Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a865eade-baea-4362-8186-981fcc003a4e/a1ad244d-1e5c-366f-89b2-7610a624b16b.roa
File:                     a1ad244d-1e5c-366f-89b2-7610a624b16b.roa (raw, json)
Hash identifier:          0ci9pCAJ8JjaQhIwubK96Ba59cbcOKzWG2XrhCURMtk=
Subject key identifier:   29:DB:AF:6F:C7:79:72:2A:22:4F:F8:9E:32:2E:39:B4:1C:6E:12:C3
Certificate issuer:       /CN=a865eade-baea-4362-8186-981fcc003a4e
Certificate serial:       010D0C9F4328584E253EFF08ED083A03B67A3FC0
Authority key identifier: A0:DE:6B:5F:0C:CC:2E:CF:49:A6:3B:F0:83:1D:CB:9E:BB:17:4E:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a865eade-baea-4362-8186-981fcc003a4e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a865eade-baea-4362-8186-981fcc003a4e/a1ad244d-1e5c-366f-89b2-7610a624b16b.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     205157
IP address blocks:        76.76.0.0/24 maxlen: 24
                          76.76.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a865eade-baea-4362-8186-981fcc003a4e/a865eade-baea-4362-8186-981fcc003a4e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a865eade-baea-4362-8186-981fcc003a4e/a865eade-baea-4362-8186-981fcc003a4e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a865eade-baea-4362-8186-981fcc003a4e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3e:ff:08:ed:08:3a:03:b6:7a:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a865eade-baea-4362-8186-981fcc003a4e
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=47ce8bd3-2bdf-4fff-8360-0184c0f14eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:87:26:eb:d4:95:67:87:ee:07:7b:85:67:74:
                    3c:d1:50:53:7f:bc:fa:05:37:81:6a:c5:38:d5:bb:
                    ba:4c:4e:1f:6c:fd:10:54:f3:0b:b6:6c:4a:86:e1:
                    51:ca:24:56:b9:4b:d4:f5:1d:c8:6a:a6:73:2f:e2:
                    d5:58:c1:f8:41:91:82:27:e4:6f:bd:e6:6a:56:d9:
                    9f:f6:ab:c7:1f:07:0f:f5:98:a2:c9:a4:df:00:24:
                    51:ad:92:08:3a:7e:ed:49:10:55:f8:7e:b9:c5:76:
                    8d:e8:d6:9e:f5:f8:5d:11:7a:1b:82:e7:b9:33:6b:
                    80:ea:98:9f:0a:24:c7:6e:9c:65:0b:84:35:f2:9d:
                    c7:af:bf:03:43:2b:2e:25:7f:8d:b8:44:21:96:e6:
                    33:26:79:fd:00:a5:0b:3e:cd:28:e7:88:e1:97:1e:
                    61:4d:5f:13:d7:fc:2d:0e:f5:11:2b:7d:3b:79:85:
                    5d:1b:cf:93:5c:9d:42:14:7f:39:e5:e9:13:3e:0b:
                    7c:d6:e8:bf:da:e4:49:fa:af:4a:5d:97:33:d4:50:
                    83:67:5d:b4:52:7d:4b:53:b9:9e:9b:70:84:ec:5c:
                    7e:d6:56:bb:1a:28:05:86:69:d2:41:6f:87:6b:53:
                    e9:ab:4d:e6:06:2c:54:94:67:c7:ef:b6:d2:02:3c:
                    f2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DB:AF:6F:C7:79:72:2A:22:4F:F8:9E:32:2E:39:B4:1C:6E:12:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a865eade-baea-4362-8186-981fcc003a4e/a1ad244d-1e5c-366f-89b2-7610a624b16b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a865eade-baea-4362-8186-981fcc003a4e/a865eade-baea-4362-8186-981fcc003a4e.crl

            X509v3 Authority Key Identifier:
                keyid:A0:DE:6B:5F:0C:CC:2E:CF:49:A6:3B:F0:83:1D:CB:9E:BB:17:4E:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a865eade-baea-4362-8186-981fcc003a4e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.76.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:72:85:a6:a5:4d:37:e2:c1:0c:62:27:b2:db:fe:05:81:47:
         ae:27:2c:d7:a6:be:68:ae:28:c3:3d:23:85:1b:b0:bf:6e:42:
         79:b8:b3:15:57:96:8f:87:94:aa:22:38:8d:43:91:50:3f:bc:
         72:7d:ca:94:59:c2:54:b3:3e:6d:92:6f:11:32:53:e5:91:ab:
         f4:55:f4:c6:77:0e:5e:0e:c1:6e:4e:e5:38:f3:60:b8:ac:f6:
         00:f9:6a:4f:6d:32:18:b5:2f:5f:98:60:b7:eb:42:fe:a7:5a:
         a7:e3:6f:0b:16:cc:1e:5c:cb:1b:ee:8c:58:28:98:81:5d:99:
         02:96:e0:a3:9f:c2:0f:0f:03:e9:8e:7f:7b:65:31:f7:1b:45:
         e5:49:fe:9f:33:72:89:07:ee:6f:cf:39:82:a0:a7:b8:85:01:
         c3:c2:2e:72:8a:f7:25:a4:ed:34:e8:88:2c:0e:5b:07:1f:a1:
         50:9e:97:5b:b5:ca:0c:e5:13:6c:d7:04:86:0d:11:8a:8a:1d:
         e8:65:d3:77:0c:57:cf:d6:1a:2b:8a:ae:75:43:03:8b:35:51:
         90:36:c2:78:02:75:78:fb:53:ff:a1:0e:1c:9b:d6:ea:00:b6:
         e6:ab:ff:bf:cd:6f:7e:39:12:8c:95:cc:01:56:6c:c4:cc:4d:
         9e:17:ff:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:49:06 2026 by rpki-client