Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/bc60c154-aff8-30ee-85d8-0c1952eaa9c1.roa
File:                     bc60c154-aff8-30ee-85d8-0c1952eaa9c1.roa (raw, json)
Hash identifier:          4a9HXdTEvCkk54FIOTbD0d5BsU6pyweLS9W1RzCRJec=
Subject key identifier:   8B:52:5A:90:D7:B1:2D:B8:68:1A:F5:FB:39:A7:A1:5A:25:00:C6:E8
Certificate issuer:       /CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002
Certificate serial:       010D0C9F4328584E2D9F0EE005CF721477E52E00
Authority key identifier: D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/bc60c154-aff8-30ee-85d8-0c1952eaa9c1.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        76.76.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:0e:e0:05:cf:72:14:77:e5:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c45a1fc7-c854-4bf1-82dd-885bfccd2002
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=f3f7deec-5c6f-40a5-9cc4-aef812d9720f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:98:0d:3c:6c:5d:1b:70:2a:0d:43:80:36:62:
                    a1:b8:8c:09:ff:e3:c2:0d:40:f1:fd:bd:fc:b8:4a:
                    3a:1a:43:ef:8f:02:4f:c0:af:46:89:8d:a3:e0:08:
                    66:32:0e:8b:9c:fe:23:cb:4e:8b:04:3f:c3:7a:4b:
                    e5:72:01:10:4f:eb:3a:29:ed:3d:d4:1d:3a:16:04:
                    1d:fe:02:28:0e:f0:63:49:6d:4f:8f:72:d2:59:d3:
                    6a:8f:fc:57:17:01:ea:31:cb:c3:fc:11:fd:1e:10:
                    6a:d2:09:8d:c6:e4:73:b4:39:ae:40:55:da:ca:79:
                    5f:58:c4:84:4c:6d:7a:59:97:89:78:f2:c6:2e:4c:
                    2f:e9:8a:2a:37:f4:ea:37:96:56:bb:16:60:ec:2b:
                    66:3e:ed:8a:ec:6f:19:69:e2:2b:d8:cb:e6:93:62:
                    dd:ee:33:75:16:02:38:fd:fe:ea:b8:53:4d:0f:14:
                    74:b1:b1:55:0b:a3:f3:73:64:33:93:98:1d:49:a6:
                    e2:81:a0:7d:5e:e1:3f:28:23:f7:02:4e:e6:9e:09:
                    a7:d2:c9:32:d4:0d:94:53:6f:ed:da:c3:20:5c:35:
                    9d:e8:90:62:3f:1f:36:66:65:67:02:c2:22:46:6d:
                    fd:32:df:fd:e3:a9:8a:be:c3:55:ca:d5:25:79:c6:
                    ef:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:52:5A:90:D7:B1:2D:B8:68:1A:F5:FB:39:A7:A1:5A:25:00:C6:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/bc60c154-aff8-30ee-85d8-0c1952eaa9c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002/c45a1fc7-c854-4bf1-82dd-885bfccd2002.crl

            X509v3 Authority Key Identifier:
                keyid:D3:0B:D0:63:18:BC:87:8D:91:2A:3A:88:72:54:36:DD:4F:8C:45:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c45a1fc7-c854-4bf1-82dd-885bfccd2002.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.76.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:43:a4:d8:fb:1b:bb:f9:c7:1b:8e:3d:bc:c6:62:c9:f0:ef:
         c5:27:f3:f0:f1:d7:95:c4:86:48:0c:21:57:b5:bf:d2:e5:71:
         11:52:ab:50:cb:03:28:6b:5e:13:31:81:e1:ba:d2:e2:f5:71:
         74:53:89:03:94:3c:b5:4a:2c:d5:19:eb:21:2f:d0:6c:da:61:
         3f:45:b5:2b:ad:bb:ef:14:84:14:84:a3:07:10:88:62:33:4c:
         a6:0b:70:a8:10:70:ea:bb:4d:0b:4e:18:00:f8:bd:ce:d5:ba:
         74:7a:ea:fa:05:cc:1c:48:e5:4a:19:cb:5e:b3:a1:6a:0c:a6:
         b4:a7:bc:6a:59:23:89:91:17:18:97:f0:a4:59:4d:2b:5c:0f:
         0c:55:eb:b1:53:1c:7d:23:d8:68:3b:49:13:ae:28:b5:7d:29:
         3d:40:ea:28:f8:da:9d:ed:53:b5:2e:b6:46:aa:5a:26:65:54:
         e3:a2:bd:59:1e:99:2e:b9:ef:15:05:97:13:ae:d8:78:0c:57:
         c0:e6:a4:aa:e3:85:51:e8:e9:75:c8:4e:20:9c:92:ed:dd:2d:
         38:b4:65:04:fc:93:81:6b:1a:1a:af:ad:90:be:7b:e8:93:f8:
         e3:21:35:35:a2:9d:b7:c5:41:a2:f7:a9:4a:72:23:2e:36:66:
         4b:47:29:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:09:24 2026 by rpki-client