Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4ef99acc-1db9-36c6-a7a5-08cb5041966a.roa
File:                     4ef99acc-1db9-36c6-a7a5-08cb5041966a.roa (raw, json)
Hash identifier:          YANe7K9w2fA+nGjGJkZ8WbAKb7o7tJ+Lndbt4jSNdW0=
Subject key identifier:   7D:54:F8:89:21:3C:C6:0F:62:73:A3:AF:73:3E:E2:F5:FD:34:A4:69
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584DC29AEB10C4D2E8FE78E5C480
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4ef99acc-1db9-36c6-a7a5-08cb5041966a.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     12083
IP address blocks:        24.214.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:eb:10:c4:d2:e8:fe:78:e5:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=47836728-4625-4ac1-a53d-1ae406029662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:26:50:67:54:d7:29:42:b9:64:47:3e:f7:98:
                    12:7f:9c:5f:7d:1c:d8:9f:c4:2e:70:97:e0:6a:ff:
                    e2:93:96:45:18:d5:a4:48:31:70:aa:dd:79:99:35:
                    b9:e3:87:9e:3f:de:47:fc:65:9b:ad:9b:c3:82:aa:
                    39:2f:c4:68:72:c4:65:01:2a:67:d6:77:84:2b:32:
                    86:80:90:8c:0e:57:af:6e:03:6c:a2:18:5f:d7:59:
                    f6:f7:f2:5a:c4:d9:5b:53:c4:cf:7c:4a:e2:5e:60:
                    a1:94:74:15:0b:c0:d7:3c:f6:8f:61:5d:d3:32:07:
                    c4:28:94:49:2e:ab:0c:c1:69:36:a3:19:a2:2e:6a:
                    48:0a:d7:6d:0d:78:6d:33:10:5e:ee:f2:b9:93:a0:
                    08:75:e3:dd:c2:05:c1:3b:3f:34:80:e7:23:a4:49:
                    27:7d:34:60:25:0e:ce:7c:33:87:74:b7:b4:fd:54:
                    21:6c:a4:b4:3b:00:24:0b:23:e8:a7:6a:75:30:23:
                    e7:31:98:13:69:ce:88:48:bb:3f:21:03:c3:6b:a4:
                    ec:5d:1f:be:3e:7c:36:6e:23:dc:c8:05:55:e6:04:
                    1e:6e:ce:0b:a1:2f:2b:90:59:88:72:2e:7a:53:cc:
                    8f:0e:d7:83:74:b0:55:fc:e5:c1:c2:36:b3:c6:32:
                    09:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:54:F8:89:21:3C:C6:0F:62:73:A3:AF:73:3E:E2:F5:FD:34:A4:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4ef99acc-1db9-36c6-a7a5-08cb5041966a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.214.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:1b:ee:0c:a0:e1:a5:bc:43:2c:df:54:4c:42:85:77:dc:ec:
         13:bb:ca:7b:42:b4:73:97:99:a9:34:f4:e2:c4:7d:1e:01:69:
         35:07:c4:1f:02:4a:d4:1b:05:38:a4:ba:de:1a:59:83:b2:53:
         f5:21:46:46:57:b5:97:42:96:4c:8b:40:18:6b:86:6d:1b:3c:
         69:3e:61:d2:ed:d4:dc:79:b9:5c:82:02:13:c7:c0:61:85:c9:
         5b:4d:df:88:8f:60:44:5a:76:0e:f2:da:96:a2:f8:4b:f8:18:
         c9:cc:22:a2:fe:9b:14:12:fc:fe:66:1e:68:fb:01:b4:ac:84:
         46:31:e1:3d:09:8f:bd:40:37:f3:14:c0:3d:05:d4:74:9d:a4:
         90:92:c1:03:9d:85:db:80:e4:e2:34:6a:68:98:53:fd:a4:15:
         58:7e:0e:34:82:f5:4f:ee:a0:d0:8b:b8:b9:9d:16:07:9b:b7:
         e8:4e:70:20:ac:e3:94:28:50:d2:79:27:fc:f3:99:19:42:10:
         0e:91:8f:2d:54:39:cf:fb:a2:30:6c:ad:3b:64:d6:5d:54:85:
         5e:1d:87:16:59:57:0e:5f:15:2d:63:6d:d4:bb:44:41:6a:22:
         83:5b:df:7d:2b:11:17:e2:81:76:37:53:1c:d7:1d:c6:2a:b7:
         60:db:f9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:10:35 2026 by rpki-client