Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/95d7152e-c6b8-348b-8dde-e12c279be0ff.roa
File:                     95d7152e-c6b8-348b-8dde-e12c279be0ff.roa (raw, json)
Hash identifier:          nYf6AE5AHcy/wLtr5cmdJJAyO4Y/02p8V9wM6nNBInQ=
Subject key identifier:   C8:45:24:1E:0E:0A:F2:1B:09:10:0D:D0:6A:40:9C:67:FF:6F:42:C2
Certificate issuer:       /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial:       010D0C9F4328584DF4DB5B3B219DBC3ABD62B780
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/95d7152e-c6b8-348b-8dde-e12c279be0ff.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     395506
IP address blocks:        76.8.20.0/23 maxlen: 24
                          76.8.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:5b:3b:21:9d:bc:3a:bd:62:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=0f24098a-7654-451f-8c81-db5d5ab11da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:97:e5:d8:99:4f:16:15:3c:c3:cf:95:e7:ec:
                    0a:9b:5a:75:e8:8d:f3:1b:25:76:82:2e:41:72:12:
                    5f:97:a1:72:0d:e5:b6:9e:23:f0:b4:71:f4:f5:d4:
                    d7:2a:29:d7:23:39:5d:75:17:06:be:1e:b8:3f:28:
                    da:60:2f:a7:7c:09:f2:5b:29:6f:f1:0e:b9:46:dd:
                    a6:b6:b0:f3:1f:ea:cc:4c:c0:ba:0e:69:09:fc:3e:
                    01:ac:07:86:cd:88:7b:61:ad:97:a7:54:eb:84:4f:
                    ba:8c:1c:9f:00:59:9e:ca:20:5b:bc:1f:89:a4:bb:
                    26:fe:18:2b:61:e7:64:01:5e:c5:2c:8b:3c:82:f8:
                    27:f7:dc:78:2f:0c:d1:8a:ab:2c:c4:29:98:40:91:
                    c9:52:a6:4b:e4:8d:7e:c8:78:e1:7f:0a:64:4a:7c:
                    f2:e3:28:f5:e2:00:3b:85:45:32:d7:78:d4:c9:e8:
                    f1:1d:17:d9:70:85:dd:9e:6d:60:14:54:45:26:61:
                    d6:f4:ff:de:92:f2:b3:a1:a6:42:1d:b2:5e:5b:bd:
                    3c:f4:64:b4:b3:49:d6:a8:f6:f5:28:0d:cb:f4:72:
                    5e:bc:9b:6f:2b:50:f7:39:19:ad:82:f0:6e:a0:32:
                    ac:ff:0a:42:3b:c6:a9:f5:84:ec:73:b0:94:6f:9f:
                    32:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:45:24:1E:0E:0A:F2:1B:09:10:0D:D0:6A:40:9C:67:FF:6F:42:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/95d7152e-c6b8-348b-8dde-e12c279be0ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.8.20.0/23
                  76.8.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:66:1a:31:ed:51:15:f5:6c:13:0c:64:63:ad:67:44:2b:0e:
         63:56:27:b9:74:9d:f2:1a:bd:4e:c2:e9:b0:f9:87:93:fc:45:
         8f:b7:e4:3f:0f:68:12:c3:46:2a:8c:47:48:4d:80:3b:94:08:
         7f:ca:f2:7e:24:8b:2d:81:65:7e:5f:ba:47:42:8a:48:bd:17:
         92:9e:a7:f2:b7:ca:3a:4c:b7:2b:6f:eb:69:88:d4:9b:d7:25:
         4c:4e:ea:9d:51:99:b0:44:6a:28:9f:0f:c3:19:9e:4c:fc:62:
         c3:8b:f3:91:d5:9b:dd:c0:57:c9:46:f1:26:ba:e5:5b:99:4e:
         5d:86:47:23:df:64:14:e9:9d:7c:fb:39:31:dd:72:3d:59:6f:
         85:73:59:d9:35:c0:69:07:53:6f:de:40:00:cf:a0:26:68:8c:
         77:dd:b4:af:57:b7:36:85:0a:9c:04:5d:5e:80:0d:2a:5d:7d:
         9e:22:4b:af:8f:f3:02:c9:73:0b:e5:bf:db:b8:ae:ef:55:4d:
         76:66:25:dd:44:df:cc:42:7c:45:74:a3:f8:4f:1c:26:36:44:
         34:fc:5a:32:86:4c:96:4b:39:ed:85:cb:79:75:d4:85:fb:30:
         e8:9c:39:63:55:70:c5:35:ee:0d:1b:93:e7:09:84:eb:a1:2a:
         24:e0:cb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:48:31 2026 by rpki-client