Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/5844de8a-d678-323d-916e-7e54edbffbd9.roa
File:                     5844de8a-d678-323d-916e-7e54edbffbd9.roa (raw, json)
Hash identifier:          bHDSPaptOODjAd6hzeCEC2uvuCFwh5TS45Wm9fAttBE=
Subject key identifier:   85:BF:86:C4:72:6A:7B:93:65:41:2D:24:F8:BE:9A:FD:5B:2F:19:1C
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584E4AEF4E4F24A9F9F957FEF8C0
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/5844de8a-d678-323d-916e-7e54edbffbd9.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     7265
IP address blocks:        216.47.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:4e:4f:24:a9:f9:f9:57:fe:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=e5ebd899-1597-43ba-9a5a-083aff835076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:89:22:76:4a:bf:28:1f:06:79:a7:56:9a:d4:
                    7b:53:7a:54:44:aa:65:07:ce:1d:ec:7c:c4:ae:ae:
                    d5:2b:80:9a:9e:f4:cc:9e:b6:fd:a4:bc:ff:33:67:
                    bc:f6:e6:4a:27:48:f2:38:eb:75:b3:69:e7:b3:32:
                    11:d2:99:cb:44:f8:f8:7a:bc:e1:09:0b:27:68:9d:
                    03:df:65:7e:39:7e:bc:6d:39:01:83:d7:79:2f:ed:
                    bd:e4:32:96:32:40:33:01:fe:a8:29:34:fc:2b:0d:
                    01:ae:8d:f2:35:bf:72:3e:ed:60:4c:eb:22:70:9b:
                    92:1d:29:76:38:00:7c:15:fd:75:65:f8:b3:55:0c:
                    22:80:ca:c2:45:32:fa:b0:cf:8f:28:f3:92:d7:77:
                    74:90:1d:2f:58:bf:32:3a:90:08:39:52:d5:38:fa:
                    29:6c:c6:d8:fd:51:d7:70:e7:30:18:e2:7f:73:6e:
                    c5:ef:1e:bc:9a:f3:7d:26:81:f6:80:8e:9e:a8:49:
                    9d:c0:50:6e:58:e8:44:0d:30:4b:9a:c9:b1:55:51:
                    e6:64:d4:37:64:dc:22:ee:e7:b8:15:b0:91:41:0b:
                    0a:ec:b1:77:81:47:fd:af:fc:9c:ca:b8:3b:6a:c1:
                    3e:cc:3e:8d:e5:af:4d:b8:ab:97:26:2d:b1:19:78:
                    a5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BF:86:C4:72:6A:7B:93:65:41:2D:24:F8:BE:9A:FD:5B:2F:19:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/5844de8a-d678-323d-916e-7e54edbffbd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.47.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:a9:5c:a6:0e:e6:0d:66:3d:f7:05:5d:26:fc:38:69:a9:78:
         a1:a5:96:fc:52:13:99:f5:87:93:8e:35:bc:46:4a:31:b7:a3:
         ee:53:c5:25:83:fe:72:18:99:d9:e8:03:4b:80:c9:13:3b:b4:
         3c:19:d1:7c:5a:a7:63:0d:c8:13:b3:f7:59:15:73:6a:da:5c:
         42:e8:22:c6:77:c8:07:f2:6d:84:f8:22:a5:96:01:b2:f4:55:
         d3:ed:1e:d4:f1:e9:21:56:4a:71:ad:43:ae:24:6d:30:67:e9:
         d1:a9:bf:8a:a0:a2:53:0b:9f:57:6e:09:d0:5c:a3:e4:a0:b7:
         95:1f:f2:51:8e:53:ac:d9:8a:62:20:01:0f:d9:6c:2b:aa:d6:
         32:e5:8c:7d:72:c6:b4:48:b8:fc:ad:34:99:02:dd:e2:63:79:
         5e:6d:ad:2c:a9:06:af:cb:8f:ae:52:dc:ad:7e:80:84:e2:f5:
         cb:2c:16:15:71:02:5c:18:3c:fa:08:75:fc:ee:1e:7d:b5:2e:
         5f:f4:ad:4b:7e:fb:33:41:bf:56:cf:b6:ad:8e:b1:37:65:50:
         cf:bc:5a:3f:23:6b:8c:de:e2:76:17:12:fe:60:0d:e7:2e:f1:
         16:5a:21:36:4c:76:5e:42:13:2c:7f:b2:13:59:9a:e8:ce:8c:
         a7:58:59:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:34:17 2026 by rpki-client