Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/4807742f-74ff-37de-8eca-3d27d87c431c.roa
File:                     4807742f-74ff-37de-8eca-3d27d87c431c.roa (raw, json)
Hash identifier:          sL2+cgPomg+KC/XTr9IAVMOaW4tZW7zrE/kQwSn8Dm0=
Subject key identifier:   B8:1C:77:3A:86:EC:90:C1:06:BE:2D:1C:79:55:96:A9:CA:1C:8C:CA
Certificate issuer:       /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61
Certificate serial:       010D0C9F4328584F3482701E1CBC8ADDC36603E8
Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/4807742f-74ff-37de-8eca-3d27d87c431c.roa
Signing time:             Thu 17 Sep 2026 13:00:12 +0000
ROA not before:           Thu 17 Sep 2026 13:00:12 +0000
ROA not after:            Wed 16 Dec 2026 14:00:12 +0000
asID:                     14090
IP address blocks:        76.10.72.0/21 maxlen: 24
                          76.10.80.0/20 maxlen: 24
                          76.10.96.0/20 maxlen: 24
                          76.10.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:82:70:1e:1c:bc:8a:dd:c3:66:03:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61
        Validity
            Not Before: Sep 17 13:00:12 2026 GMT
            Not After : Dec 16 14:00:12 2026 GMT
        Subject: CN=61fffa74-ad5f-4d67-9e15-7785c972557c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6d:46:2e:29:d6:80:07:ab:5a:5b:ce:36:d2:
                    c1:a9:8f:b1:d5:79:4d:06:2f:08:00:6e:bb:4e:23:
                    ab:22:1c:a1:dc:ec:f2:fc:73:4a:0e:38:ac:7a:69:
                    59:1b:53:70:a7:0e:f4:1d:09:0c:2e:15:2e:f0:31:
                    a2:db:63:69:2e:ee:91:8f:c0:b7:db:46:fb:53:63:
                    35:fc:ce:f1:84:b1:af:5b:55:1b:64:71:11:1f:9f:
                    66:d5:e2:bd:1d:2d:6e:c4:e8:72:a2:56:15:10:dc:
                    08:96:44:1e:7b:2a:59:2b:ad:6f:25:0b:d0:92:73:
                    77:63:80:0f:99:41:00:0d:17:ac:d5:87:98:bc:47:
                    94:f7:df:90:0e:d6:20:a3:db:68:ac:7f:2e:d9:cb:
                    2b:d4:c2:dd:87:5b:80:63:20:aa:ee:60:a0:49:43:
                    19:db:cd:c7:d6:c1:fa:6f:91:9e:f3:79:ab:3a:41:
                    81:c5:cf:a9:fe:63:23:9d:b5:7d:e9:f2:f9:06:b6:
                    6f:d2:d5:5f:94:ed:49:0c:4d:64:3e:7b:a4:b8:f8:
                    c8:20:ce:9c:18:fe:69:b9:cb:63:12:69:cd:d6:70:
                    e7:42:5d:3a:5d:02:6e:0c:48:b0:dc:1a:17:9c:05:
                    ad:e1:90:f7:c4:37:20:e6:54:59:c6:77:3e:10:76:
                    90:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1C:77:3A:86:EC:90:C1:06:BE:2D:1C:79:55:96:A9:CA:1C:8C:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/4807742f-74ff-37de-8eca-3d27d87c431c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl

            X509v3 Authority Key Identifier:
                keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.10.72.0-76.10.115.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:cc:95:d2:87:be:da:99:75:41:44:4e:2b:cf:f6:20:73:96:
         3e:3d:92:32:18:50:89:cd:17:7c:c8:dd:7b:6d:e3:bd:ec:86:
         99:34:23:f2:1c:a8:0e:a0:5b:cb:79:51:c5:5c:d3:05:f3:92:
         da:cf:49:cf:2e:4d:e5:8a:33:0d:ea:f2:ec:fe:b7:76:36:98:
         07:27:42:c8:5e:bc:25:e8:62:78:b3:31:90:78:66:87:1a:6a:
         ee:8e:0b:64:36:5d:cd:63:f2:3c:26:ee:2c:f1:27:01:01:71:
         55:f0:96:bb:3f:31:d1:cd:4f:83:01:3a:33:4c:9b:c3:34:32:
         5c:15:96:cb:68:41:b2:16:bd:3e:b8:64:65:37:e5:e7:98:b8:
         b7:fb:d8:9b:4e:41:fc:65:c8:3c:ba:22:f8:e3:4a:d9:fd:9d:
         d8:c9:bf:35:a3:b7:0d:07:9d:90:c9:f3:84:ca:9f:45:96:ba:
         a3:a3:ad:c4:9f:99:86:c7:aa:7f:0d:0a:36:46:55:0b:15:43:
         27:4a:8d:4c:68:03:79:64:ef:6c:7c:17:5e:72:8a:16:bf:49:
         68:b4:ce:9e:54:dd:39:38:4b:a0:f5:a2:df:fd:25:fe:ff:7e:
         64:a6:d0:b9:3a:d5:c3:e4:1b:21:ea:8b:55:4a:bc:17:55:f3:
         49:5d:e2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:44:34 2026 by rpki-client