Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/e0798679-f191-3f8b-bac4-79b4e7aa7b1a.roa
File:                     e0798679-f191-3f8b-bac4-79b4e7aa7b1a.roa (raw, json)
Hash identifier:          Y4ojbmI38BYzHQxW966QVVRGFWVkUUp7VZfmbP5mXDA=
Subject key identifier:   8C:7A:B9:07:B5:05:6B:A2:72:D8:97:8D:F9:C8:CD:26:02:1E:E1:BC
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584EB2B1C39C4745DD2141A35400
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/e0798679-f191-3f8b-bac4-79b4e7aa7b1a.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     11260
IP address blocks:        76.11.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:c3:9c:47:45:dd:21:41:a3:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=4cac8ca5-0336-487f-a6eb-6172f8b034de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6b:68:d0:9e:53:e7:33:6e:a6:e8:cd:ce:9d:
                    45:fb:55:54:f9:f6:17:d7:fa:d0:03:53:e6:a6:65:
                    bf:4d:86:46:d0:8a:c7:6b:2e:b0:64:9b:4d:bc:1e:
                    39:49:8f:c8:4a:35:79:30:c9:30:b0:1a:e9:c1:51:
                    36:bb:10:ff:42:dc:92:72:53:c0:d3:7b:76:a1:eb:
                    f8:94:64:0d:dc:4d:49:fc:ae:8b:40:41:a0:99:8e:
                    22:4b:81:96:03:25:a2:6f:2c:f3:08:db:9c:41:f0:
                    58:aa:4d:77:56:59:a6:d9:47:67:70:1f:d8:a5:79:
                    39:63:0d:38:b8:24:8f:aa:db:e6:34:66:47:3f:c5:
                    56:c0:f8:02:85:24:7b:be:56:b3:8f:63:da:3f:fe:
                    83:35:b5:cd:4d:0e:62:d9:37:df:cd:8b:09:83:1a:
                    0c:e0:7c:4d:f3:e9:3b:9c:db:a6:ab:21:94:b2:e3:
                    a1:83:c2:02:08:6b:ba:0c:b0:d5:e3:b6:2d:8c:ff:
                    7a:b6:f4:92:6e:b1:0d:b1:99:c1:a1:1b:52:b0:7f:
                    3e:35:8f:20:db:10:a5:cc:4d:61:4f:0d:0a:a8:52:
                    f3:f8:1b:d5:b8:32:23:b4:24:65:08:59:96:c7:4e:
                    c7:3a:bd:30:b0:69:bf:af:d0:c1:51:f0:31:fd:77:
                    11:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7A:B9:07:B5:05:6B:A2:72:D8:97:8D:F9:C8:CD:26:02:1E:E1:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/e0798679-f191-3f8b-bac4-79b4e7aa7b1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.11.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:65:01:79:e4:43:c9:14:d8:f9:4d:3d:aa:8d:72:a7:84:26:
         ad:9f:fc:a9:cc:3d:dd:c5:17:97:01:5b:cb:27:77:56:c9:f0:
         77:b3:ed:52:b2:51:08:73:03:8f:59:a8:59:ea:0a:37:6b:b9:
         d4:4f:6b:2e:bf:df:f6:0b:ab:76:83:b7:1d:af:b2:8d:95:c7:
         65:cd:95:99:ba:65:04:b6:75:0c:24:be:57:58:6b:f2:fd:9c:
         1c:bc:cc:80:8c:29:d7:3c:58:b1:14:97:73:af:f0:06:5f:77:
         b4:49:14:d8:8a:4a:4a:ff:8c:97:06:ac:90:90:2e:f9:04:c6:
         40:77:b7:e7:95:96:56:77:df:a4:42:5c:4f:6b:e8:4a:93:9f:
         34:1a:ce:67:50:49:32:a4:d3:41:53:2c:63:55:39:3d:31:f1:
         cb:cc:a7:42:cb:22:5f:49:1d:37:a6:3f:d5:ee:68:e2:39:00:
         10:9d:a0:1b:a1:50:07:bd:39:70:38:c2:c6:49:b2:29:be:f2:
         1c:8f:71:92:9b:9f:3c:c9:47:6f:cd:dc:ff:70:51:2a:ad:11:
         86:a2:0d:74:f4:2e:f6:c8:f2:9d:04:d1:e4:f3:40:f7:fa:f7:
         c6:8c:ce:1f:c4:c5:44:d3:0b:ae:21:3a:55:98:6f:5c:6b:d4:
         76:fd:dd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 12:00:45 2026 by rpki-client