Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76b06b2a-69e2-3e3a-80a6-bbe6a215e165.roa
File:                     76b06b2a-69e2-3e3a-80a6-bbe6a215e165.roa (raw, json)
Hash identifier:          hpiacfUmVF77gvgP4xhvb48QUN33dHJMb+pbo4s0NWY=
Subject key identifier:   3A:D9:BD:9E:B6:76:20:AB:D1:78:A0:42:F5:CB:94:A7:89:67:C3:4E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AE031E8ED2D94F7447FCB0000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76b06b2a-69e2-3e3a-80a6-bbe6a215e165.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     7725
IP address blocks:        76.105.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:e8:ed:2d:94:f7:44:7f:cb:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=2f639fb4-8330-40ea-a0fe-c00f4e44e9cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2d:f0:0b:78:da:ea:ee:03:19:49:a6:76:ae:
                    ea:a1:a9:e0:85:39:5a:2a:6a:d8:43:19:25:24:8a:
                    0d:42:8e:f0:9b:fe:6c:eb:04:a2:30:c4:e5:e4:f3:
                    2a:36:5e:04:3f:2c:2c:6e:56:02:9d:0d:ca:28:4a:
                    1b:f2:6d:ea:81:89:95:63:37:09:bf:43:b5:19:8e:
                    2b:df:c5:45:76:f4:d6:a5:f8:e5:f6:dd:d8:7f:1a:
                    1e:1b:5e:b2:d0:28:4f:7d:e0:79:91:2b:19:f4:84:
                    8b:75:13:29:b6:92:1d:8f:ec:51:48:0b:52:bc:fd:
                    77:dc:5c:d6:da:23:88:ae:e9:d3:bb:46:fd:43:fd:
                    05:c7:4b:cf:cc:c5:50:e9:68:b6:0a:fa:f2:6c:17:
                    89:fa:ee:ee:9e:94:ef:d6:1c:79:46:3c:10:4d:56:
                    c8:22:1c:81:30:35:e4:96:63:f2:38:4a:39:4f:be:
                    c8:87:12:be:d2:37:dc:d2:d7:d3:64:6c:0e:ef:8b:
                    38:6a:6c:d2:22:89:27:76:c2:ac:3a:46:0a:26:38:
                    95:98:92:3d:57:8b:88:e3:43:b0:fc:4c:bc:5c:88:
                    45:16:e8:f8:47:d0:cc:ba:94:35:4b:3a:4d:fd:49:
                    89:4a:89:10:bc:81:d7:47:77:23:0b:46:83:0b:ed:
                    e0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:D9:BD:9E:B6:76:20:AB:D1:78:A0:42:F5:CB:94:A7:89:67:C3:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76b06b2a-69e2-3e3a-80a6-bbe6a215e165.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.105.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:1b:c1:f7:bd:7b:0e:ed:62:b4:91:be:88:e4:08:2d:81:28:
         c5:08:cf:c4:32:57:0a:1a:e6:49:d2:97:59:58:e2:01:a0:f3:
         b5:13:98:ac:b7:ea:b5:50:27:8f:1c:a1:8b:ac:85:f6:a3:d8:
         87:de:a1:ee:b5:83:f4:ae:82:e8:6e:27:ab:44:01:42:5a:67:
         54:0b:ca:9b:4c:1a:63:75:2b:65:61:9a:ff:54:6e:05:97:5c:
         e3:85:e8:c2:33:fd:8d:95:62:ee:b1:ac:98:1c:24:0f:4f:75:
         7f:e4:0d:a4:15:27:11:2f:f0:c3:d2:cf:b5:6c:80:04:38:43:
         df:1a:2e:43:a8:9c:e4:e6:1f:9f:55:6b:d3:c4:f0:83:aa:f7:
         7f:2f:0e:07:d1:f7:71:95:46:65:ee:55:55:f0:eb:27:e9:3c:
         6c:3a:cd:bb:36:95:e5:d3:28:af:20:b8:35:42:d8:3a:3a:d8:
         9d:14:c6:80:61:26:b9:c6:88:56:d0:64:1b:c9:22:0e:47:49:
         2c:3d:86:90:d7:5f:31:73:30:0f:20:56:1a:5a:6f:54:28:b2:
         9a:8e:5d:f1:1d:20:12:21:90:e1:92:b9:dd:0c:8a:11:03:5e:
         a0:a1:7e:20:98:7e:c2:3b:64:17:84:83:4e:7a:4d:43:fd:b4:
         8f:2f:8b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:22:18 2025 by rpki-client