Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/7a7f3213-6708-3b8b-a36d-cbe95bfc72c1.roa
File:                     7a7f3213-6708-3b8b-a36d-cbe95bfc72c1.roa (raw, json)
Hash identifier:          TdEaCj3QBvg/DWVtRm7IDCFv3+QMvBx+SMAR1cYfh5k=
Subject key identifier:   7A:77:D0:FA:90:C6:49:9A:21:90:42:4F:81:A8:EF:74:27:9A:EF:16
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584D8EF55A0DB6038D325F130530
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/7a7f3213-6708-3b8b-a36d-cbe95bfc72c1.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     11260
IP address blocks:        76.11.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:5a:0d:b6:03:8d:32:5f:13:05:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=73ec89a4-9633-45cf-b010-e62f85110a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0e:21:0f:f6:b5:b2:0e:08:af:49:2d:31:d5:
                    a3:4b:af:00:be:29:ff:70:33:a3:22:0a:72:63:5b:
                    36:41:db:3d:59:e3:c4:d0:64:f8:19:c4:d9:50:3f:
                    ce:fc:0c:87:04:ed:3f:b3:25:59:05:61:f0:ea:83:
                    b1:22:16:a2:7f:8d:9d:24:d4:29:1d:13:8f:4e:b3:
                    6b:97:9c:91:0e:c1:10:82:5c:1c:93:35:15:00:ba:
                    ac:ab:00:42:2b:d8:b5:e1:fa:02:ad:2b:43:05:1f:
                    42:ae:35:23:b3:58:fa:3e:5c:09:b4:b7:3f:4f:33:
                    2c:f7:e9:a0:56:15:ad:da:1f:e5:97:fd:64:de:c9:
                    c7:b1:12:ca:6f:a5:30:1f:85:d0:ed:c7:fa:9c:8d:
                    3a:ac:5a:62:31:f1:c0:05:89:04:88:db:66:7d:ca:
                    cc:07:53:78:4f:83:25:2f:4e:53:d8:27:45:5b:35:
                    d1:89:d3:27:fc:c0:1c:3f:12:b1:46:ee:50:b9:7c:
                    3e:8a:90:0c:90:97:64:8f:59:6f:f9:b3:5d:a0:9a:
                    dc:13:06:e8:62:6b:36:d8:ee:e4:8b:d3:a6:a2:30:
                    b5:2b:a0:a9:d6:b3:c1:b1:fd:f1:c4:c5:70:6c:c3:
                    1b:e6:93:ac:ae:22:b4:40:05:79:03:05:48:17:75:
                    9e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:77:D0:FA:90:C6:49:9A:21:90:42:4F:81:A8:EF:74:27:9A:EF:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/7a7f3213-6708-3b8b-a36d-cbe95bfc72c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.11.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:e5:40:c2:82:00:07:41:23:18:13:d8:dc:d0:1b:2d:a4:fd:
         02:a7:38:18:71:fa:02:49:c7:d8:92:36:d7:22:07:ea:2e:af:
         42:8e:b7:d5:f3:3b:8e:82:74:09:32:0c:84:fb:f9:de:1e:87:
         13:3a:09:d3:e9:1b:35:9b:6a:23:d0:7c:f3:e0:08:8d:80:6e:
         e5:dc:dc:74:1c:a7:6b:92:6f:18:4c:16:db:06:ee:e7:0e:3d:
         5f:8e:25:95:a3:00:02:45:5a:18:d5:6d:4d:84:b1:44:8c:56:
         7f:26:24:b1:41:38:fc:bb:0d:8d:a6:30:9f:e5:eb:04:12:84:
         8e:fc:e0:74:68:a4:03:bc:82:4c:c4:24:54:67:1d:6d:60:c7:
         05:74:5f:d0:58:95:01:75:e0:66:6b:de:4f:4d:65:0e:33:12:
         2a:e7:9f:a3:ca:f1:fe:3f:48:9d:34:5c:42:b9:29:f4:d0:45:
         aa:43:ad:5c:a7:54:22:ea:28:6a:aa:f1:df:24:e7:ec:98:e9:
         20:1d:b8:76:b3:c6:e8:32:e9:ec:75:72:5d:8f:cf:81:29:07:
         49:91:d8:ae:de:41:33:b7:1b:35:30:7a:6b:e5:da:e7:20:f9:
         a9:19:c7:51:9b:21:61:ff:3f:a5:b7:d3:aa:71:94:ed:00:9a:
         a5:df:7c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 13:39:55 2026 by rpki-client