Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/91559efd-f2e3-3513-ba74-ecbe184e9d1e.roa
File:                     91559efd-f2e3-3513-ba74-ecbe184e9d1e.roa (raw, json)
Hash identifier:          QGA08ourbj04Ivqwjf/DbIt1LdmAKkDwfq3KeEGzUYk=
Subject key identifier:   55:66:12:B0:BA:BD:C7:C5:23:16:58:BE:CA:8F:87:2A:B6:FE:46:C4
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584F454290B5EE0763D03AF8E100
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/91559efd-f2e3-3513-ba74-ecbe184e9d1e.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     12083
IP address blocks:        207.98.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:90:b5:ee:07:63:d0:3a:f8:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=89fca1c0-9abd-4440-b50e-2a68bb1d5ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:62:9f:ef:3d:39:05:e7:a5:18:51:01:f2:46:
                    1b:7c:80:20:d4:1b:49:43:11:71:33:9f:dc:7b:b7:
                    0c:8b:ea:8e:ae:5c:2b:b0:f5:64:40:9c:a6:71:3c:
                    20:7b:72:ff:4b:eb:2d:80:46:8c:0f:97:ed:ff:e2:
                    b3:f1:fe:8d:93:ec:41:84:78:38:a8:7c:98:6c:22:
                    b3:62:92:93:76:57:48:44:16:a9:fd:f7:e3:6d:d9:
                    69:ea:57:1d:24:ad:15:80:10:7c:30:6e:b0:f6:af:
                    fa:c0:62:ad:55:e7:85:60:ab:6f:3a:43:b5:b7:53:
                    66:3c:98:79:cf:56:a7:b5:e5:7b:24:fc:86:fb:1f:
                    37:af:5e:b6:24:c1:cd:28:42:94:5a:c5:a8:19:75:
                    06:fd:fc:fc:57:cc:24:a7:c5:50:0a:47:1e:b8:86:
                    dc:41:1d:8a:22:7f:69:be:0b:1d:1d:3d:28:f5:82:
                    4b:a4:11:06:00:b5:01:90:30:fb:c3:72:d7:3e:ad:
                    ab:0e:07:dc:3a:34:a2:32:9f:8d:2f:a3:9e:1f:cd:
                    7a:2a:5a:ce:96:4e:73:2d:7a:b2:ab:54:e5:ef:ab:
                    c8:aa:25:aa:93:5a:3b:d0:06:b9:b9:cc:5a:20:f3:
                    75:5c:e9:dc:8b:5c:cd:6e:4a:5e:96:e4:39:33:61:
                    68:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:66:12:B0:BA:BD:C7:C5:23:16:58:BE:CA:8F:87:2A:B6:FE:46:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/91559efd-f2e3-3513-ba74-ecbe184e9d1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.98.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:26:c0:56:f8:83:a9:a9:2f:ba:42:8d:70:14:97:93:83:c0:
         45:fb:f8:c3:f7:de:af:78:b0:fb:7d:bd:29:cd:4a:f5:18:46:
         9c:77:20:93:e2:7e:75:28:ed:82:f3:4e:03:1f:e5:07:c5:7c:
         79:05:bd:48:70:b2:ed:a1:fa:f9:15:8d:6c:41:ae:4d:11:a7:
         ae:81:db:e8:d9:2b:f1:14:19:53:3f:54:f5:5f:43:3e:40:b5:
         fc:01:d3:8e:da:91:f8:dd:ad:85:35:f8:34:a0:41:1d:53:32:
         c4:f3:43:b7:96:de:b3:c4:a5:95:95:d8:aa:24:de:1a:fe:c5:
         7d:d3:5b:fb:a3:b9:56:9b:97:c9:6a:bf:61:31:93:a4:32:a6:
         d6:f3:62:70:22:5f:b2:6d:45:58:3b:2f:7a:d8:fb:8b:6f:85:
         2d:6c:49:47:ca:43:5d:e8:e1:e2:77:82:63:b5:a5:e1:dd:69:
         45:cc:d8:a4:87:01:da:9e:56:48:c8:5a:bd:22:ea:6a:04:5e:
         94:2f:79:79:5e:5c:35:d3:8a:32:26:93:45:92:32:17:78:21:
         cc:db:7d:00:e6:31:65:fb:bc:c3:77:5b:78:91:08:1c:cf:bd:
         61:39:f5:34:44:2a:dd:01:32:1a:29:ff:9e:1b:9b:53:86:f7:
         f8:a3:6e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:59:07 2026 by rpki-client