Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/c058da06-5751-3dc7-8b18-acfcdeb128d2.roa
File:                     c058da06-5751-3dc7-8b18-acfcdeb128d2.roa (raw, json)
Hash identifier:          kMkzdACG8YD91GTq9bDgnVff9LgG6EeCvMsFeho3o7U=
Subject key identifier:   58:F2:76:DF:12:AE:8A:C1:BE:94:28:8D:03:9C:27:02:00:09:FF:76
Certificate issuer:       /CN=e0647553-32ca-48b6-be58-d6c7f475e654
Certificate serial:       010D0C9F4328584CDB021AA7E434937E05358500
Authority key identifier: 3D:EA:87:2B:EB:A8:27:88:90:FC:5A:63:64:0F:CA:8F:10:C0:FE:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/c058da06-5751-3dc7-8b18-acfcdeb128d2.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     7784
IP address blocks:        76.76.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/e0647553-32ca-48b6-be58-d6c7f475e654.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/e0647553-32ca-48b6-be58-d6c7f475e654.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:1a:a7:e4:34:93:7e:05:35:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0647553-32ca-48b6-be58-d6c7f475e654
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=b1e0da04-2a5c-4ac7-ae78-db898038f05d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8f:1c:45:6b:c0:5b:90:30:7c:6f:f9:49:e0:
                    46:b7:78:f0:94:8b:75:f7:2a:d6:76:26:f6:35:b1:
                    84:8c:d3:44:ae:4f:d4:c1:68:d1:75:01:80:e4:95:
                    6d:cb:23:85:47:3f:b0:7c:28:39:b3:81:7e:08:89:
                    cd:f8:fa:50:49:3e:4e:60:3a:65:1b:5d:af:59:94:
                    30:90:c3:21:10:2f:ee:df:e5:7b:aa:a4:de:06:f2:
                    69:cf:34:d9:5b:01:13:74:a9:d2:eb:43:48:4f:65:
                    66:f8:a5:58:9b:6f:0f:ce:a4:0a:89:09:1c:4d:cc:
                    ad:00:af:3e:40:64:f1:c5:77:39:7c:24:5f:18:14:
                    66:27:9c:ba:28:35:d1:01:30:e8:cb:8d:42:a6:47:
                    a6:63:10:33:c0:e6:8a:7b:ca:30:ba:7e:47:bc:6b:
                    10:4d:f3:23:13:d7:30:ae:a7:a0:47:1b:cf:c0:eb:
                    b3:6b:f3:38:af:91:f3:ca:5a:52:d0:f3:45:49:27:
                    69:43:db:dc:24:fc:eb:9b:93:6a:2a:b2:d8:69:4d:
                    53:78:88:c1:1b:f5:2f:6d:8b:08:f9:2b:d1:f3:b9:
                    ce:d4:91:af:23:17:05:7e:b2:fb:8c:32:9f:67:1e:
                    c4:19:1a:37:94:3e:4a:73:0b:4d:f5:3b:57:dd:d5:
                    36:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F2:76:DF:12:AE:8A:C1:BE:94:28:8D:03:9C:27:02:00:09:FF:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/c058da06-5751-3dc7-8b18-acfcdeb128d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/e0647553-32ca-48b6-be58-d6c7f475e654.crl

            X509v3 Authority Key Identifier:
                keyid:3D:EA:87:2B:EB:A8:27:88:90:FC:5A:63:64:0F:CA:8F:10:C0:FE:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.76.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:dd:0b:74:c8:f4:83:44:64:93:77:51:8b:cd:f4:c8:9b:40:
         b2:6e:f8:47:d9:50:c2:d5:2a:0a:1d:17:5e:61:0e:73:9e:72:
         68:ef:a9:94:f9:94:3a:c7:05:d1:ad:b8:2e:37:e2:b3:8e:f2:
         3b:f6:a1:e4:0d:10:bd:c2:51:08:c7:85:92:bc:ee:a4:7d:78:
         cf:7f:10:23:e7:09:e0:ce:d9:a8:15:23:25:49:95:ae:7f:1f:
         40:38:20:1b:e7:d9:4e:ce:7c:f4:b1:ab:09:f6:25:58:ed:7f:
         98:0b:ac:7d:08:eb:bb:32:51:60:0f:0d:df:bd:eb:37:a9:5f:
         bb:fe:f9:ba:de:19:7d:f5:5a:15:6a:f1:cc:af:ba:cd:51:49:
         63:98:21:99:46:da:ac:5e:fe:0a:ff:f6:d8:7e:80:42:0d:0b:
         9b:8c:b3:ca:8e:b8:86:df:b2:84:46:c0:1d:18:f6:1a:80:f4:
         a3:82:50:1f:9d:bb:22:48:d3:cc:2c:c1:ea:bd:93:02:5d:fb:
         ed:cc:5a:fe:9d:ee:97:16:84:ba:ef:2f:ae:80:2d:90:c4:7f:
         3d:9e:09:5f:e3:4b:25:43:4f:77:fd:fc:ed:ef:f3:c2:cf:2a:
         81:17:11:d1:d9:86:47:16:48:67:7a:1f:76:49:7f:ef:5f:d5:
         9f:f9:c7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:15:56 2026 by rpki-client