Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3669ca0e-7d09-308b-84b9-199641eeb6c5.roa
File:                     3669ca0e-7d09-308b-84b9-199641eeb6c5.roa (raw, json)
Hash identifier:          Yr3Io57kl92KFW9yZGTQeGjRKClRJQZczC+w9YmL3VI=
Subject key identifier:   DB:F1:B7:CF:E5:13:7E:5D:38:5B:B1:71:98:2A:E6:75:B7:00:1E:5D
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F4989564EA32015B58E817400
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3669ca0e-7d09-308b-84b9-199641eeb6c5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        76.10.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:56:4e:a3:20:15:b5:8e:81:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0f354e9f-2939-4a18-9283-22e12e80fed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e2:bf:5f:28:a3:d4:14:2a:2f:b1:d5:5c:42:
                    15:e3:b4:1a:fa:61:43:a5:4f:56:4d:36:25:01:43:
                    6a:37:36:a7:1b:c5:92:ca:ff:f1:5f:8f:51:20:85:
                    4b:7d:3b:92:5e:1c:02:e3:73:36:78:8f:15:68:81:
                    a9:b0:bb:37:a0:db:6d:2e:80:38:c5:58:09:39:e4:
                    6b:e3:f7:96:e9:7a:5b:7d:47:ce:a8:ee:1b:d3:aa:
                    ab:af:da:76:d0:c7:ba:48:54:7e:50:b2:b2:ab:d6:
                    70:26:ea:e2:64:ad:c6:d0:48:a6:77:92:9a:9a:ce:
                    79:b5:b5:23:ff:20:d7:76:ff:53:f4:22:98:b4:ae:
                    5c:ca:a8:83:65:b7:17:1d:c2:70:bd:6c:36:7a:99:
                    44:c5:c8:bd:62:26:6e:18:0b:ad:5b:30:d2:b1:e8:
                    dd:d8:76:de:e1:21:1c:46:e6:3f:50:29:b6:a6:f3:
                    ab:9c:ca:67:36:83:13:79:f6:15:4f:40:3e:f3:1f:
                    f0:1b:89:df:aa:a6:f1:35:d0:d3:8a:21:09:5e:63:
                    96:c9:53:20:a1:00:cb:50:5c:75:07:05:c4:9e:64:
                    45:33:80:1e:6e:b6:4d:59:c5:e9:1f:ac:e6:04:42:
                    ed:a5:96:02:39:eb:2b:99:fd:88:3b:49:c3:94:68:
                    3a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F1:B7:CF:E5:13:7E:5D:38:5B:B1:71:98:2A:E6:75:B7:00:1E:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3669ca0e-7d09-308b-84b9-199641eeb6c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.10.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:93:a8:39:93:77:06:fb:e0:87:c9:bc:4c:79:b1:40:d2:a3:
         f5:91:5b:4a:1b:f0:4f:3f:f0:84:e9:d0:b8:25:a3:97:e9:78:
         a1:db:6b:98:fc:20:be:db:d5:1d:a7:5e:1c:22:4e:c9:36:6c:
         cf:6b:99:e0:ed:83:ab:71:ed:60:62:ff:9b:7a:18:3a:b2:d6:
         2a:ea:17:9e:b3:01:ec:a7:4e:06:0e:86:a4:de:7d:ec:40:14:
         80:36:ca:09:44:32:53:02:f3:a4:03:f9:49:4e:39:cb:87:56:
         9a:22:2b:7a:b3:72:9f:8b:40:0b:58:27:98:e5:b8:3e:46:6b:
         00:a5:c1:3f:dc:76:be:93:cc:82:9b:a2:a9:6b:23:2c:67:2b:
         de:62:15:f2:56:47:5c:e1:dc:f4:bb:32:ba:79:32:8d:01:29:
         50:dd:cb:35:45:4b:13:9f:90:41:5f:a5:49:3f:39:41:7d:21:
         f8:6d:3f:bb:88:77:ae:aa:72:83:3f:be:50:f6:ec:98:1b:57:
         b0:31:e9:5d:bb:4a:98:4c:45:e8:2b:39:f3:a2:5f:b4:03:0e:
         b9:55:39:e5:eb:d0:ca:8c:71:2b:72:9c:b0:ce:46:44:12:bb:
         77:02:d6:14:f8:83:f2:33:5a:77:e1:6d:1d:e9:fe:5f:cb:89:
         25:43:fd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:22:15 2026 by rpki-client