Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4ef99acc-1db9-36c6-a7a5-08cb5041966a.roa
File:                     4ef99acc-1db9-36c6-a7a5-08cb5041966a.roa (raw, json)
Hash identifier:          LVM4wgSSa3n5f3JEJY6ciZ8apqBL9fOn3P1fPfS5d/o=
Subject key identifier:   1D:2A:51:63:1D:7F:13:28:D8:13:B1:45:5A:A8:AD:81:4E:89:40:19
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584CE1FCC78C999EE4EBC9AA0640
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4ef99acc-1db9-36c6-a7a5-08cb5041966a.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     12083
IP address blocks:        24.214.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:fc:c7:8c:99:9e:e4:eb:c9:aa:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=e94807aa-3c37-4090-8fa3-0096f46cf213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d4:88:b4:09:89:f8:f5:10:36:33:b9:cf:cd:
                    4b:43:f4:dc:31:92:ea:5d:3f:b3:2e:df:50:ba:c7:
                    45:2e:4c:67:4f:23:fa:2b:b0:3a:c3:12:c1:8d:7d:
                    e1:da:f2:64:ac:6f:0a:11:fc:2e:fd:d7:bc:c5:0d:
                    24:33:d5:96:0f:5a:67:be:d3:9a:2d:31:21:c6:22:
                    5c:05:11:06:4f:05:83:56:3d:a4:b6:f7:5c:e0:32:
                    69:c3:ac:a2:8c:d5:1f:05:5b:e4:fc:35:b6:ae:4c:
                    e7:43:f0:76:f7:12:d0:16:5b:ca:e7:56:8f:0b:f3:
                    e6:81:33:18:49:54:e9:e5:55:12:f7:56:02:21:39:
                    01:6b:b8:42:2f:33:28:6c:80:e6:49:b7:a7:fd:e4:
                    cd:11:0f:89:5f:e1:3b:c0:82:a1:06:79:83:26:f0:
                    64:7b:3c:35:09:9f:fd:1e:d5:89:29:46:c9:cf:58:
                    9f:07:f9:e4:3d:3f:60:79:78:d4:e5:b0:0f:c6:65:
                    c2:be:f8:bb:b3:7a:40:c0:4e:26:a3:22:69:43:e6:
                    7b:21:52:fd:d2:b3:a1:f2:b0:64:e0:e4:81:52:d2:
                    f3:27:3a:71:56:a2:c5:a3:fd:19:2b:b6:39:ee:bf:
                    97:4a:01:04:cc:f4:10:64:d8:13:1a:85:46:ef:8c:
                    97:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2A:51:63:1D:7F:13:28:D8:13:B1:45:5A:A8:AD:81:4E:89:40:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4ef99acc-1db9-36c6-a7a5-08cb5041966a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.214.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:12:58:74:74:68:0a:4b:2f:2a:15:6b:b4:e7:76:d8:46:fb:
         0a:47:29:ac:24:09:68:8c:72:ff:d5:7a:44:46:87:99:52:59:
         ab:71:38:1e:19:66:80:1c:61:5e:a4:f2:f8:2a:5a:9c:b4:e8:
         cd:b5:eb:a2:1c:6e:1b:66:fa:97:b7:b7:8d:49:89:8d:56:fb:
         dc:d6:f9:f6:f2:e0:5a:e8:f2:f8:78:b3:0f:8e:91:ce:de:32:
         dc:85:f3:5c:73:49:a5:1f:a1:d7:ee:54:2e:59:bd:82:0c:0b:
         75:21:3b:74:db:34:d1:c7:4d:74:6a:d9:62:5a:e6:8c:f6:d4:
         a7:e6:1d:02:97:4c:cf:56:16:a5:3b:47:8d:06:33:2f:98:f4:
         00:09:76:45:05:f7:b6:05:b6:f9:f9:28:59:69:46:cc:db:69:
         6d:ae:a6:bc:99:a8:a2:7b:8c:e0:61:a5:9d:4d:6f:87:8e:b9:
         1a:87:0f:18:35:ce:13:be:91:fb:49:bc:1a:c3:6a:c4:0e:1c:
         c6:7b:7b:05:52:66:a4:1f:c3:bc:d5:b3:9f:27:a6:ba:9d:91:
         02:f7:4e:28:46:a3:44:4a:89:9e:47:6b:ea:00:1b:47:b2:12:
         cf:ba:68:9b:22:30:3a:44:ea:48:3c:1f:36:e9:cf:a1:d0:71:
         c7:0a:14:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 12:23:00 2026 by rpki-client