Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/19a8c366-0229-39c2-b264-035be316605a.roa
File:                     19a8c366-0229-39c2-b264-035be316605a.roa (raw, json)
Hash identifier:          Vlc/UMuQXLuhd9tnPkuLLySnfUUeDGGSovvKiJo9vUc=
Subject key identifier:   10:0C:62:05:EB:08:B2:92:50:52:85:7F:82:94:B7:F6:7B:FD:65:A3
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584F45428F63135591CDE1FBA0B8
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/19a8c366-0229-39c2-b264-035be316605a.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     12083
IP address blocks:        24.42.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:8f:63:13:55:91:cd:e1:fb:a0:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=fd89b3d6-506b-4208-abfd-8426616b1633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:40:b8:0c:04:5a:f2:43:b7:34:e1:65:fc:30:
                    90:9c:6f:38:9a:2e:a8:78:c2:6d:d5:1e:c0:24:31:
                    f0:29:22:ae:be:73:1f:5f:7b:d3:84:7f:70:56:77:
                    89:d8:33:95:79:49:13:bb:f9:f9:82:17:ee:06:b5:
                    2d:76:df:ca:98:7d:c7:3c:6e:ec:82:60:b9:cc:68:
                    7f:c8:3c:63:bf:33:7f:d5:91:fc:e8:b2:aa:11:4d:
                    31:91:2b:8e:4d:82:c7:de:b4:45:46:3d:3e:cb:33:
                    90:29:3d:f1:90:ff:32:1f:14:0d:67:f4:32:3d:25:
                    92:49:2a:51:37:a9:e1:cd:0a:7c:c9:68:49:53:ee:
                    41:14:b2:a8:4c:18:d0:7d:32:2e:b9:19:7d:de:f3:
                    17:e4:01:65:06:3d:3b:af:d9:38:56:d4:62:c7:71:
                    f7:22:58:ae:5b:63:6c:4f:a7:36:8a:3e:99:ea:e9:
                    37:57:c8:f3:8e:16:27:3b:e5:9a:4c:20:f4:30:4d:
                    70:34:ff:02:d1:03:64:44:ca:16:6a:57:fd:48:6b:
                    e7:5e:fd:d7:30:ea:5f:e1:98:04:3d:ee:1a:e5:19:
                    6e:c0:2e:49:b2:0b:c0:cd:be:9c:6f:40:e9:dd:a2:
                    1e:01:04:90:9d:94:d5:9e:af:19:c7:1e:68:46:54:
                    30:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0C:62:05:EB:08:B2:92:50:52:85:7F:82:94:B7:F6:7B:FD:65:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/19a8c366-0229-39c2-b264-035be316605a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.42.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:40:82:8c:8f:4b:c3:96:41:db:5a:6b:58:cf:68:81:1a:4c:
         54:c7:a6:83:0a:33:53:9d:ac:7d:d9:50:d6:f7:42:dd:d5:a4:
         61:33:a0:bc:3f:13:97:80:a7:84:7c:e9:3b:0e:43:19:7f:57:
         4e:c4:b8:90:84:6b:d5:27:52:97:4c:1f:38:e7:c2:25:aa:ab:
         5a:8d:ff:32:90:2c:4e:1e:d4:4c:c2:ef:6f:ac:b7:90:ee:9a:
         7f:96:1c:64:48:cd:14:fa:20:6d:6a:e2:d5:d1:89:d4:00:45:
         40:93:a6:10:ff:1b:59:e7:68:3d:60:fd:eb:fa:82:11:62:2e:
         a8:44:40:d5:9f:b4:b2:7b:ca:f4:d5:c2:02:b0:41:08:8a:bf:
         17:3b:e3:39:f2:0e:a0:7f:ae:94:23:9c:0a:23:f9:8a:d1:53:
         96:df:55:2f:6c:68:1a:56:3f:7a:9c:03:66:94:27:d0:be:a8:
         64:76:8a:69:c6:eb:4d:0b:e8:e0:21:25:b5:81:e6:6e:ab:ee:
         04:3e:6e:62:ae:2f:de:e7:e3:48:0d:35:e1:f7:ca:e4:a8:3e:
         25:a0:88:bf:34:12:83:6a:23:38:da:c2:ce:6b:76:45:65:c8:
         f4:46:e2:9c:16:5c:30:f1:b3:00:70:49:2d:00:2b:a3:ef:af:
         c5:63:e0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:04:49 2026 by rpki-client