Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4164b603-b66f-334d-8c91-564a6cd1fcfe.roa
File:                     4164b603-b66f-334d-8c91-564a6cd1fcfe.roa (raw, json)
Hash identifier:          OsKUcC/sVe2u8rYyeShkQy075bhxTRDXgl7hs1+ys9g=
Subject key identifier:   E4:0F:3A:79:5C:03:19:E7:4A:7E:FE:67:92:5B:37:56:39:60:10:01
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584CE1FCD00A6B6C1081C96BB7A0
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4164b603-b66f-334d-8c91-564a6cd1fcfe.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     12083
IP address blocks:        24.35.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:fc:d0:0a:6b:6c:10:81:c9:6b:b7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=b2b2ac89-ac8d-47ec-8ee6-a4a6e3fdd6f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5e:77:c5:44:34:10:96:ff:5a:07:ab:a0:b8:
                    07:29:42:45:42:90:77:6e:6a:07:95:6d:6a:d8:1b:
                    a8:c7:26:9d:a9:20:7a:48:10:ec:5f:d0:11:eb:fd:
                    3d:b9:d0:63:d0:55:fc:25:5e:92:f7:cd:2c:2f:2b:
                    f7:30:9a:1c:f6:83:51:56:89:32:23:81:40:c6:a0:
                    54:db:ba:87:83:0a:98:47:09:7a:83:58:f4:60:aa:
                    ca:ad:ec:5c:4f:fb:fe:97:ee:80:82:8a:2c:40:3d:
                    d7:93:04:9c:1e:e6:51:ee:d4:ae:c0:c4:dd:4c:27:
                    7f:97:e8:d0:ec:3b:d7:09:bb:7e:8d:73:a2:51:15:
                    b0:f0:b8:ac:5d:aa:da:5e:6f:e0:2e:93:d1:ee:2d:
                    6c:e1:dd:8f:d9:d1:ea:41:0b:e1:28:a3:ef:25:53:
                    e2:2e:eb:ea:b5:f7:e6:59:07:74:d6:1c:20:5f:d6:
                    71:8f:e1:38:c7:0d:4b:67:d9:3b:b9:c1:d1:8a:b0:
                    ce:ab:59:2f:3c:5f:eb:bf:0e:5e:75:6b:00:9b:cd:
                    43:f2:e1:77:25:f8:a2:a9:a1:ee:f3:81:39:b6:d4:
                    73:ff:f5:40:bd:73:99:7a:3d:43:32:e3:dd:dc:29:
                    01:22:3c:fd:23:97:e6:72:5d:7c:06:bc:d4:ff:81:
                    fd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0F:3A:79:5C:03:19:E7:4A:7E:FE:67:92:5B:37:56:39:60:10:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4164b603-b66f-334d-8c91-564a6cd1fcfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.35.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:2c:3c:5f:ae:a4:95:57:23:7b:1d:d4:90:52:ef:19:04:d1:
         fa:66:dd:4b:4d:fd:90:ad:a0:86:5b:83:76:ac:fb:35:cd:df:
         03:76:77:d2:2a:c4:69:f0:72:27:37:27:70:70:5d:64:1b:77:
         0e:91:0e:0f:c2:c4:ad:6a:25:62:38:1a:b1:c2:9e:2b:5c:bc:
         e3:27:62:46:50:50:f2:77:4d:88:97:89:07:59:54:df:25:77:
         5a:8c:14:12:6a:9d:b8:39:de:4d:93:6a:06:d1:ed:b1:3b:8c:
         3a:34:79:5b:db:b6:1f:85:e1:ab:62:4d:2c:f5:b6:f3:60:87:
         8c:3c:0c:3f:80:e9:40:26:65:e6:07:b5:6b:e2:75:d2:00:4d:
         af:11:e1:ea:e9:3a:d0:b2:0c:97:16:10:e9:73:01:42:99:9a:
         8c:a6:64:65:f8:c4:b5:80:d0:04:fb:21:fa:00:22:70:74:b5:
         75:b2:aa:bb:d1:8f:5c:4d:ac:de:08:50:63:1c:39:16:2e:38:
         f9:95:4c:79:b3:8b:50:6c:29:fe:87:b7:35:b3:1f:ff:97:f2:
         4f:c8:1c:fa:d2:cd:ea:11:31:8e:26:dd:c0:28:1c:37:c4:af:
         01:a7:02:d8:30:80:c6:e4:64:a8:e7:a4:d8:09:b2:e7:05:de:
         63:74:04:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 12:19:14 2026 by rpki-client