:9f:23:06:75:7d:d1:47:59:43:32:
                    a8:95:46:b2:d6:a8:66:c2:5e:d0:d5:35:56:01:57:
                    90:d7:df:c0:57:60:8a:40:b2:c9:e8:f3:06:a8:cc:
                    17:f6:3c:3e:e4:be:a2:6a:50:89:9f:41:53:fb:21:
                    66:52:7f:36:7f:8d:15:9b:13:39:9f:13:a2:f6:81:
                    3e:25:e9:ee:be:a8:5b:4b:a7:0f:80:c3:0a:e6:1c:
                    f3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D9:1E:B2:F5:BC:0C:00:FF:B6:9C:5A:8C:CC:D5:3D:C5:05:7A:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde/77729a5b-1b7a-33f8-a44a-15a9a2253033.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde.crl

            X509v3 Authority Key Identifier:
                keyid:81:DE:FC:06:1A:2C:35:27:26:BA:55:1A:1F:45:9F:4E:75:D4:C1:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.77.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:56:de:07:75:b9:93:a6:5a:1e:56:c3:fd:3a:44:36:31:82:
         6a:83:e9:47:fe:f5:d4:35:6f:57:0b:90:cf:f6:e7:57:0a:91:
         3c:bf:bc:32:97:06:66:fc:f0:98:29:10:db:f2:97:bd:98:b5:
         28:8f:b2:16:01:75:f7:c9:c9:70:94:03:d4:39:a2:9c:3d:ce:
         21:c3:fb:0c:92:72:06:7d:1d:c4:2c:c7:69:c3:1f:07:50:77:
         4d:04:e4:11:f0:5b:6a:cf:5e:ff:dc:c2:42:76:2f:f7:c5:7c:
         c8:38:2a:7c:2c:0f:27:da:eb:35:a0:a7:c2:c6:b1:13:c2:63:
         9e:08:12:a6:c3:63:f6:ee:6b:14:89:64:56:71:10:9f:f1:20:
         86:9d:6d:a8:42:5b:83:ae:5a:4c:cb:aa:30:9c:5e:b7:ca:33:
         bd:29:49:62:a9:b9:48:ff:e9:7d:e7:1c:d7:93:6e:da:08:41:
         9f:d8:32:42:0b:00:98:99:cb:7f:a7:b6:b1:99:c9:2e:77:56:
         78:03:fe:e2:b0:d1:35:7a:d5:e9:f9:c2:59:f8:d6:18:02:d3:
         52:3c:da:c1:a7:a2:04:09:3d:28:93:5f:3a:b9:d5:78:a4:1a:
         52:ad:10:46:08:98:af:7e:72:f8:9e:6c:94:ad:d4:94:e8:bc:
         97:f0:98:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:02:10 2026 by rpki-client