Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/15d5ec7e-044b-30c5-90d8-02693f5c0795.roa
File:                     15d5ec7e-044b-30c5-90d8-02693f5c0795.roa (raw, json)
Hash identifier:          7SkI7jljWV+wo0DE0uWTW0BDXFhT1ihOLKL5PVKO6R0=
Subject key identifier:   0E:D9:DD:D7:FE:3F:7B:8E:07:E5:1A:62:75:BA:C0:C4:5E:B7:DA:B6
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584E4559D3D3CD54F19BE55F6BE6
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/15d5ec7e-044b-30c5-90d8-02693f5c0795.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     11260
IP address blocks:        76.11.0.0/17 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:d3:d3:cd:54:f1:9b:e5:5f:6b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=845dae14-0858-4130-b817-4064ee878244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:67:8a:4c:c7:bf:d3:5b:a0:38:f3:6a:3f:53:
                    e6:8c:63:e3:1c:64:7f:3e:75:2a:f7:8d:f9:33:91:
                    56:07:b9:9e:f7:c2:83:d8:b1:3b:68:fe:52:9b:21:
                    ce:b1:d8:36:8e:f3:c9:9f:dc:ff:99:d0:10:6f:61:
                    61:8f:50:82:3b:fc:81:e6:51:f2:e3:92:36:2d:90:
                    19:71:76:be:3d:2f:c4:a5:fd:32:a2:c5:a5:5d:13:
                    b8:d4:10:49:6b:4e:e2:da:73:3a:98:7b:f3:b6:43:
                    04:e4:b9:a7:00:0d:8d:f8:9b:0d:a1:d5:aa:6d:5c:
                    02:42:d6:f9:88:55:db:60:f6:e9:62:c2:69:60:9f:
                    6e:b1:02:25:e2:cd:b2:6a:33:9b:11:29:8b:44:d0:
                    8c:4a:29:fe:8e:91:41:cc:c9:6b:c3:c5:d5:91:c7:
                    f1:49:09:f1:85:ff:ce:6b:64:d4:4b:ee:4f:94:de:
                    59:99:82:02:e6:c1:08:da:1d:5a:3c:e1:a5:11:53:
                    45:08:a9:19:8c:26:00:a9:14:ba:a7:f9:92:65:f4:
                    7c:bb:73:20:48:6a:8a:49:67:db:e1:d8:c6:ec:9b:
                    88:2b:f8:9d:2c:ff:e8:6e:69:77:d8:e4:f8:28:4f:
                    12:ab:fb:6b:d5:f0:0f:b7:d0:8c:84:2c:6f:68:62:
                    7a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D9:DD:D7:FE:3F:7B:8E:07:E5:1A:62:75:BA:C0:C4:5E:B7:DA:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/15d5ec7e-044b-30c5-90d8-02693f5c0795.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.11.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:43:b4:79:02:f9:a5:c4:e3:61:53:5b:90:17:83:e8:7c:c6:
         41:45:84:ef:26:da:97:d0:fe:dd:68:cf:94:6d:ae:18:5d:29:
         da:07:75:9d:2f:82:02:14:a5:da:30:83:8f:c1:93:2e:3d:d3:
         19:04:88:e8:f5:0a:56:5f:d0:72:ea:52:3f:60:b0:68:d7:d5:
         e0:bd:3b:93:a7:c8:f4:a8:f8:e5:36:d9:bb:a5:88:e4:13:ff:
         83:de:c0:e5:3a:c5:52:0b:14:d4:07:4a:39:d4:91:33:0d:23:
         84:28:23:88:77:6e:b0:79:1d:24:36:34:fa:21:db:12:a1:24:
         ed:9f:64:1d:a9:4f:69:7e:61:0b:4d:7f:36:f3:5e:89:95:0b:
         96:b1:fe:3a:c1:97:9f:8c:7c:7d:9f:e7:8d:c4:26:15:c8:2e:
         a3:41:ba:34:da:d0:eb:e6:9a:47:41:da:c5:e1:40:b8:b5:10:
         29:89:ec:ec:74:20:79:00:23:14:87:54:ca:5f:d1:92:50:2a:
         e8:ce:fe:59:89:58:1a:80:7d:74:cd:49:f5:35:cb:ac:ef:d4:
         88:15:50:ba:76:85:0f:38:80:08:de:a0:aa:69:93:02:53:9a:
         bb:c9:7e:42:ac:8c:a8:09:c9:96:55:fc:13:4d:33:ca:49:63:
         db:30:3b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 06:05:15 2026 by rpki-client