Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/76438f54-166d-43b0-bc0c-8073c447fe56/7a638db4-8c90-3812-813e-ef9e8d5a8a40.roa
File:                     7a638db4-8c90-3812-813e-ef9e8d5a8a40.roa (raw, json)
Hash identifier:          I5ceg+o6Mj0HT/T8PqdQWqUBDoCD0ZKYQLQ2O27vils=
Subject key identifier:   B2:76:51:48:62:02:37:B1:3B:52:D6:0F:53:21:27:7B:81:A6:D3:EA
Certificate issuer:       /CN=76438f54-166d-43b0-bc0c-8073c447fe56
Certificate serial:       010D0C9F4328584F8E1D48F062FAC6F9CFC6D980
Authority key identifier: 08:60:6A:00:32:84:01:78:D3:C7:AF:56:D3:DB:F5:65:63:5D:58:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/76438f54-166d-43b0-bc0c-8073c447fe56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/76438f54-166d-43b0-bc0c-8073c447fe56/7a638db4-8c90-3812-813e-ef9e8d5a8a40.roa
Signing time:             Mon 19 Oct 2026 15:19:14 +0000
ROA not before:           Mon 19 Oct 2026 15:19:14 +0000
ROA not after:            Sun 17 Jan 2027 16:19:14 +0000
asID:                     14618
IP address blocks:        153.79.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/76438f54-166d-43b0-bc0c-8073c447fe56/76438f54-166d-43b0-bc0c-8073c447fe56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/76438f54-166d-43b0-bc0c-8073c447fe56/76438f54-166d-43b0-bc0c-8073c447fe56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/76438f54-166d-43b0-bc0c-8073c447fe56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8e:1d:48:f0:62:fa:c6:f9:cf:c6:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76438f54-166d-43b0-bc0c-8073c447fe56
        Validity
            Not Before: Oct 19 15:19:14 2026 GMT
            Not After : Jan 17 16:19:14 2027 GMT
        Subject: CN=cf872ba1-9be4-4190-b074-df5441dea266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:53:2b:d4:6d:a6:c4:c6:2e:83:34:0e:5f:f3:
                    c0:5b:6f:34:62:9d:eb:df:d6:45:b9:11:bd:05:31:
                    fd:c2:89:3c:55:12:ee:2a:c9:d9:c2:9d:a4:d6:5e:
                    12:b5:32:4a:0a:11:05:88:8a:df:23:a2:ce:3f:98:
                    84:b3:10:b6:f8:dd:cd:55:37:b4:cb:7c:c6:59:07:
                    95:de:3a:52:a5:be:81:03:35:8a:a2:a1:ef:f9:a3:
                    99:17:5d:f5:cd:81:12:52:c9:df:76:06:2f:c7:52:
                    fa:8d:a7:cf:b0:1a:4b:23:45:d6:eb:c5:7f:28:ca:
                    6a:73:91:eb:55:9c:57:a0:78:dd:ba:39:3d:01:3a:
                    d1:ec:0a:9a:0f:41:82:64:a7:8a:12:e8:1a:16:2f:
                    a6:db:91:ca:b1:5a:f5:28:96:12:c0:8b:17:d1:c7:
                    7a:73:80:8c:5e:97:dc:83:1a:44:da:87:62:95:24:
                    a4:a3:a7:9c:13:60:79:e4:f0:9d:4f:32:1b:91:e6:
                    d4:e4:1b:f4:23:0e:18:97:2a:6c:05:22:c5:52:de:
                    ac:01:46:31:bd:03:e9:29:e7:96:24:d7:68:f2:80:
                    64:e0:31:87:c7:ce:da:61:2b:5d:24:d3:e9:2f:12:
                    a0:53:9e:40:b7:30:69:09:18:6c:81:90:54:2c:d2:
                    bc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:76:51:48:62:02:37:B1:3B:52:D6:0F:53:21:27:7B:81:A6:D3:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/76438f54-166d-43b0-bc0c-8073c447fe56/7a638db4-8c90-3812-813e-ef9e8d5a8a40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/76438f54-166d-43b0-bc0c-8073c447fe56/76438f54-166d-43b0-bc0c-8073c447fe56.crl

            X509v3 Authority Key Identifier:
                keyid:08:60:6A:00:32:84:01:78:D3:C7:AF:56:D3:DB:F5:65:63:5D:58:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/76438f54-166d-43b0-bc0c-8073c447fe56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.79.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:5e:8a:fc:78:e4:ef:51:12:3f:ba:b5:4d:45:1e:e8:c6:da:
         17:a6:cc:7e:34:c6:23:7a:95:65:ac:33:ac:1c:d7:b6:c9:8e:
         7a:0f:24:84:4c:d4:20:39:dc:39:d0:d4:23:1c:cd:44:c6:48:
         3e:7e:3d:29:dc:02:99:b8:3e:cf:8b:fd:80:e8:d0:fa:f8:5f:
         50:8b:af:5f:83:ba:4a:84:ed:8a:92:24:b5:3f:98:43:96:dd:
         18:70:f4:1a:6a:ab:c1:53:96:d6:a0:39:d3:95:7d:14:46:cd:
         8b:a5:9d:6c:b9:86:ec:ef:95:16:f8:93:a0:48:f3:d7:05:1d:
         20:78:e6:00:c2:86:ee:e4:d9:bd:c5:d6:aa:e1:c4:7f:30:28:
         70:11:d9:c3:47:53:04:6b:ca:fe:3e:b0:fb:ad:b3:b9:94:c2:
         53:51:43:07:af:be:59:22:5b:e2:3a:cf:06:a9:ea:6b:f6:00:
         1c:21:a3:64:18:4f:b0:b8:8c:c7:90:3d:13:34:d1:35:e8:90:
         e0:41:b9:26:03:70:f8:c2:87:1f:2a:9b:8f:da:ed:ba:b6:98:
         60:fa:cc:e2:03:62:9c:63:7e:7f:e4:6a:7c:96:b1:6b:18:24:
         7a:05:8f:34:5e:71:68:76:e1:c8:16:4d:17:9c:96:c0:7f:4e:
         68:df:8c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:29:16 2026 by rpki-client