Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/0f8115e7-3642-3437-b0de-9f2ea1d7600e.roa
File:                     0f8115e7-3642-3437-b0de-9f2ea1d7600e.roa (raw, json)
Hash identifier:          6hFd6hg1l4p/Es7gpL0StDgGyFeHcw8vP/FOjo9vBVE=
Subject key identifier:   F4:64:46:2A:28:E6:B9:47:CD:19:DA:9A:78:61:1C:A0:62:51:23:C1
Certificate issuer:       /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial:       010D0C9F4328584D0217B190725D5C063BBCDF00
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/0f8115e7-3642-3437-b0de-9f2ea1d7600e.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     23546
IP address blocks:        76.77.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:b1:90:72:5d:5c:06:3b:bc:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=89688ec9-ef81-49e7-ae39-d0b6e3a11ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:0f:9c:59:61:0e:66:71:b0:bb:c6:1a:86:ee:
                    ea:f9:56:b7:d1:d8:fe:2c:9c:27:5c:ad:ab:23:b5:
                    b6:36:e5:d9:3a:05:01:cf:c9:57:7f:59:09:d1:78:
                    07:f1:33:42:32:e4:ce:d4:69:f3:bd:3c:62:51:7f:
                    38:95:9e:0f:ba:ce:61:e3:9f:3f:ba:27:7d:35:ba:
                    3a:c6:53:41:81:30:ff:3e:0e:32:60:c7:36:b5:b7:
                    5c:a4:9b:d2:84:84:4b:97:01:7a:7e:61:92:cb:52:
                    fd:d9:44:bb:ac:80:44:f6:2d:41:17:ca:1c:62:aa:
                    f1:80:f9:4e:c9:96:d5:3c:de:c6:91:cb:d6:04:0c:
                    88:c8:21:5c:85:e5:19:47:d4:0b:e5:be:a3:d2:28:
                    3f:fc:0d:cd:37:48:47:6f:5a:09:1f:a2:f3:7d:27:
                    d6:61:65:ae:f9:68:d0:5b:9d:31:3e:9c:b7:4e:0b:
                    a4:72:f1:57:18:47:9d:b2:b4:55:31:87:ec:77:e2:
                    f0:27:27:83:fe:10:88:e6:3e:f8:c0:f9:5e:b5:91:
                    c5:74:7d:0a:0f:18:3c:e8:ac:c7:e3:e2:e6:96:4d:
                    13:ac:14:a9:90:87:2a:d6:22:6e:40:d9:01:1a:95:
                    f0:7f:dc:b5:8f:51:56:6e:b6:7e:0f:73:0e:71:e5:
                    09:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:64:46:2A:28:E6:B9:47:CD:19:DA:9A:78:61:1C:A0:62:51:23:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/0f8115e7-3642-3437-b0de-9f2ea1d7600e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl

            X509v3 Authority Key Identifier:
                keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.77.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:17:17:61:0d:7c:d4:2a:6a:a3:d9:8a:05:22:2a:db:cc:56:
         51:bf:53:5d:59:d4:c8:0b:42:3f:6a:0f:91:7b:94:e0:98:17:
         96:2c:3d:31:da:ad:39:dc:5a:a6:ff:ae:f6:e6:41:df:84:2c:
         66:16:6f:e7:8c:55:71:74:54:83:66:aa:0a:1e:18:9b:69:20:
         d8:ef:7e:4a:8c:81:b1:34:00:a2:6b:ea:06:81:99:54:16:bb:
         bb:4a:aa:4e:d0:71:64:32:96:40:d3:40:60:0c:9b:38:45:74:
         cb:c1:b2:57:8e:5b:1d:91:b1:41:fc:54:54:ff:c5:a0:7b:b7:
         02:2f:3b:69:6e:a1:a0:6f:20:57:5a:79:65:ff:87:47:3a:88:
         2d:ad:e2:02:60:e7:54:8f:11:bf:fc:53:32:bf:c4:06:e1:4b:
         c5:4b:38:1a:5b:9e:0b:6a:46:7f:35:37:18:0a:8c:3b:52:32:
         90:c7:0a:f4:ee:56:4a:1d:06:19:52:7c:2c:e6:87:10:d4:7d:
         a1:aa:ce:84:25:25:b3:a8:b4:8c:da:57:88:3a:3e:41:da:41:
         80:33:70:eb:07:3a:aa:57:19:19:f7:bc:c0:74:f2:69:f1:59:
         37:e2:ae:f8:17:d7:59:17:c9:1a:df:1b:e5:0f:66:50:51:fd:
         47:37:c4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:04 2026 by rpki-client