Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/aa052caa-cb10-3fe7-a0b1-af80d6e5c047.roa
File:                     aa052caa-cb10-3fe7-a0b1-af80d6e5c047.roa (raw, json)
Hash identifier:          5qadYZDf9mOvJpDCjry5OSsNh1zV1xNg5v0SUNM7diY=
Subject key identifier:   D0:32:51:6C:83:73:6C:31:44:BC:7F:3C:43:D9:0E:C0:08:31:21:0D
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584DC29AF1722178D88143A96F80
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/aa052caa-cb10-3fe7-a0b1-af80d6e5c047.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     12083
IP address blocks:        69.14.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:f1:72:21:78:d8:81:43:a9:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=42e67813-1326-4928-9a94-b9f2f23bd5f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:47:6d:28:be:8b:df:b9:7e:51:ab:ed:5b:9d:
                    a5:45:3e:bd:82:30:e3:77:f1:cd:84:6b:8c:6e:10:
                    dd:2f:3d:59:0a:53:6d:3d:02:e8:b2:9c:79:a7:4b:
                    52:13:b8:c4:dc:54:5b:69:05:5c:22:64:cd:2a:1d:
                    7c:57:7f:5c:8c:98:9e:49:49:99:36:a3:7c:d4:33:
                    e7:8e:9c:f0:a3:35:62:25:3d:6d:9d:31:f8:a1:2e:
                    54:d3:67:b0:60:4c:c6:6e:ac:04:64:68:3d:2e:88:
                    94:44:5a:8d:07:0f:5b:08:a5:a0:52:62:69:e9:43:
                    d5:23:8b:7a:ff:6c:c5:2a:f2:05:6c:45:bf:d6:bb:
                    5a:99:13:0d:72:21:0e:62:47:a1:d5:64:d4:88:19:
                    8b:d9:b2:91:3d:ce:05:d3:57:74:28:84:75:ab:9d:
                    e6:c6:72:eb:75:eb:c8:fa:e5:97:82:50:19:e2:b9:
                    1a:42:c2:ec:f8:55:72:d9:d9:51:91:33:75:91:0a:
                    ac:1d:0a:be:14:c0:ca:5a:35:3b:99:e1:17:49:05:
                    c4:ee:74:b9:d7:8d:aa:21:ac:69:e4:2a:c7:b4:07:
                    48:f2:4b:0a:ea:7b:87:d6:d4:de:8d:9c:a0:1d:eb:
                    e8:e8:54:dd:f4:70:c9:74:88:77:3c:68:92:12:40:
                    d1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:32:51:6C:83:73:6C:31:44:BC:7F:3C:43:D9:0E:C0:08:31:21:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/aa052caa-cb10-3fe7-a0b1-af80d6e5c047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.14.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:14:6e:bb:c0:18:dc:b2:01:0e:63:bb:5f:51:08:97:57:99:
         d3:b8:e5:83:ce:b0:94:96:9a:ed:90:e6:17:61:b1:f0:1f:0e:
         ef:33:f1:9f:62:ef:40:44:3d:d0:e7:f5:96:0a:00:0b:2a:fc:
         54:07:56:40:1c:74:c1:9c:9a:aa:1e:42:4c:68:f8:ab:d7:26:
         be:60:d2:b8:5c:f4:2c:3a:1d:a8:aa:a9:53:21:6a:31:b3:6f:
         cb:00:6f:e9:8c:b6:e7:56:69:16:b9:ab:3a:b8:b6:1a:5e:f6:
         80:8d:1f:1c:d8:e4:2e:59:d5:24:1c:a6:98:1b:b8:f4:09:e4:
         be:b2:03:a0:13:21:c6:12:a9:eb:8f:75:44:d7:7d:3e:6a:05:
         2a:b8:76:2f:6c:c6:fa:c1:ae:34:11:1b:2a:f1:88:00:3a:90:
         6d:9d:24:7f:a3:0d:17:48:ee:da:11:ef:a2:d5:6c:4b:e5:16:
         3f:e1:e1:6e:21:e2:89:10:ab:58:c0:15:74:90:24:38:d8:40:
         80:60:ce:2d:4e:bf:00:5f:fa:5c:4e:bc:c9:22:91:e1:f4:e7:
         45:91:ac:26:a3:b0:51:fd:45:d5:e2:2b:2e:4a:05:46:43:f5:
         88:1e:ba:2e:1e:e6:cd:08:03:17:e6:a4:28:de:96:44:3a:34:
         72:a5:f2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:31:10 2026 by rpki-client