Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/bdf5ebbd-7530-3578-b5ab-e9e6e864959e.roa
File:                     bdf5ebbd-7530-3578-b5ab-e9e6e864959e.roa (raw, json)
Hash identifier:          veAD4BwxkDCy0RJVkSaHU6ODuJxju3fd+o4jrVZjTsk=
Subject key identifier:   2A:7A:91:C9:48:90:55:AE:DF:D5:7D:3B:47:35:67:0A:49:22:8A:3E
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584D6AAA8A58EB50C7955FF88880
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/bdf5ebbd-7530-3578-b5ab-e9e6e864959e.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     7265
IP address blocks:        216.47.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:8a:58:eb:50:c7:95:5f:f8:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=32173bbe-12d1-44bf-b29c-b63080db56a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:48:e2:85:57:46:79:b4:c5:d6:2e:5e:d3:49:
                    16:e6:d3:65:04:bd:50:0b:43:09:ce:ec:d7:b5:9e:
                    69:64:01:62:dd:33:ca:20:4e:9a:c8:ee:2f:2c:f0:
                    a5:11:b6:1f:b0:66:31:28:d2:82:e8:64:83:f4:ed:
                    d5:0f:f2:c5:85:c9:7a:df:e9:09:80:d7:bc:df:54:
                    aa:06:b6:95:34:ef:eb:be:fa:ee:ff:5f:05:34:30:
                    3d:53:22:bc:ae:69:09:21:3f:19:7d:ee:0d:8e:ec:
                    fd:fd:5c:0a:ba:11:6f:2b:07:51:d1:55:90:0d:27:
                    2f:31:cb:75:09:d6:71:73:ba:22:44:03:49:35:74:
                    97:6f:90:07:f2:62:28:58:14:06:db:1c:17:6f:0a:
                    35:90:fc:63:38:99:15:45:64:c5:2d:59:83:54:c0:
                    d1:f5:6c:e6:4b:12:d9:b1:dd:15:3e:e9:b2:58:02:
                    fa:82:a7:f0:7b:bf:a4:98:13:4c:23:71:69:d0:3b:
                    46:38:58:cb:c2:c0:b8:d4:c2:9e:22:91:ae:41:3a:
                    74:cf:57:c1:5a:b0:dd:f9:60:2b:45:cb:a6:a5:59:
                    af:bd:d5:47:fe:b1:07:1b:27:dc:e2:00:76:df:14:
                    d2:75:ff:25:0f:c3:c4:33:05:1c:48:9b:0e:89:3a:
                    8b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7A:91:C9:48:90:55:AE:DF:D5:7D:3B:47:35:67:0A:49:22:8A:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/bdf5ebbd-7530-3578-b5ab-e9e6e864959e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.47.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:25:0b:e2:3e:4d:c9:73:44:48:05:a0:be:b7:79:78:73:ec:
         c8:e1:ef:df:ad:06:20:57:6d:7d:f0:16:86:d7:e9:f0:f3:38:
         66:cd:ad:6b:6d:e8:5c:da:b2:80:27:6d:ca:c8:d8:f7:3d:a7:
         ae:67:68:d6:31:3b:ab:37:02:3e:c3:15:c3:cd:10:20:6e:b9:
         bc:bf:fa:f7:19:97:c6:04:5c:f1:1a:51:83:93:ca:b5:09:49:
         95:e6:bf:2f:45:b1:6f:f2:ca:2c:6f:a1:b4:54:16:71:1c:da:
         c6:15:8c:c9:43:b2:ce:70:10:dc:94:bd:a3:29:4f:f9:db:36:
         ff:5c:aa:9b:6e:0b:f0:df:58:7b:ce:0c:e4:60:c3:de:69:a1:
         e3:e1:be:b8:73:0e:6c:85:db:7f:75:e8:a8:b0:2f:92:92:64:
         00:96:35:8c:b4:0b:9d:d9:e5:e9:b3:74:b1:d1:8c:e5:6c:42:
         0a:0d:f9:f6:17:5e:70:8b:74:d7:19:22:de:e7:27:f4:9a:ed:
         db:89:4a:74:ba:d1:51:c9:a3:49:94:09:5f:61:ba:b7:2d:67:
         c8:12:51:67:b2:14:24:38:df:2e:34:87:dc:b2:ca:47:eb:fa:
         05:7c:b3:3c:2c:2d:a2:3e:6f:c7:8d:be:22:7a:d0:c5:f7:af:
         08:81:b9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:32:51 2026 by rpki-client