Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ff6512e2-8768-347b-b6de-54dce8a114a8.roa
File:                     ff6512e2-8768-347b-b6de-54dce8a114a8.roa (raw, json)
Hash identifier:          j5uRUxhqWBPlOm+sSQDDAGlEpqn1Fd69bCF3QMH5dnk=
Subject key identifier:   43:AE:68:C8:A7:50:96:3E:3F:3D:B9:F2:32:DE:85:EE:F6:4D:11:16
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584F454290E6B3E17F143C48EEC0
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ff6512e2-8768-347b-b6de-54dce8a114a8.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     12083
IP address blocks:        208.74.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:90:e6:b3:e1:7f:14:3c:48:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=08f9774a-6531-4aab-a50a-df22ae60f74f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:41:a8:73:75:18:cd:0f:b5:42:d2:42:60:b0:
                    8f:5b:ff:df:38:96:e3:59:61:fe:6c:3d:8c:9b:6f:
                    c9:94:e3:58:d4:e4:3d:7d:59:7c:f2:93:fb:57:c2:
                    d7:f0:c9:80:72:cd:c4:8a:ce:01:7f:66:10:9c:63:
                    09:2d:bb:02:46:c5:87:50:50:61:79:27:4c:13:7a:
                    8f:e6:63:22:a5:bb:82:9a:7d:9c:57:f0:76:84:eb:
                    de:e7:14:cb:0a:05:87:0d:c5:5c:70:f5:c6:3f:1f:
                    34:26:02:8f:57:06:85:de:ea:98:82:50:00:35:fd:
                    3c:8c:ba:c6:72:d1:0d:ff:f3:00:5b:63:4a:e7:da:
                    1c:d1:49:6d:bd:13:b0:4c:47:3d:31:0c:30:6a:4d:
                    ca:7f:f6:48:b7:4e:55:be:b8:6d:4b:5c:f8:b7:fe:
                    91:0f:e3:66:10:65:86:3a:92:7d:11:64:ce:a8:ce:
                    05:e2:bc:09:47:a7:ea:9a:5f:44:8d:39:53:30:b9:
                    10:eb:31:72:e8:ec:06:dc:e4:ad:0d:99:90:07:09:
                    68:76:21:85:23:ae:b9:bf:8c:f7:32:4d:81:eb:5c:
                    34:64:3b:9b:26:b4:c6:57:c4:2f:5e:73:b4:cc:02:
                    69:b8:89:9f:74:da:d6:a2:b2:fe:f5:b5:3d:76:d1:
                    67:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AE:68:C8:A7:50:96:3E:3F:3D:B9:F2:32:DE:85:EE:F6:4D:11:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ff6512e2-8768-347b-b6de-54dce8a114a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.74.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:96:18:92:12:7f:78:d3:29:4e:f0:d0:91:b6:31:e2:68:f1:
         8f:7a:4d:55:cd:cc:a5:75:da:58:e8:c0:94:b0:9c:18:b2:5c:
         67:6b:30:5a:e8:f5:53:56:31:fc:d9:dc:29:61:f4:c4:35:13:
         23:ed:28:d7:41:00:43:ee:41:71:d8:1d:c3:bf:db:f3:6a:9e:
         07:d5:c4:5f:0c:ee:9b:93:6e:ed:4b:07:79:ce:98:1c:c1:f8:
         68:89:18:9c:58:24:e9:e4:0b:06:89:78:c6:8d:75:5b:24:44:
         4e:40:d5:ca:86:89:18:43:84:a8:83:fb:f6:e9:11:05:87:c6:
         db:07:29:d6:df:07:b8:d3:f7:90:a2:0d:38:8c:85:ba:44:0c:
         0b:00:a8:20:2d:1e:72:04:a3:38:97:62:f2:24:8c:dc:76:38:
         c2:6e:d1:17:42:ba:94:b8:71:07:22:ec:ff:de:24:d8:58:fb:
         5a:23:ed:c9:16:79:8c:7c:f8:c6:ac:86:56:bc:c9:8f:4c:03:
         14:c7:11:6c:67:c0:89:f5:b9:7b:06:d5:e7:52:5f:a9:20:5c:
         ff:a8:8f:cb:a9:12:19:fd:fc:05:3f:3b:0c:32:5a:13:de:05:
         3e:11:f6:c1:6b:19:f9:54:90:2e:42:71:2c:c8:60:aa:73:65:
         b1:88:bd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:32:59 2026 by rpki-client