Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/015b5d4f-9c30-41d6-b021-48574f07c8a6/5da3f23e-bca3-326d-86bd-e226c9b5db87.roa
File:                     5da3f23e-bca3-326d-86bd-e226c9b5db87.roa (raw, json)
Hash identifier:          2sDnGFbCR487XqiXdEi2zEZFWV3Hx1qPPlUVXY1KgTA=
Subject key identifier:   0B:CF:27:F6:4B:A6:94:6B:6D:63:4F:E0:4C:30:77:3C:80:96:B3:58
Certificate issuer:       /CN=015b5d4f-9c30-41d6-b021-48574f07c8a6
Certificate serial:       010D0C9F4328584E6F3A49FF6CA1750710339C20
Authority key identifier: 6A:1A:DD:34:41:7D:21:A7:E0:13:47:2C:4B:1C:ED:10:68:46:0E:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/015b5d4f-9c30-41d6-b021-48574f07c8a6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/015b5d4f-9c30-41d6-b021-48574f07c8a6/5da3f23e-bca3-326d-86bd-e226c9b5db87.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     398962
IP address blocks:        76.76.2.0/24 maxlen: 24
                          76.76.10.0/24 maxlen: 24
                          147.185.34.0/24 maxlen: 24
                          206.253.88.0/22 maxlen: 22
                          2606:1a40::/48 maxlen: 48
                          2606:1a40:1::/48 maxlen: 48
                          2606:1a40:2::/48 maxlen: 48
                          2606:1a40:3::/48 maxlen: 48
                          2606:1a40:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/015b5d4f-9c30-41d6-b021-48574f07c8a6/015b5d4f-9c30-41d6-b021-48574f07c8a6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/015b5d4f-9c30-41d6-b021-48574f07c8a6/015b5d4f-9c30-41d6-b021-48574f07c8a6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/015b5d4f-9c30-41d6-b021-48574f07c8a6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:49:ff:6c:a1:75:07:10:33:9c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=015b5d4f-9c30-41d6-b021-48574f07c8a6
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=5e723c66-5dae-47ce-9288-2dfda2109d73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b1:99:a6:26:bd:15:e1:a4:05:a3:9d:b1:a2:
                    82:b1:4a:5c:1f:0e:5f:9f:0a:e5:a4:64:71:32:3f:
                    ad:f0:d0:eb:eb:58:b9:f6:8c:92:2b:7a:8f:72:78:
                    56:25:55:b1:2d:31:45:54:d5:24:27:20:24:bb:53:
                    99:f1:37:0f:e2:45:2b:54:65:16:6b:43:eb:67:29:
                    c4:c5:33:b8:8c:1d:d4:72:10:76:a7:62:77:77:7d:
                    38:90:be:73:96:9e:ad:c6:4c:2f:3a:89:38:54:e8:
                    0f:13:c7:76:bc:90:83:a2:56:e8:5b:e7:a3:33:0d:
                    14:fd:79:63:4f:bb:c8:41:be:5f:eb:dc:ac:bf:e5:
                    7b:c0:eb:24:bf:41:ac:96:de:12:41:f5:e1:f4:39:
                    7c:58:4c:5d:57:8e:95:9a:c5:d7:79:6b:17:a3:a0:
                    8e:c9:35:c8:c3:98:27:d3:e1:b2:d1:ab:8f:66:fd:
                    05:92:e2:a0:39:7a:38:fc:d6:14:e7:76:a1:e3:87:
                    7c:81:97:c5:3b:59:84:5b:95:f7:15:22:d2:0f:0a:
                    2c:d3:2d:96:ed:c6:36:bc:19:5a:a8:53:6d:5d:ab:
                    67:7d:3e:1c:4d:1a:4a:2c:1f:30:48:45:6d:78:d4:
                    74:e1:b9:0e:65:5d:7c:16:5d:1e:e3:b8:23:1a:3b:
                    c4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CF:27:F6:4B:A6:94:6B:6D:63:4F:E0:4C:30:77:3C:80:96:B3:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/015b5d4f-9c30-41d6-b021-48574f07c8a6/5da3f23e-bca3-326d-86bd-e226c9b5db87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/015b5d4f-9c30-41d6-b021-48574f07c8a6/015b5d4f-9c30-41d6-b021-48574f07c8a6.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1A:DD:34:41:7D:21:A7:E0:13:47:2C:4B:1C:ED:10:68:46:0E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/015b5d4f-9c30-41d6-b021-48574f07c8a6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.76.2.0/24
                  76.76.10.0/24
                  147.185.34.0/24
                  206.253.88.0/22
                IPv6:
                  2606:1a40::-2606:1a40:4:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d8:ad:53:48:83:d8:76:2d:4a:d9:f4:d7:d6:8e:6c:95:db:
         4c:fe:7b:44:ed:30:13:3b:69:a5:57:43:a9:b2:47:78:5a:a5:
         e5:be:8b:78:19:56:ee:69:0b:29:da:63:72:88:ac:9b:02:aa:
         18:9d:e1:55:86:ea:1d:c9:31:b8:ca:18:37:6a:99:1a:ff:91:
         19:65:6d:6a:a3:66:d7:17:69:35:2c:e3:d6:15:81:8b:51:dd:
         0f:68:08:3a:fd:34:8e:2a:04:e8:d3:b8:b1:7e:31:b4:6f:05:
         84:35:d3:a3:04:1f:54:f9:2a:1d:9d:8e:e4:e5:fc:51:fd:df:
         85:fa:88:30:7d:69:ef:0e:de:53:9d:26:1d:6e:80:3c:17:38:
         20:2e:da:64:b4:90:93:cb:91:c6:cf:3c:52:8c:59:ae:30:8a:
         21:b7:d6:fd:c5:72:4e:17:e4:16:69:ac:74:05:dd:24:25:79:
         97:4f:f9:a8:3e:3f:c2:e8:f3:43:85:15:7d:7d:9a:b9:4b:3f:
         dc:91:95:bc:c8:7e:1b:33:94:70:f2:d2:a1:ee:dd:e6:52:7f:
         48:03:68:23:6f:43:5c:d3:cb:ef:e1:71:5e:6a:13:c1:76:29:
         2d:60:97:65:8d:92:56:2b:8b:9e:b9:11:1e:29:42:f0:68:cf:
         eb:c4:42:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:04:00 2026 by rpki-client