Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/df2ac65c-7d1c-3158-9dee-79f9e3a06b70.roa
File:                     df2ac65c-7d1c-3158-9dee-79f9e3a06b70.roa (raw, json)
Hash identifier:          jgfNI73KxgxsBDXIU5XnontVQPOvzWq6K56PL7SE6Fs=
Subject key identifier:   C8:6B:1A:19:CF:34:E5:A5:77:1B:4A:EF:5F:6A:ED:D5:44:65:18:0D
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584CCBA76B36DBC810BFCA972AE0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/df2ac65c-7d1c-3158-9dee-79f9e3a06b70.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     11404
IP address blocks:        76.191.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:6b:36:db:c8:10:bf:ca:97:2a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=8638846c-2fa5-4e42-8b5a-be56e6081c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:11:5b:0a:e1:fd:c5:96:b5:83:61:72:f0:cd:
                    e1:65:98:54:57:28:a2:47:df:30:b0:68:4a:7b:88:
                    74:78:ba:97:d7:5a:b8:a3:80:d0:a9:f4:1d:b1:32:
                    c6:fc:c4:65:82:67:0f:0d:96:b4:8e:f2:78:9e:1d:
                    f9:2a:3b:16:de:51:2b:80:1e:b0:4c:61:27:0b:7c:
                    d2:a4:ef:00:b5:88:57:7f:d6:19:52:12:6e:16:be:
                    d2:70:e5:7f:ce:5a:28:5d:59:d7:38:04:b1:51:eb:
                    bc:97:ec:90:d1:51:d7:86:0c:ee:09:1d:ad:58:b2:
                    26:f0:43:2d:42:be:d9:fa:3a:85:bb:4a:49:4f:bb:
                    dc:aa:fb:c3:2d:ef:a9:05:62:35:2a:a3:b6:12:e1:
                    5d:0b:10:cf:6d:d7:e0:f5:f2:9f:de:0e:96:c6:60:
                    19:4f:d7:b2:38:34:75:1f:9c:f6:63:53:ee:77:07:
                    ae:4e:29:b8:61:4b:8f:62:f3:1b:65:20:1d:a5:e1:
                    1a:90:cf:29:66:09:20:91:41:fe:6c:4a:5b:1f:8b:
                    df:eb:2d:7a:ec:e2:81:7d:5f:16:82:dc:c3:44:9a:
                    c0:23:5d:42:93:3e:67:00:eb:69:94:58:9a:a1:90:
                    a4:2d:82:8f:0c:45:56:ea:fc:9d:0a:a3:fd:a5:ae:
                    d9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:6B:1A:19:CF:34:E5:A5:77:1B:4A:EF:5F:6A:ED:D5:44:65:18:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/df2ac65c-7d1c-3158-9dee-79f9e3a06b70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.191.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:2d:17:22:9e:2a:ba:75:40:d9:74:5d:2f:1e:fe:27:51:9f:
         bc:34:f1:a9:be:b4:1e:46:93:c2:52:0c:e2:ff:13:ae:35:c1:
         a0:96:e6:60:9f:00:76:a9:c5:09:5d:f6:bb:8f:44:33:b2:f8:
         77:c0:d5:0b:88:2c:7a:1d:25:ca:d7:eb:aa:50:c0:ad:1c:12:
         3e:66:24:6a:cc:8e:33:58:f1:60:a7:ea:64:8c:f2:29:57:14:
         bc:eb:08:e4:4b:57:87:3b:25:52:d1:d4:d4:70:53:f3:96:d6:
         c1:b0:65:02:01:49:99:30:c5:75:88:96:b2:5c:0a:42:eb:84:
         22:b2:3e:59:6d:e2:14:a3:84:78:a7:06:7d:2a:b5:3e:d6:de:
         b8:af:c3:c3:37:37:ed:cd:62:b7:34:ec:e2:58:07:af:62:6c:
         ac:df:b9:1e:33:c7:e0:0f:28:8d:80:6c:d0:b1:e1:fb:80:45:
         40:3d:28:02:b0:08:81:80:58:b1:4e:8d:3c:a2:7e:f3:fc:5c:
         8e:26:f2:a7:b9:13:4a:89:d9:d8:5f:59:18:e8:e8:92:f1:e7:
         52:92:71:82:84:31:c4:22:06:3d:7a:2c:07:09:ed:0d:d5:1a:
         67:73:74:85:01:60:e7:a9:f1:92:66:3a:ce:3c:15:4d:8e:ad:
         dd:75:0f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:36:31 2026 by rpki-client