Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/6aa8862a-f412-3599-9509-e9374348bdd3.roa
File:                     6aa8862a-f412-3599-9509-e9374348bdd3.roa (raw, json)
Hash identifier:          e4xsdyjGEmgKpNmM3a/HqFFANNSyB+ZbtLiXqJAqKuo=
Subject key identifier:   66:18:59:44:9A:D3:97:00:86:0B:3E:CC:0E:1A:7D:73:E2:9C:DC:E7
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584BA932724F687CB6C41B77D180
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/6aa8862a-f412-3599-9509-e9374348bdd3.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     11693
IP address blocks:        216.130.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:72:4f:68:7c:b6:c4:1b:77:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=0c7785b0-1d32-4b16-8ace-be43f230279e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bf:b9:73:44:b1:bd:8b:ef:69:80:bb:c0:f6:
                    55:47:6f:91:0b:99:7c:7a:0d:dc:87:08:c3:49:e1:
                    84:57:86:ab:25:8b:8e:d0:90:54:e2:e6:e4:76:7e:
                    9a:f1:16:fa:d3:01:1e:0c:2a:3f:29:10:c7:10:f4:
                    5c:e2:58:8f:2c:32:1d:01:0a:39:f8:0e:61:8a:0d:
                    e3:d7:fd:71:89:f4:40:2e:81:19:bf:75:01:cd:51:
                    eb:c8:37:0f:fa:e6:b9:70:a6:eb:ba:81:d1:68:f0:
                    07:f6:90:b1:5c:bc:8e:e1:6d:b8:ca:c6:b5:7b:3f:
                    56:3d:4d:6a:13:ae:83:a8:b8:a4:ae:34:82:e1:6e:
                    aa:34:4b:ae:f7:10:c5:7c:18:6a:3e:10:aa:95:9d:
                    af:3f:a1:1d:99:17:33:56:4c:e3:ed:35:31:06:34:
                    5b:cc:ce:3f:a2:f2:24:4f:67:56:e8:02:67:f7:99:
                    ea:e5:c0:27:62:36:10:13:40:96:22:bb:f1:f3:d6:
                    ce:fb:9f:8b:a0:ea:e2:fa:7e:b0:a2:85:f6:67:fa:
                    b9:51:63:4e:27:bc:b1:30:94:87:79:dd:a0:7e:e7:
                    31:38:99:35:d8:97:46:0c:8e:c5:aa:9a:02:60:8d:
                    63:63:ec:f2:56:f8:88:29:28:65:45:9d:54:1d:92:
                    63:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:18:59:44:9A:D3:97:00:86:0B:3E:CC:0E:1A:7D:73:E2:9C:DC:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/6aa8862a-f412-3599-9509-e9374348bdd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.130.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:64:8d:ce:b6:75:c9:40:22:e1:11:c0:05:b8:d0:c8:4d:62:
         51:b5:f8:6b:87:a6:64:09:0f:bd:0d:43:5d:91:df:f0:0b:5f:
         33:0e:95:2d:72:31:c5:56:6c:66:ba:37:14:62:d4:bc:fe:05:
         af:f9:ea:4e:c1:c5:30:27:aa:0b:b9:1f:e6:c9:b3:58:68:b9:
         bc:05:66:6d:97:9a:03:c6:13:6c:65:76:15:18:9d:a3:ec:fc:
         dc:d9:15:2f:9c:66:08:0c:b6:d0:15:91:62:1b:41:17:51:2f:
         1f:4d:27:7e:55:9c:19:5e:39:0c:ba:31:1a:aa:9a:3b:c3:ef:
         75:82:c0:88:b9:8e:18:37:d8:1a:da:d2:0c:9f:9d:2a:a8:ce:
         e1:f2:1a:28:36:43:5f:f1:ee:33:b7:1d:83:14:46:5f:23:63:
         92:36:7a:93:f0:e3:8a:74:b1:c7:1d:21:ef:e5:67:60:66:7e:
         38:87:8f:ed:f9:70:f0:44:15:a7:95:60:03:c6:1f:b4:65:f8:
         fa:a5:9f:26:79:19:b5:77:7c:97:55:3d:12:a4:be:e5:36:39:
         23:14:10:62:02:06:af:9b:fe:04:c5:50:2a:61:80:6a:30:dc:
         96:99:dd:32:85:b9:a4:55:d3:88:95:9d:6b:a6:32:dd:53:3c:
         7b:02:45:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:45:59 2025 by rpki-client