Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ffe35bab-90f0-3b12-ad7e-cff5c65c16b0.roa
File:                     ffe35bab-90f0-3b12-ad7e-cff5c65c16b0.roa (raw, json)
Hash identifier:          +R22Tj0oK+/PmBsNLo2yI30tUubsoya6mRQGfXGe+Tk=
Subject key identifier:   7B:C5:A8:E7:1F:4A:13:C6:F0:97:B0:51:C8:46:6C:63:40:18:6B:AC
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584CE1FCD0C577C33296A5F1FB00
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ffe35bab-90f0-3b12-ad7e-cff5c65c16b0.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     12083
IP address blocks:        75.76.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:fc:d0:c5:77:c3:32:96:a5:f1:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=d58211a4-6896-4f76-8721-434ae641ef97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:13:b7:6e:75:bb:56:f7:42:57:75:5f:03:b3:
                    6a:7c:41:d2:d1:f0:23:30:dc:fd:ad:a9:6c:ef:a0:
                    8e:07:a8:be:6e:cd:cd:54:aa:ec:35:9c:92:45:da:
                    78:7f:9f:eb:88:53:ed:52:68:45:1c:da:4a:10:83:
                    d5:b7:e4:36:c5:00:2b:29:00:14:e2:4f:a6:78:1a:
                    20:e2:6b:d9:ea:a6:8d:c1:ec:91:40:2e:dc:9a:77:
                    e4:98:6d:9b:29:a0:76:66:4c:91:18:35:9f:56:f5:
                    41:d2:07:81:bb:d4:13:a0:40:e4:3d:0d:99:50:51:
                    be:03:14:a4:59:12:20:58:49:04:76:36:71:12:7d:
                    85:05:d6:2a:fa:aa:54:db:a3:79:6a:da:35:44:f5:
                    54:20:32:49:f8:06:3c:9e:38:97:87:fc:fa:6f:98:
                    a3:1e:a0:3c:a8:29:97:af:84:86:95:fd:71:91:71:
                    23:34:38:37:70:d1:e1:f7:3e:10:b1:20:e4:40:06:
                    12:1e:6e:41:29:32:13:e5:9d:ac:73:d9:9d:6e:ea:
                    8f:79:da:44:6c:5c:58:95:86:bb:56:64:ff:0b:8f:
                    c9:69:bc:fe:c9:ae:31:4c:8c:7a:73:2a:03:86:85:
                    bd:60:6d:49:da:f4:33:f8:a8:d3:6e:9b:fb:f5:51:
                    5b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C5:A8:E7:1F:4A:13:C6:F0:97:B0:51:C8:46:6C:63:40:18:6B:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ffe35bab-90f0-3b12-ad7e-cff5c65c16b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.76.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:c1:3b:2a:92:29:08:d3:0c:10:70:c2:d9:f2:e0:62:b4:8e:
         49:ea:5b:70:b8:69:3a:80:d3:0a:ab:78:6a:d6:16:54:e6:e6:
         c5:9a:31:be:e7:4d:6d:69:f9:e4:b9:cc:ae:02:1a:26:2e:1b:
         79:de:ed:f8:e6:63:43:7a:19:2d:ac:1d:18:04:75:d7:bd:b3:
         e2:dd:d6:7e:84:18:fe:0e:77:5c:75:14:ad:bc:d7:a5:b8:2a:
         34:65:e4:08:18:ff:54:40:bc:d5:9f:61:4a:60:ca:4a:78:6a:
         5b:2a:ab:3e:39:d6:cf:c2:a6:dc:20:46:db:3a:58:78:df:ec:
         b2:67:10:97:15:0c:88:35:52:1c:0d:17:a6:08:2a:c6:bb:01:
         74:c8:3a:de:b1:08:8f:68:b6:71:8c:7e:bd:13:c2:ec:d0:49:
         28:ba:23:c7:e5:ff:de:53:51:34:2a:78:39:89:53:50:e0:59:
         46:0c:d8:aa:d4:83:43:44:35:1b:12:f8:d3:b6:4e:1f:2e:95:
         98:8f:fa:81:9b:78:53:9a:a1:12:03:4e:27:0b:b3:9a:c6:aa:
         be:b0:6d:a6:f3:d3:73:cf:af:34:e0:7e:d5:a2:10:ec:1d:a2:
         b6:69:cf:2c:c4:9c:13:17:80:34:1e:d6:9a:ca:ae:95:38:21:
         d4:59:ce:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 12:19:10 2026 by rpki-client