Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4b27c929-c98f-3b76-b5f6-c64702cf23d2.roa
File:                     4b27c929-c98f-3b76-b5f6-c64702cf23d2.roa (raw, json)
Hash identifier:          /7CL/n0MREQUJDhtJwfwqNfG00Ot/xX62YUuKRq2Ezs=
Subject key identifier:   06:67:16:F3:B7:53:83:7A:FC:0D:8A:D5:E8:54:3E:41:19:6C:F2:A8
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584E4AEF4E6673E9963E68C45420
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4b27c929-c98f-3b76-b5f6-c64702cf23d2.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     7265
IP address blocks:        216.47.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:4e:66:73:e9:96:3e:68:c4:54:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=590239df-ea3f-4f99-9329-356f0c8ac6ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dd:55:43:d1:bc:02:f9:ae:13:4c:9f:9d:01:
                    09:c7:3c:30:5e:20:13:4b:e2:f1:f4:23:c4:6a:60:
                    be:42:fc:91:a1:48:60:41:99:d1:f3:d8:85:e6:ba:
                    5b:fc:45:84:0c:7c:b2:e3:d0:36:13:02:6c:98:38:
                    90:8a:69:ca:66:9c:85:e8:c2:35:dd:5b:2d:c5:20:
                    85:e4:4a:87:4c:df:c9:d8:d0:99:04:0a:14:60:c3:
                    3a:05:40:a2:92:2d:6c:3c:29:42:5d:a8:5d:76:b8:
                    81:54:ab:cd:00:50:0e:bc:14:3d:ec:d2:13:eb:b9:
                    5d:82:31:d8:8a:83:33:a1:47:0d:07:7d:37:fc:94:
                    e9:4e:32:05:e4:09:55:9e:cf:2b:80:2e:8f:64:68:
                    85:9d:0c:c6:60:15:7b:bf:a2:77:d9:7f:d6:ef:35:
                    29:16:42:41:28:f9:05:9d:c2:b6:3e:dd:d6:b1:08:
                    c2:fd:3a:70:8b:de:1c:97:9e:07:82:1b:57:e0:55:
                    c5:c8:8b:bd:8b:1a:97:62:16:44:ed:45:97:02:30:
                    2d:06:70:79:61:9c:d3:9b:85:53:8a:f6:15:7f:c7:
                    15:4d:d5:2b:06:08:65:f2:2f:21:7d:b8:b9:52:04:
                    6a:66:b0:c5:5e:f5:27:e2:b7:bc:83:a8:71:fc:11:
                    9c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:67:16:F3:B7:53:83:7A:FC:0D:8A:D5:E8:54:3E:41:19:6C:F2:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4b27c929-c98f-3b76-b5f6-c64702cf23d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.47.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:0b:df:12:71:ef:08:6d:71:da:6a:df:dc:61:d9:2f:64:d0:
         4d:3a:d8:09:1c:8d:d9:44:b7:b7:b4:2d:02:17:b5:62:bd:22:
         ad:3d:f7:f0:8c:b6:56:6c:60:2a:d3:c4:7d:f9:0e:fe:c3:37:
         ca:66:4b:14:02:f6:7c:03:63:ab:02:9b:73:a9:83:fe:fc:bc:
         fe:20:52:72:e5:f6:f3:f3:00:51:0a:ad:ba:e3:9d:fa:3b:fa:
         cf:3a:87:24:91:b6:2b:60:90:ae:a7:91:cc:b9:f1:37:aa:f6:
         9a:a9:de:72:a5:85:6e:4b:fb:ad:28:29:93:99:a3:84:d4:e7:
         ee:41:cd:03:47:0c:64:69:e8:9d:25:4f:ba:82:83:1d:df:00:
         18:a7:9a:e5:c2:ec:b0:86:08:56:78:11:b5:af:05:9c:b2:24:
         c3:0a:e0:ac:fe:7e:a5:c7:68:e1:b9:84:31:8a:f6:fe:c1:70:
         98:e2:f8:fa:44:1e:53:89:84:4f:fb:c7:b6:ae:0a:14:2e:20:
         43:f7:6d:10:bd:6f:24:3a:33:ee:fd:2e:03:c7:ae:13:f2:09:
         13:ff:7d:e2:3a:b5:47:4c:07:15:ba:15:1e:2c:8a:68:b4:0b:
         09:5a:f3:06:bd:82:22:f4:78:81:26:02:d5:f2:49:a9:d4:04:
         8a:7a:68:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:34:16 2026 by rpki-client