Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/59c0fae9-14ac-3afe-9cbb-aeae5b351de9.roa
File:                     59c0fae9-14ac-3afe-9cbb-aeae5b351de9.roa (raw, json)
Hash identifier:          vUnSqnoW1jNGQtbCASVmx5uwndulsue4U88xryzCP5M=
Subject key identifier:   09:78:AC:E6:31:03:E6:42:4D:07:C7:B4:A0:19:6C:53:34:4C:3A:01
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584CE1FCD1AF1FF8CFACF0126580
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/59c0fae9-14ac-3afe-9cbb-aeae5b351de9.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     12083
IP address blocks:        76.73.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:fc:d1:af:1f:f8:cf:ac:f0:12:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=37033372-046e-418a-a44e-ae575f930597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:70:e1:09:3d:9c:31:33:f8:9e:e8:a7:9c:48:
                    01:53:0d:68:d1:17:37:02:44:ec:fd:d4:66:ac:3d:
                    82:8c:e7:33:1b:85:76:06:60:b0:de:c8:23:5e:b3:
                    41:57:65:6e:f8:af:ed:c2:a5:05:a6:dd:5d:c3:70:
                    ed:e1:bf:1a:a1:a2:94:e6:ea:c6:38:bb:ab:b0:15:
                    f2:7b:0c:a0:e9:9b:95:a5:f1:ec:2f:4b:42:69:42:
                    07:9c:0b:b5:12:b3:17:04:e5:09:fd:53:f2:bc:6c:
                    18:02:62:07:3c:ce:0d:fc:99:9d:b4:4f:59:31:97:
                    ad:4e:6c:4c:2f:a5:91:b4:4d:bb:0b:f1:62:f7:90:
                    4b:0d:24:88:5e:37:e0:a8:db:3d:36:7c:6b:73:89:
                    1b:6b:81:7b:52:b2:59:67:d8:6c:c8:62:de:0c:90:
                    f0:99:8d:9c:f4:88:0d:a2:e0:53:f0:87:79:b1:bc:
                    28:e1:e9:1e:e1:ac:24:15:79:5c:9d:fa:fa:9d:be:
                    d0:e4:1b:56:bf:23:fa:d5:8b:df:35:de:54:38:f3:
                    a3:d7:4d:d0:b1:fe:cc:5a:f8:53:37:11:95:73:32:
                    67:6f:5d:03:7c:d8:2d:4f:d1:b1:12:6c:d6:f1:02:
                    0e:be:7f:c3:59:db:06:ef:da:27:b5:52:6e:f6:e3:
                    9f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:78:AC:E6:31:03:E6:42:4D:07:C7:B4:A0:19:6C:53:34:4C:3A:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/59c0fae9-14ac-3afe-9cbb-aeae5b351de9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.73.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:a0:40:00:82:70:9d:26:3b:f7:60:d1:b3:ff:cc:5d:31:b2:
         c0:be:1b:99:d6:d6:83:9a:f5:16:10:a8:6b:d1:d8:23:34:9b:
         2a:a9:a9:15:c2:94:be:b1:89:28:29:bf:06:b9:01:5c:f1:5e:
         96:66:9f:da:72:33:b5:5a:9c:51:56:3a:e9:c7:3f:7a:97:36:
         00:ff:8b:e8:ed:3d:2f:2f:d6:6f:49:50:9f:71:aa:1b:bd:b7:
         45:74:83:54:db:3a:3b:8f:5b:aa:61:e6:f9:0e:ad:59:eb:71:
         47:21:ed:75:43:ed:40:00:47:d3:d7:ca:3b:7d:d5:df:28:58:
         3b:ac:5e:34:66:d1:42:a2:85:3e:73:65:8b:bf:c6:9a:53:ef:
         67:27:d7:8b:e4:0f:26:e2:e7:65:98:f4:74:5e:03:53:69:24:
         91:40:43:76:84:09:b6:e6:00:17:e0:8d:96:66:b6:b6:e9:17:
         71:18:ba:79:8f:a2:73:96:f7:5a:a5:de:ae:35:31:7c:e7:f0:
         a9:b3:53:26:1b:fa:6c:e5:ab:ff:6f:e8:d4:0e:f7:31:c5:74:
         56:ea:54:94:55:1b:ac:65:73:94:98:6b:3e:9d:2b:46:a7:2d:
         2e:67:94:f4:8f:62:ee:ed:5e:00:a0:fd:82:38:87:f2:bd:34:
         61:be:9a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 12:19:09 2026 by rpki-client