Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/53b04310-5f1e-318a-9e95-16a44646a11f.roa
File:                     53b04310-5f1e-318a-9e95-16a44646a11f.roa (raw, json)
Hash identifier:          LxRHMCxRWc0mG9VG1J6/Csx3nRdmgmwtnjIlQkmp+ec=
Subject key identifier:   24:E6:2B:61:77:80:9D:DA:F5:90:3B:2D:44:53:24:4F:C6:C3:82:98
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584EA2DFC07DBBE91EA55CED4900
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/53b04310-5f1e-318a-9e95-16a44646a11f.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     12083
IP address blocks:        24.214.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:c0:7d:bb:e9:1e:a5:5c:ed:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=ebcfbbf0-630d-4069-979c-28212e3cedcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:16:e7:fc:30:d3:f8:f2:8b:2a:79:e8:11:76:
                    1a:e3:b8:0f:1a:6e:9a:61:c1:1a:20:1a:eb:db:8d:
                    5f:22:19:5c:9d:b7:d1:7e:44:4b:ec:88:d1:88:d8:
                    da:19:44:e2:51:48:59:4f:51:9b:37:31:f1:ff:25:
                    8a:02:40:a7:da:75:8d:28:94:c5:27:8c:f7:dd:90:
                    f9:c5:f8:52:74:a2:1b:31:1d:bb:8b:b9:d1:38:c5:
                    ed:d0:c2:9f:d7:e5:a1:ce:24:1b:e0:2a:14:72:c4:
                    bc:65:c9:07:8a:59:a3:db:22:ee:f5:84:5e:cc:45:
                    97:da:57:f0:a4:05:64:59:0a:5d:74:4b:8e:30:82:
                    46:82:df:b6:ef:56:5e:74:93:18:a4:b1:95:05:bb:
                    8c:df:df:2d:bb:66:1f:c6:c4:c0:5a:41:06:f6:2d:
                    e2:5b:f9:51:8b:4d:5e:d2:4c:b3:5a:21:f3:44:4e:
                    f4:1c:e2:4b:15:fe:28:3e:38:9b:b0:6e:e2:e5:4a:
                    90:a4:80:82:a0:f5:db:9c:64:6b:c7:e2:fe:d1:e2:
                    c3:ca:76:e7:94:41:47:19:fb:96:ab:50:12:8b:50:
                    ef:5b:28:d6:1b:f7:d0:c8:2f:f4:3b:93:c6:54:5c:
                    30:59:f6:a5:84:d8:9d:7a:f3:5f:a1:80:07:f3:8a:
                    71:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E6:2B:61:77:80:9D:DA:F5:90:3B:2D:44:53:24:4F:C6:C3:82:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/53b04310-5f1e-318a-9e95-16a44646a11f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.214.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:5f:73:00:61:2b:29:8f:f5:44:3f:a8:51:a4:9f:8a:ab:d1:
         d5:20:c4:46:58:5a:6e:5e:6b:88:41:53:9c:89:e9:d3:c3:f1:
         22:69:d5:d0:71:a1:98:27:59:5a:df:0e:29:b7:69:c1:07:08:
         51:bc:49:90:56:2a:e6:d0:43:18:8d:73:fb:cd:d1:b7:78:c9:
         fe:a1:0e:a9:48:1b:4b:fb:70:0b:19:02:0a:cb:19:9e:ab:c9:
         35:c4:e0:24:38:b1:28:46:3d:6c:53:d7:18:55:5f:4f:14:b8:
         fc:55:1f:20:08:c4:0e:db:5f:bb:d5:e8:3e:98:9c:42:cf:89:
         7d:e4:ae:ba:da:ee:e9:ac:9c:9a:04:f6:bb:49:3e:a8:8e:31:
         30:7b:a1:54:c8:53:d7:b9:ca:00:8d:b8:e3:cb:9c:d6:59:09:
         55:ed:b8:ea:38:c7:81:15:5d:dd:8a:03:7d:e4:48:16:aa:ed:
         42:05:fc:ef:09:32:78:cb:63:bb:a5:3e:a4:09:7c:e9:22:48:
         d0:80:1b:85:0c:27:c8:4d:0b:85:99:a6:12:8a:d6:e4:60:d0:
         08:93:03:e3:45:7f:6d:e9:17:2c:94:00:25:0b:ca:a3:20:57:
         15:dd:d3:c3:90:14:7a:a7:0b:5f:0c:dc:c5:a2:90:c6:32:3f:
         71:18:36:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:31:35 2026 by rpki-client