Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8d81771a-b35d-3282-b74d-64d202bc3015.roa
File:                     8d81771a-b35d-3282-b74d-64d202bc3015.roa (raw, json)
Hash identifier:          dZijZA4CKVvXse4P/k/2XCXvX8du9rXc5Yg44diXtnQ=
Subject key identifier:   20:7D:03:A0:24:29:D3:E5:86:F4:D6:D2:45:AA:5B:F7:FC:A1:DF:F0
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584F30525EA4A4B02DF7B7FC3680
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8d81771a-b35d-3282-b74d-64d202bc3015.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     5650
IP address blocks:        76.191.96.0/23 maxlen: 29
                          76.191.98.0/24 maxlen: 29
                          76.191.100.0/24 maxlen: 29
                          76.191.102.0/23 maxlen: 29
                          76.191.104.0/23 maxlen: 29
                          76.191.112.0/23 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:5e:a4:a4:b0:2d:f7:b7:fc:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=37f99179-a10a-4441-8837-d4e16dde3b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:46:0b:6f:f0:f9:8d:ac:c4:79:55:5c:00:1d:
                    d8:28:4c:51:df:e3:c7:fb:55:27:b7:90:50:38:ce:
                    a2:31:9b:96:c9:dd:d1:1d:ff:e5:d1:50:c8:69:95:
                    d0:53:bd:86:53:64:81:d6:f5:01:36:12:1e:07:75:
                    28:44:6d:f3:35:48:0e:6b:e2:b9:97:ac:9f:45:7f:
                    76:c1:d6:da:65:39:9e:2e:61:55:ec:ee:0a:45:80:
                    ca:77:89:b9:01:ca:ca:41:3e:dd:50:38:ed:c5:66:
                    2c:d4:4b:2f:10:43:eb:99:7a:47:4b:e2:a7:0c:ba:
                    e1:c8:47:07:1c:0d:76:5c:38:20:f5:ab:1a:7f:dd:
                    cf:d1:4e:0c:61:75:bc:23:67:9f:6b:f8:27:c2:9f:
                    16:4b:75:28:60:a6:3c:b0:c8:8a:51:12:5d:c9:87:
                    51:9e:60:82:dd:a4:fb:25:6c:44:64:1a:8d:eb:e7:
                    2e:12:82:0a:e5:48:87:88:8b:db:bf:38:d9:4e:1d:
                    54:11:76:cf:f0:e5:23:74:81:52:61:ce:78:3e:81:
                    b7:42:c0:c5:9b:5a:31:ff:6f:ae:65:da:a4:8d:6a:
                    32:a6:7c:17:fe:21:19:6e:d4:ef:1e:4b:30:92:9c:
                    c1:60:30:59:68:fc:ba:12:db:b0:98:5f:0a:07:5e:
                    e0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:7D:03:A0:24:29:D3:E5:86:F4:D6:D2:45:AA:5B:F7:FC:A1:DF:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/8d81771a-b35d-3282-b74d-64d202bc3015.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.191.96.0-76.191.98.255
                  76.191.100.0/24
                  76.191.102.0-76.191.105.255
                  76.191.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:01:32:de:98:43:e1:e3:9f:9d:c1:b9:8a:81:1f:ca:50:6a:
         53:60:4a:1d:3f:44:5f:5f:db:81:8c:22:8f:bc:77:54:c8:2e:
         26:d0:9f:c4:1d:33:b3:f3:99:e7:b6:f8:81:f8:05:2b:75:ff:
         b6:bd:9f:c4:c4:68:6a:f2:c7:4a:f6:5c:f8:cf:54:8e:32:fa:
         fe:0a:90:b7:2f:e0:05:46:29:42:d5:2b:fb:f3:8d:f7:8c:bd:
         c0:d7:92:c9:fb:cf:13:b4:0f:0c:1e:9d:94:2b:de:38:77:62:
         fb:9e:04:8d:4b:4a:56:fc:78:b7:dc:c4:98:8e:ec:7b:e1:d7:
         65:37:3d:66:d7:be:75:c9:f2:c8:7c:8d:74:50:d1:5a:23:08:
         f0:21:57:f0:ae:16:3a:62:51:f6:a1:f3:81:72:a5:9e:60:3e:
         43:c1:5d:45:36:61:49:86:ee:6d:9a:6c:8c:26:42:70:ad:c5:
         60:b3:e2:1e:75:8f:ce:12:64:c3:de:10:75:5b:4e:37:33:b4:
         c3:c2:40:a1:fb:2a:cd:71:05:7b:54:2c:d7:cd:4f:61:0a:ef:
         2d:8f:ba:ce:36:2d:7f:7a:a7:64:84:d3:58:fa:0d:12:73:66:
         54:13:43:13:f8:d6:6e:84:9b:dd:5c:09:18:b8:67:58:69:07:
         f1:11:e0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:38:06 2026 by rpki-client