Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/c7aa8e2c-9491-3cf4-a516-c3fb8aba12e5.roa
File:                     c7aa8e2c-9491-3cf4-a516-c3fb8aba12e5.roa (raw, json)
Hash identifier:          4YMpPzLf5yF8J+tyVTKpwNeYYr5iRT+iC/WZiY+mYAU=
Subject key identifier:   91:C5:D1:08:5D:DC:16:2B:60:6F:1E:F6:BF:8B:81:E4:21:05:98:98
Certificate issuer:       /CN=77836eaa-7214-4a69-8b5a-41b55d93e689
Certificate serial:       010D0C9F4328584F6CC6EF4CF0DF72AE16DCA1C0
Authority key identifier: 33:E4:62:D4:47:A7:41:15:52:A2:EF:26:A1:7C:09:93:89:29:43:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/c7aa8e2c-9491-3cf4-a516-c3fb8aba12e5.roa
Signing time:             Wed 07 Oct 2026 16:43:35 +0000
ROA not before:           Wed 07 Oct 2026 16:43:35 +0000
ROA not after:            Tue 05 Jan 2027 17:43:35 +0000
asID:                     16399
IP address blocks:        168.93.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/77836eaa-7214-4a69-8b5a-41b55d93e689.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/77836eaa-7214-4a69-8b5a-41b55d93e689.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:c6:ef:4c:f0:df:72:ae:16:dc:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77836eaa-7214-4a69-8b5a-41b55d93e689
        Validity
            Not Before: Oct  7 16:43:35 2026 GMT
            Not After : Jan  5 17:43:35 2027 GMT
        Subject: CN=34cfd11d-773e-4f3e-a298-033fcab21591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ee:7f:44:17:43:05:cd:fd:06:f8:e4:e6:e0:
                    64:03:af:be:a7:f8:ac:b9:dd:9e:45:15:0e:ce:6d:
                    5b:09:0e:38:49:9f:a7:f6:2a:e2:56:02:51:62:44:
                    2d:fe:4c:46:68:b4:74:52:48:02:77:bf:65:e1:c8:
                    33:1b:25:56:f0:b1:26:6b:08:71:6f:36:33:c1:67:
                    e7:2b:ae:40:ab:5f:10:44:b4:b9:14:80:55:d9:ee:
                    22:4c:fd:26:4e:cb:d8:5b:a8:f4:d5:58:0a:be:76:
                    b8:03:f4:93:59:2b:68:0f:de:4c:6d:ca:47:2e:1f:
                    e9:f6:33:4d:db:64:b5:b9:dd:f8:a9:8f:10:7a:46:
                    54:76:37:ae:6e:66:4b:ba:ce:7f:6f:29:bb:4c:d8:
                    2e:8b:1a:12:7d:db:d3:1e:41:00:33:58:f6:76:74:
                    6a:36:04:e2:ad:f9:65:97:39:40:31:87:3f:70:b4:
                    8c:be:9c:18:85:8a:44:01:37:7a:17:26:ba:1e:9d:
                    c5:dd:1a:64:bb:5f:77:c3:f4:58:7e:66:9b:b4:ed:
                    5c:fb:eb:af:fd:73:c3:e5:97:47:ab:4b:9d:e6:d0:
                    8b:af:33:63:0b:d0:bf:eb:ca:ca:09:0d:66:1e:90:
                    68:74:84:bb:13:7d:1b:76:47:50:8b:80:05:e6:fa:
                    22:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C5:D1:08:5D:DC:16:2B:60:6F:1E:F6:BF:8B:81:E4:21:05:98:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/c7aa8e2c-9491-3cf4-a516-c3fb8aba12e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689/77836eaa-7214-4a69-8b5a-41b55d93e689.crl

            X509v3 Authority Key Identifier:
                keyid:33:E4:62:D4:47:A7:41:15:52:A2:EF:26:A1:7C:09:93:89:29:43:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/77836eaa-7214-4a69-8b5a-41b55d93e689.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:f8:9d:16:0e:21:25:cf:62:ef:7e:78:c3:36:34:b0:45:fe:
         b4:66:ce:33:12:b0:13:58:a0:fa:a9:64:28:6c:be:1e:56:c8:
         b4:5a:80:7a:5a:b7:26:06:aa:67:6c:4f:36:03:57:f3:5b:40:
         6a:b5:a4:82:1b:70:0f:6d:05:c9:d7:e8:29:76:59:f4:29:d7:
         ee:ae:98:c3:53:23:c5:42:35:42:ef:04:98:e3:91:ff:a5:ab:
         27:64:b9:35:d9:c7:cc:bf:0b:d5:f4:87:f3:d0:41:00:17:a1:
         f3:90:bf:83:e0:6a:77:fa:b4:6c:4e:86:2d:95:23:34:4c:00:
         b8:5f:7e:3b:2c:ac:bd:e1:59:f7:70:50:9a:db:46:93:f6:25:
         6b:0e:1b:07:38:94:6e:aa:28:80:9b:63:ad:40:7c:79:a8:33:
         b1:2f:da:0f:a1:3c:98:a5:63:d7:2d:fa:d5:44:0d:91:bc:a7:
         f0:3a:55:52:d3:c3:53:78:62:b1:8e:a0:de:5a:d1:79:36:40:
         43:25:1e:ab:61:08:b0:01:db:fc:8f:82:ec:dc:82:1c:63:9b:
         a1:83:df:f1:8d:f3:1f:ca:ec:e8:26:62:51:1f:f1:f1:ea:a9:
         4c:8f:62:b6:4e:a0:2e:83:27:9b:26:49:2c:0e:46:24:51:58:
         78:99:ce:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:37:07 2026 by rpki-client