Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c/7d118b22-9d44-3ffe-a950-afadf516924c.roa
File:                     7d118b22-9d44-3ffe-a950-afadf516924c.roa (raw, json)
Hash identifier:          4NRJOxrSBige1LMr0h2AGDHcy1QPOVCO3RpadsOHGP4=
Subject key identifier:   15:69:66:51:BC:2C:72:C9:6C:46:DA:62:19:38:4D:DF:9B:2B:B1:1F
Certificate issuer:       /CN=9405685a-cbfe-4a3e-8842-f5f720c7959c
Certificate serial:       010D0C9F4328584D7CCFE1C4DDAD4338C5A55A20
Authority key identifier: 16:50:12:5F:BD:5F:9D:FE:9B:F0:CD:D1:D9:33:61:78:7B:10:AE:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c/7d118b22-9d44-3ffe-a950-afadf516924c.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     396305
IP address blocks:        170.76.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c/9405685a-cbfe-4a3e-8842-f5f720c7959c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c/9405685a-cbfe-4a3e-8842-f5f720c7959c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:e1:c4:dd:ad:43:38:c5:a5:5a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9405685a-cbfe-4a3e-8842-f5f720c7959c
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=cf3ba982-9bb6-448e-a905-05ebb6a88b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:91:97:df:2e:6a:57:73:32:ed:06:a3:38:0b:
                    0c:f0:7b:6d:66:5b:81:0b:c0:90:18:1e:93:1c:59:
                    cc:dc:11:a1:5d:43:fb:e1:5e:da:8d:53:5e:47:ce:
                    1a:41:52:3e:61:1d:fb:0a:45:5d:72:37:5a:fe:26:
                    55:32:29:75:9e:74:85:71:51:35:ef:63:0e:0c:a5:
                    8f:c7:3b:13:09:5e:3b:4c:ed:59:52:70:2d:9f:56:
                    61:a7:81:80:26:2c:83:9e:e6:5c:9a:be:58:a2:77:
                    c1:9d:02:bb:78:98:40:f0:5b:c5:f2:0b:d7:6b:fc:
                    80:16:ba:81:ab:2f:80:68:de:67:3c:19:0a:45:a4:
                    a7:fb:e1:07:49:14:2a:ae:7d:6e:17:b3:6d:ae:18:
                    42:61:93:6c:34:68:7c:6e:0b:60:4b:4a:7c:8b:bb:
                    ea:21:f5:f5:01:a1:78:71:89:45:2c:98:5a:ba:30:
                    84:26:bc:67:61:f4:ba:37:6d:a1:d0:8a:cb:c9:20:
                    1d:ed:f1:5a:b8:fb:79:93:e3:96:e3:61:79:94:21:
                    d4:db:c4:77:b3:89:f0:68:f0:52:bc:b2:27:81:ff:
                    37:2a:e4:c4:07:f8:7d:a8:78:75:37:3b:02:01:72:
                    a3:e9:99:62:24:27:4e:53:a0:8d:8f:2e:d7:d7:e1:
                    32:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:69:66:51:BC:2C:72:C9:6C:46:DA:62:19:38:4D:DF:9B:2B:B1:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c/7d118b22-9d44-3ffe-a950-afadf516924c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c/9405685a-cbfe-4a3e-8842-f5f720c7959c.crl

            X509v3 Authority Key Identifier:
                keyid:16:50:12:5F:BD:5F:9D:FE:9B:F0:CD:D1:D9:33:61:78:7B:10:AE:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9405685a-cbfe-4a3e-8842-f5f720c7959c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.76.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:66:ee:f6:37:b1:22:80:0e:8c:99:3d:29:bd:62:26:81:de:
         8e:86:81:68:a7:fc:30:4e:0e:c2:5e:01:6c:59:5d:0a:7c:05:
         91:85:99:63:71:04:e9:e8:15:d6:32:30:a6:55:ab:fd:74:62:
         28:a2:e8:75:6a:b6:96:70:ae:9f:28:94:13:15:ae:e8:a3:3f:
         cb:f1:87:99:86:d1:06:cc:58:aa:dd:c4:02:89:6d:dc:d2:e2:
         5d:3f:9f:bd:17:0a:f6:ed:e8:51:c9:be:7a:74:84:77:c8:cc:
         7b:ff:48:b3:82:91:bd:ed:b9:00:0b:db:6b:bc:23:03:29:5f:
         3e:e1:fc:2d:03:2c:22:41:bc:63:6b:19:ec:a6:be:3a:c7:3f:
         f2:0f:8d:b3:ef:df:cc:ac:dc:6d:90:19:7b:03:e1:05:33:01:
         e7:36:7d:e0:91:b2:e6:cd:04:dc:f1:89:b6:11:99:aa:7b:f9:
         1e:86:fc:d8:93:e6:2b:c8:01:1b:5a:24:a0:ed:2c:43:88:ea:
         f4:d3:1f:ec:c1:25:3b:de:07:80:90:ac:74:9d:c9:15:29:5a:
         2b:ad:bb:2c:7f:ba:24:38:b4:7b:80:32:1a:a7:f9:ed:64:cb:
         20:80:5b:59:ea:b3:ab:85:bd:f0:84:4e:ef:c5:7f:b4:e0:f7:
         fd:fe:da:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 16:16:40 2026 by rpki-client