Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/00b3c60f-946d-330f-82e6-68ed175d932c.roa
File:                     00b3c60f-946d-330f-82e6-68ed175d932c.roa (raw, json)
Hash identifier:          Go/tmheUtCHhheAqhQoPhzxrP8iK2yQI8EXaML2bUPU=
Subject key identifier:   FB:69:0A:C8:10:BC:06:92:41:E3:92:44:01:D1:A2:0A:81:0B:F9:93
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F4328584CE4C77687BF14B5F88CEE9940
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/00b3c60f-946d-330f-82e6-68ed175d932c.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     400618
IP address blocks:        199.15.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:76:87:bf:14:b5:f8:8c:ee:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=c251348e-e5a1-42e1-a5a1-cc7734ebf988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:11:3c:82:09:32:f9:e5:58:3b:8c:34:39:7c:
                    45:3f:54:4f:ba:9b:0e:d8:e4:bf:da:d5:7e:31:be:
                    01:3a:b8:7c:58:0d:70:5c:d9:f5:c5:4c:8c:d7:37:
                    d2:69:8a:96:dc:8f:66:f9:29:10:c1:e0:21:b0:19:
                    b2:2c:e4:d9:08:bf:af:4d:66:d4:5d:3d:ce:41:23:
                    8c:d6:5e:0c:0b:70:7c:27:9b:b3:29:54:25:83:01:
                    d7:f2:5e:4d:e0:87:ba:76:82:14:63:f5:e7:4b:47:
                    63:24:24:b2:e3:b4:99:4f:84:70:5c:70:95:fa:1c:
                    22:58:dc:7b:9e:4c:4b:12:c5:18:62:49:0c:c5:21:
                    ff:c3:ce:ba:b7:b3:2f:36:ce:6a:b6:b6:bf:96:ea:
                    99:10:63:fa:24:29:05:50:d5:55:58:e7:9b:0d:21:
                    2d:fb:af:d4:a1:03:ce:6c:77:1d:7d:7a:bc:cf:78:
                    66:9d:f2:a5:2f:1a:16:fa:34:99:2f:ed:57:c8:70:
                    ed:9d:43:bc:52:1b:d9:3b:cd:24:7a:24:de:52:27:
                    4a:c0:d1:47:26:28:c8:c0:7a:04:5e:92:d1:ab:b8:
                    90:ce:5d:93:83:7e:3f:6a:7a:c3:16:99:5f:9a:5f:
                    dd:07:de:68:03:5c:1a:ff:a6:ef:11:b2:11:46:9f:
                    d8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:69:0A:C8:10:BC:06:92:41:E3:92:44:01:D1:A2:0A:81:0B:F9:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/00b3c60f-946d-330f-82e6-68ed175d932c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.15.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:ba:36:5f:67:27:01:e4:1e:ec:ae:86:2d:98:2a:2f:2e:fc:
         4e:e1:c7:8b:16:1e:2e:9f:03:02:e4:db:54:a1:ca:94:75:44:
         20:fa:6c:bd:98:7e:2b:d8:c2:f2:ef:83:8b:e7:b0:cc:be:28:
         fb:ec:0f:93:85:bf:72:c7:f2:a3:c3:6a:ec:16:ba:a6:18:fa:
         06:1d:f5:2f:a3:86:cc:c5:98:52:57:f1:0d:3a:ed:c4:b7:7c:
         63:38:43:42:7c:ee:9b:d6:47:dd:80:a3:51:52:ef:c9:d6:4a:
         f2:bd:87:83:a1:f3:cb:12:a6:96:30:a8:1b:20:e4:ea:27:10:
         63:52:ad:7e:84:dd:7f:e1:1d:ce:67:44:bb:d6:c2:e5:58:c5:
         60:dd:a7:a3:29:2c:7e:d6:e2:35:37:0f:68:d6:77:ff:85:0e:
         eb:52:b7:e5:7f:92:e2:81:c0:b4:62:6b:33:81:31:07:a7:2d:
         da:2a:b6:1c:a1:b7:06:f1:2b:13:c8:a0:0d:69:6d:4a:4a:cc:
         06:bd:9f:8a:9a:ce:49:51:d0:47:ea:53:8a:1e:43:83:d6:b7:
         77:62:d7:12:c9:fd:99:df:46:fc:8b:11:47:0d:8c:e8:89:09:
         a8:c9:0b:e5:32:6d:43:c4:14:7e:33:39:a1:be:c7:e0:2c:f6:
         0f:6f:a4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:20:24 2026 by rpki-client