Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/147822a5-c475-34ed-abbe-3e272f9028c9.roa
File:                     147822a5-c475-34ed-abbe-3e272f9028c9.roa (raw, json)
Hash identifier:          5dsJgYzR/dHQfdlw5n76FDoJ/RqYGoHSZKAekDq92r4=
Subject key identifier:   E8:7B:06:D0:18:25:53:E2:93:20:13:36:7E:C6:23:9C:DF:30:92:8C
Certificate issuer:       /CN=2a85302a-1502-4116-b560-4c2d2155f989
Certificate serial:       010D0C9F4328584E50849AE6A1367B0BFF6B9000
Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/147822a5-c475-34ed-abbe-3e272f9028c9.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        76.76.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:9a:e6:a1:36:7b:0b:ff:6b:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=d383d33c-4cf2-4e7d-ba6e-27e3c1477946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f0:4b:c9:dd:7c:ad:c9:3b:b6:4b:aa:f2:74:
                    61:8e:59:c4:38:8f:fe:bc:ac:0e:21:eb:ee:da:cf:
                    6a:a4:95:6c:fa:e3:24:e7:0c:4c:04:42:9f:f4:db:
                    f5:83:44:10:07:ec:05:a0:5a:c7:e1:3b:71:83:0a:
                    87:db:92:04:e2:4b:5c:1e:94:0f:73:27:67:a5:cf:
                    8a:df:a0:71:ab:8d:39:15:03:64:71:06:38:41:14:
                    b6:92:0e:fd:61:92:fd:85:0e:26:ef:fa:9d:30:21:
                    a7:85:10:65:bb:51:2a:0a:0d:02:df:64:0d:bf:31:
                    5c:d1:5a:0c:73:66:32:62:37:7b:1b:41:de:91:f1:
                    fc:9d:be:bc:f6:1a:43:14:4a:39:2a:3f:df:d0:98:
                    44:99:89:5f:64:ef:88:4c:b8:e9:3b:f8:8c:dc:17:
                    5c:bf:0a:3c:7b:d1:56:bb:07:a9:f6:6b:27:a2:89:
                    04:8c:69:37:9c:c9:d2:a9:10:91:8f:ce:8c:f8:e0:
                    01:42:d7:0b:5c:ff:4b:85:bd:bc:03:db:2c:b6:61:
                    d9:2c:0c:fa:cf:b9:65:ea:ff:fd:22:a0:50:b9:63:
                    bb:b3:9a:b7:61:62:8f:da:5d:ee:5e:41:6d:f6:d6:
                    aa:a1:0d:5d:04:51:16:1a:60:d6:2e:72:bf:49:eb:
                    10:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:7B:06:D0:18:25:53:E2:93:20:13:36:7E:C6:23:9C:DF:30:92:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/147822a5-c475-34ed-abbe-3e272f9028c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl

            X509v3 Authority Key Identifier:
                keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.76.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:78:db:b0:7c:da:70:30:e2:45:7e:00:bf:47:5c:13:2a:d1:
         0b:65:e2:ff:6b:48:f8:1c:f6:c0:a4:bb:1c:3d:bc:54:f0:a3:
         bb:c9:6e:53:0d:a0:01:2e:2f:8f:ef:9b:80:c4:a5:8e:5b:9f:
         33:4c:0e:0a:c7:aa:63:ec:8d:d4:df:00:13:ad:a4:b5:52:99:
         eb:5d:df:83:ba:64:f8:0a:cb:3c:f4:2c:e2:68:80:78:c1:0b:
         87:bf:58:35:75:25:25:93:bc:62:00:cf:dc:21:af:d6:8e:3d:
         53:d6:4a:9c:99:97:ae:34:3d:a9:2b:2b:ce:7b:0b:2c:3f:e0:
         37:53:2a:d8:b2:e3:05:f7:13:7d:c4:f5:ed:66:2e:50:9b:5f:
         7a:5c:b9:ef:5d:bf:be:ff:8e:bb:f0:b7:d9:40:de:dd:94:4e:
         b9:db:ae:2b:ea:b1:cd:bd:24:18:e6:4e:a4:32:31:08:3b:ba:
         3b:ca:8d:bf:aa:eb:27:59:23:87:4f:ae:bf:79:d4:78:4e:76:
         71:d3:e8:ce:69:bf:a8:79:6b:28:70:cc:dd:b0:8a:94:95:11:
         fd:51:c8:dc:28:16:aa:f6:58:5f:c3:93:ac:a9:71:19:41:cc:
         08:6c:d7:cf:e2:b3:06:22:7f:0b:d6:85:66:2f:d9:ab:c4:21:
         a6:b9:95:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:13:16 2026 by rpki-client