Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/015b5d4f-9c30-41d6-b021-48574f07c8a6/5da3f23e-bca3-326d-86bd-e226c9b5db87.roa
File:                     5da3f23e-bca3-326d-86bd-e226c9b5db87.roa (raw, json)
Hash identifier:          k1EInLasLqS/IodhGsM4Zo43eFQV3p4pPBAk4bfdj5Y=
Subject key identifier:   AF:2A:2C:C4:3D:A7:DE:D3:0E:AA:D5:86:93:B5:7B:4F:47:BB:48:10
Certificate issuer:       /CN=015b5d4f-9c30-41d6-b021-48574f07c8a6
Certificate serial:       010D0C9F4328584D8EF5875011C4D26B134D3E80
Authority key identifier: 6A:1A:DD:34:41:7D:21:A7:E0:13:47:2C:4B:1C:ED:10:68:46:0E:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/015b5d4f-9c30-41d6-b021-48574f07c8a6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/015b5d4f-9c30-41d6-b021-48574f07c8a6/5da3f23e-bca3-326d-86bd-e226c9b5db87.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     398962
IP address blocks:        76.76.2.0/24 maxlen: 24
                          76.76.10.0/24 maxlen: 24
                          147.185.34.0/24 maxlen: 24
                          206.253.88.0/22 maxlen: 22
                          2606:1a40::/48 maxlen: 48
                          2606:1a40:1::/48 maxlen: 48
                          2606:1a40:2::/48 maxlen: 48
                          2606:1a40:3::/48 maxlen: 48
                          2606:1a40:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/015b5d4f-9c30-41d6-b021-48574f07c8a6/015b5d4f-9c30-41d6-b021-48574f07c8a6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/015b5d4f-9c30-41d6-b021-48574f07c8a6/015b5d4f-9c30-41d6-b021-48574f07c8a6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/015b5d4f-9c30-41d6-b021-48574f07c8a6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:87:50:11:c4:d2:6b:13:4d:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015b5d4f-9c30-41d6-b021-48574f07c8a6
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=56b71374-dd4b-400b-b047-37639c76ad94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:46:e0:3d:18:7e:0d:6f:2b:bd:53:6f:67:76:
                    45:b0:1e:49:9a:1e:5c:90:6b:22:68:fe:9b:0e:de:
                    4d:08:11:d1:18:4b:26:c4:6e:e6:1e:7f:00:da:1a:
                    cf:4b:e7:89:3f:fb:b4:8c:4e:d9:76:27:e3:5d:55:
                    de:69:07:12:cc:3f:4c:a0:5a:56:d6:2a:bc:7f:90:
                    96:e5:3c:a2:bb:44:4b:fd:70:0f:c0:d1:ba:c0:bc:
                    71:de:6a:27:84:f9:8e:e9:b2:f7:3e:97:c6:13:ec:
                    73:d3:8a:78:be:4f:60:4d:f0:b7:ba:1b:75:1d:c2:
                    50:4c:0f:59:e8:85:0d:b7:09:64:84:23:c6:04:db:
                    ce:cf:98:72:00:ea:2b:48:68:d9:f2:d4:d9:b3:f8:
                    9c:97:64:ce:57:be:41:63:02:32:eb:b3:f8:c9:bd:
                    b1:19:cd:19:0c:e1:59:96:54:b8:ec:b4:11:fc:f6:
                    fc:b3:03:f9:1b:57:c5:a5:58:81:24:53:bf:2f:da:
                    ea:b0:6e:fd:b6:19:7c:be:f0:ad:c1:20:3c:8d:93:
                    fd:4c:8b:f8:b0:e9:f9:b5:0b:e0:86:0d:d1:b0:82:
                    14:62:4d:ed:c3:4a:6c:41:80:20:15:a9:b7:a8:84:
                    a7:6d:d9:40:52:ef:01:c8:cf:28:cc:1d:bf:bc:0b:
                    e6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2A:2C:C4:3D:A7:DE:D3:0E:AA:D5:86:93:B5:7B:4F:47:BB:48:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/015b5d4f-9c30-41d6-b021-48574f07c8a6/5da3f23e-bca3-326d-86bd-e226c9b5db87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/015b5d4f-9c30-41d6-b021-48574f07c8a6/015b5d4f-9c30-41d6-b021-48574f07c8a6.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1A:DD:34:41:7D:21:A7:E0:13:47:2C:4B:1C:ED:10:68:46:0E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/015b5d4f-9c30-41d6-b021-48574f07c8a6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.76.2.0/24
                  76.76.10.0/24
                  147.185.34.0/24
                  206.253.88.0/22
                IPv6:
                  2606:1a40::-2606:1a40:4:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:45:c9:b9:b3:91:59:97:d1:55:cc:9f:64:c9:4c:99:de:3f:
         42:f4:42:32:4b:f1:c1:f0:51:b5:6b:91:e0:f5:7c:44:98:9f:
         dc:75:66:9f:77:f2:ba:5f:3b:c6:28:03:fc:b1:89:6e:e0:2d:
         c4:6b:5e:4e:e0:33:62:f2:fd:7c:58:7a:52:a5:aa:ec:35:3b:
         af:95:62:f0:68:f8:03:78:3d:a8:b2:93:81:09:f1:63:09:dd:
         62:45:be:e3:6b:82:4e:97:dc:3d:a7:ad:a3:94:32:63:89:d3:
         c7:50:a6:c1:01:11:15:2c:06:c5:9e:25:42:52:0a:d1:48:6a:
         eb:c0:21:c4:0c:01:32:fa:ee:22:fc:27:77:94:86:f8:93:c3:
         8b:f9:ef:ca:0e:d4:94:06:cf:85:a7:f1:b5:fb:19:53:41:a7:
         d7:f6:46:83:df:f1:9a:fa:9a:27:47:8d:91:08:71:ad:67:5b:
         0c:9b:47:5c:d5:ea:9e:71:58:36:b2:c4:86:66:d6:1d:8d:1b:
         a6:d9:f2:c8:11:48:6e:a4:a5:b8:b7:58:60:38:f7:3d:8f:64:
         0a:14:71:c9:b4:57:8a:2a:8d:12:90:eb:2d:02:09:7c:05:81:
         ad:bb:b7:4b:c5:15:c0:fe:0f:ce:1c:fa:f3:59:42:34:72:13:
         92:04:25:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:18:40 2026 by rpki-client