Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cd52336a-ae07-38e6-880d-5ab02e333cfe.roa
File:                     cd52336a-ae07-38e6-880d-5ab02e333cfe.roa (raw, json)
Hash identifier:          WJAUP4JmHQwC4x/7CBsejlkLmxjP+PAQBP8hxJGZjx0=
Subject key identifier:   2D:F0:38:C7:69:E4:10:91:2E:6D:EF:C3:E0:70:02:36:93:39:98:BB
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584DE84B5A7A765AFFDD0D5AB680
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cd52336a-ae07-38e6-880d-5ab02e333cfe.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     23473
IP address blocks:        76.10.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:5a:7a:76:5a:ff:dd:0d:5a:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=8d6e2113-f3df-44dc-84e3-0cde81bfbbe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:84:c0:ed:81:15:0a:b1:8b:dc:ca:04:35:02:
                    aa:9c:0c:06:fb:f6:ab:c6:98:35:4b:ae:7d:2a:6c:
                    74:0c:40:b0:b4:7f:cb:85:82:8f:68:84:61:01:72:
                    0a:70:7b:03:79:f7:9e:98:a5:db:58:ae:27:f2:38:
                    09:59:d3:5c:08:4a:e1:7d:bc:96:ab:b7:41:33:3b:
                    29:72:92:1b:34:ce:4b:4a:f3:5e:d0:39:9d:43:85:
                    d2:8b:8f:32:d0:d9:5d:ba:f5:df:81:db:7b:c5:ab:
                    4a:c4:ed:55:46:f1:82:80:6d:8a:48:79:5b:6f:39:
                    48:68:6d:ae:f8:32:93:ae:b3:0e:9c:01:db:df:b7:
                    5b:18:b1:a2:cf:55:6e:16:e4:e3:9c:6c:6b:73:d9:
                    89:05:4a:b6:44:77:97:23:fa:46:96:d8:f8:85:91:
                    6a:3d:17:54:c6:f5:3b:bd:0d:4c:b6:3c:56:e9:e9:
                    66:f7:df:42:a7:24:6f:79:93:d7:72:d6:b2:bc:ed:
                    a3:81:c9:98:fe:26:0e:db:fd:b2:0f:fc:b6:ed:6d:
                    25:0e:10:20:bd:0d:55:fd:20:3b:48:94:1b:ef:b7:
                    45:3e:0f:72:a0:7d:89:1f:71:56:83:55:7b:53:de:
                    53:fe:0a:51:25:67:50:0f:f6:4c:b6:ec:b0:07:64:
                    35:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F0:38:C7:69:E4:10:91:2E:6D:EF:C3:E0:70:02:36:93:39:98:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cd52336a-ae07-38e6-880d-5ab02e333cfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.10.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:b8:b1:bc:a5:e5:b7:eb:95:cc:56:3b:2b:bb:99:3f:64:ff:
         a8:12:f4:ef:cd:8c:aa:3c:fd:47:b7:1d:2d:74:09:d6:86:20:
         7e:3c:94:e9:a3:8e:3f:d4:88:57:5b:e8:7f:69:68:ff:8f:60:
         d3:f6:b4:9d:10:63:77:45:3d:3e:87:e6:d8:01:2e:c9:f9:db:
         7e:61:28:08:da:1c:7c:65:ef:13:c3:40:8c:ad:a2:23:5d:ac:
         e0:4c:f3:87:94:fa:fb:31:8e:a0:34:84:70:6f:dc:70:07:54:
         57:a5:d8:bf:f4:22:fc:75:0c:61:69:5b:54:0b:c1:d8:9a:a3:
         29:64:87:0f:65:ff:69:88:1b:71:eb:93:09:4c:5b:12:7b:57:
         5a:e9:43:30:8b:6a:6c:5a:96:58:15:9d:10:83:48:de:c3:74:
         d8:9d:ee:0c:ee:de:67:78:99:b9:85:b0:91:bd:82:33:d6:4c:
         76:b5:f8:78:11:97:92:5e:8e:1b:42:da:ec:9c:95:b6:34:84:
         80:fd:95:e7:8b:76:9a:dd:f5:23:57:bd:61:30:56:c3:7b:ae:
         4e:05:e5:d8:10:8e:31:9c:4d:27:28:78:9c:97:c9:09:9f:1a:
         16:61:43:e2:a2:06:8a:96:e3:95:56:62:62:b9:ff:20:16:b8:
         91:8d:b8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:30:45 2026 by rpki-client