Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/77889bca-f733-33f2-8666-e0faa79f2be4.roa
File:                     77889bca-f733-33f2-8666-e0faa79f2be4.roa (raw, json)
Hash identifier:          xYjQ7QZExIEnXK5PGHNH+JEV7tLMwhXMuIUgzs9Vy5Y=
Subject key identifier:   29:C3:A7:B5:12:D3:8D:86:3D:E8:13:A8:27:EA:1D:95:48:8B:39:3B
Certificate issuer:       /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Certificate serial:       010D0C9F4328584D60E4F457452C50E241203800
Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/77889bca-f733-33f2-8666-e0faa79f2be4.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     6315
IP address blocks:        198.60.104.0/22 maxlen: 22
                          198.60.108.0/23 maxlen: 23
                          198.60.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e4:f4:57:45:2c:50:e2:41:20:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=fab80976-0a0b-40e9-8055-d97c0b425849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a9:09:49:92:83:c2:c1:a5:4c:bd:af:0e:97:
                    43:c0:d3:49:de:86:a0:a5:dd:b1:73:54:b9:42:13:
                    e6:3e:27:24:ff:7d:d6:65:5e:c0:77:7c:5b:72:9e:
                    49:c9:be:8e:b6:79:7d:9a:60:23:c0:73:6a:87:97:
                    64:e9:56:af:b3:b3:d8:90:62:52:3d:3f:db:a1:7a:
                    1b:bd:6f:7f:f4:79:c7:84:2c:65:2e:c5:09:8c:73:
                    cb:26:03:84:68:7a:c9:d7:7c:fb:b0:dc:57:0d:78:
                    8a:49:2d:55:95:af:89:df:81:82:c5:c8:5d:eb:20:
                    d0:ef:dd:50:08:09:50:c0:e6:2b:f2:bb:a8:d9:31:
                    5e:a1:bb:2e:00:e8:a1:3f:8f:dd:24:4a:1b:5f:e9:
                    85:86:70:b5:19:c9:dd:0e:5b:20:b9:dc:81:db:03:
                    fb:18:52:5c:b0:7c:c2:cd:09:10:c2:7a:cd:65:a5:
                    21:32:01:ab:59:67:4e:8f:76:e5:cf:5c:b7:d8:e1:
                    61:ca:a7:3f:fb:da:8c:03:9b:2b:79:63:d4:ba:dd:
                    a6:56:6f:ea:29:92:82:22:e2:0e:ec:3b:1f:da:8e:
                    b1:71:f4:f3:d5:4c:1e:28:82:4d:28:bc:a4:52:76:
                    00:70:05:fd:e0:24:60:07:4a:34:9b:a0:d6:c8:02:
                    7d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C3:A7:B5:12:D3:8D:86:3D:E8:13:A8:27:EA:1D:95:48:8B:39:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/77889bca-f733-33f2-8666-e0faa79f2be4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl

            X509v3 Authority Key Identifier:
                keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.60.104.0-198.60.110.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:bf:92:12:d8:cc:30:23:20:9a:07:3e:bb:ea:1b:ac:4e:5e:
         57:2b:27:b6:b3:c4:f5:ce:a4:e3:ab:fa:51:1f:30:80:a9:a8:
         2a:50:67:c9:79:e6:ef:e1:e8:ec:ae:71:9a:00:02:be:51:af:
         ee:67:0f:fc:51:04:b4:78:92:1c:2d:85:d9:a9:9e:32:a2:ea:
         46:55:ec:f1:95:7e:76:8d:80:95:b5:51:9f:e6:71:2b:a9:76:
         d4:fa:d3:e2:fe:66:96:e8:e0:81:d3:4a:c6:6d:8b:e1:91:77:
         e8:35:7e:66:cb:b6:21:72:f1:50:83:85:8a:88:44:e4:33:f7:
         60:44:c4:22:1e:6d:47:b5:c4:22:8f:2b:68:4e:d8:f7:48:9f:
         de:0e:a8:98:90:ac:91:c6:76:db:2e:f5:8b:f3:a2:54:b8:01:
         51:54:47:af:d8:fd:27:53:02:27:51:55:57:97:72:74:d9:44:
         9a:a2:e4:65:c6:73:02:77:48:90:3d:85:ef:92:06:d7:bb:42:
         f7:e3:7f:79:68:cd:5a:1f:46:7b:30:68:a6:f7:4b:78:3a:98:
         84:7f:d5:3d:c8:3b:a3:6e:ca:89:e2:be:85:1d:a1:f5:c5:c9:
         98:12:4d:4f:92:c8:af:c1:50:40:8e:5f:17:43:68:c9:68:8c:
         ef:df:1b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 17:17:24 2026 by rpki-client