Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7c4e4f0e-c2fc-3b1b-a5a7-fb2c0605f1a8.roa
File:                     7c4e4f0e-c2fc-3b1b-a5a7-fb2c0605f1a8.roa (raw, json)
Hash identifier:          t3wIEKkokS+xtHdp4WLYscvpWIbqy7LBYg+99wc3+f0=
Subject key identifier:   C4:1D:40:69:7D:B2:C7:0D:EB:F2:64:94:9A:80:D4:19:FF:43:57:87
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584F305260460A5C7247242486F0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7c4e4f0e-c2fc-3b1b-a5a7-fb2c0605f1a8.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     11404
IP address blocks:        76.14.0.0/16 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:60:46:0a:5c:72:47:24:24:86:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=442812dd-74c5-4479-82af-290b03f497ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:11:4c:d9:06:e4:00:79:99:87:3b:58:96:55:
                    8f:7d:5a:8a:68:b4:5d:89:9c:76:38:b3:de:f0:d1:
                    4f:c1:49:3b:28:72:b5:0d:ed:e2:75:9d:80:e4:70:
                    f7:e5:4a:14:60:10:96:17:06:90:b2:74:66:3c:a2:
                    50:bd:2d:c7:1a:f9:6b:1d:ff:7a:7c:13:15:d0:86:
                    2f:80:18:36:72:c7:bb:2f:3f:ae:50:ca:0e:d8:87:
                    ec:2c:82:8c:3d:8c:06:ea:46:33:76:d3:2f:2f:a3:
                    8f:cf:62:42:80:5a:3d:10:4f:c9:96:96:e8:8f:36:
                    c3:23:7d:3e:b5:a8:94:ab:c6:71:ee:2c:43:04:b5:
                    58:cd:52:2a:a6:86:69:e2:85:4d:80:bc:b1:74:db:
                    3c:52:c5:b5:59:5e:06:d9:0e:1a:b3:1a:96:1d:4a:
                    1f:ca:08:a5:97:2f:91:8a:50:79:1f:bc:5b:a0:08:
                    76:08:9f:9d:f2:a5:43:ff:b6:51:5e:55:77:62:2e:
                    09:93:aa:2e:ea:78:fd:5e:ae:1d:e0:d8:4d:a2:57:
                    22:88:9b:48:5f:27:fe:56:33:59:f0:12:61:5f:a4:
                    3a:98:ee:da:85:27:d5:b3:59:e8:4f:ef:6e:86:95:
                    b6:91:e2:9d:38:b2:25:6f:1c:10:7d:b0:fd:0b:83:
                    56:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1D:40:69:7D:B2:C7:0D:EB:F2:64:94:9A:80:D4:19:FF:43:57:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7c4e4f0e-c2fc-3b1b-a5a7-fb2c0605f1a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.14.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:9f:90:08:23:3e:25:a8:02:8a:13:ab:f6:c7:17:bb:b2:93:
         ee:fe:aa:96:c4:12:2e:55:2b:0d:4b:92:4c:a0:29:86:48:13:
         7f:15:22:14:de:4d:65:e7:69:c5:92:c8:9d:4c:ec:e2:9d:06:
         02:b2:45:e8:fa:4a:c4:2b:db:63:97:d0:d6:31:bb:cc:f8:cd:
         c7:c1:58:79:9b:a2:75:7d:91:de:73:dc:17:1d:d4:d0:0a:9f:
         30:f2:17:42:c5:89:56:33:05:39:37:d0:8d:48:f0:e8:c1:59:
         b1:20:25:6d:e9:2e:22:83:55:da:ab:4a:77:65:8f:91:61:62:
         09:6b:2a:a8:1f:e7:5d:cb:ba:2f:18:82:7f:4a:3e:8f:59:a7:
         f8:7c:86:1f:ca:75:e7:c8:96:cf:96:ac:0b:8c:23:b1:97:6f:
         50:da:12:bd:7b:0e:b2:f8:81:92:e3:b5:10:ee:30:fb:76:3d:
         60:3f:3c:c9:7b:df:a1:27:0f:fd:43:0c:34:45:96:62:02:f6:
         57:c9:01:8f:55:13:0a:09:3d:9b:ed:39:5d:7c:9c:b0:8a:c0:
         bd:a3:b8:7c:27:3c:7b:bd:11:93:2a:a2:09:26:02:d6:d4:e6:
         c4:e1:3e:d8:2f:c1:5e:fa:74:43:a2:f7:74:05:0a:43:b9:4f:
         ee:01:00:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:11:22 2026 by rpki-client