Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3e9b275f-91c7-3669-bf4a-d209d3fd53ae.roa
File:                     3e9b275f-91c7-3669-bf4a-d209d3fd53ae.roa (raw, json)
Hash identifier:          VYmB08xksPXRHIxpuxAyuFEwjTeO6rzdmSYqn4Duj54=
Subject key identifier:   04:76:F4:8A:CE:34:F2:DC:91:56:4E:F7:FC:93:1C:F6:ED:4B:E1:93
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CA889CB7F3C1D7D1F59400
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3e9b275f-91c7-3669-bf4a-d209d3fd53ae.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     11955
IP address blocks:        76.89.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:88:9c:b7:f3:c1:d7:d1:f5:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=a0133ee4-e93e-478b-8cb9-fd0212481843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:bc:64:ae:e7:23:9c:25:e9:08:90:49:a5:
                    8a:64:63:c4:c5:76:80:ac:27:c0:8a:e7:fe:80:ef:
                    e8:ad:cb:c7:82:68:9e:37:5a:61:0f:5c:d6:33:c6:
                    e5:b8:32:d3:25:06:da:96:cc:65:4b:f5:f7:71:8d:
                    87:0e:07:18:04:38:bf:dc:de:d0:42:10:0d:78:fe:
                    d8:ce:68:44:78:80:a7:40:42:eb:20:86:1b:f8:70:
                    db:01:a5:3a:de:9c:2b:b5:1d:6e:33:82:b7:c3:a5:
                    bd:ac:94:2b:17:ed:38:b8:0d:fd:98:fe:ce:53:c9:
                    98:54:cb:2b:79:92:e0:da:ad:74:7f:a5:25:95:5e:
                    60:a5:39:d2:66:58:42:4b:13:03:76:30:3d:02:f4:
                    72:96:cd:da:85:9a:d8:90:10:fc:46:0e:6f:02:5a:
                    cb:6f:3b:9b:97:78:19:f6:e0:88:a9:d3:44:15:9f:
                    94:7a:97:c9:de:cd:e9:78:6d:87:29:3e:be:7b:7c:
                    e1:4b:02:bd:68:fa:07:65:d7:dc:a6:76:d5:b6:58:
                    7a:c2:62:39:d1:68:8b:3e:8a:02:b4:f8:c9:27:76:
                    9a:5b:d6:85:1d:a2:aa:8a:be:c9:67:1b:ea:9b:39:
                    ab:2f:75:c6:89:b2:de:03:58:ce:e0:ee:f5:71:99:
                    d3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:76:F4:8A:CE:34:F2:DC:91:56:4E:F7:FC:93:1C:F6:ED:4B:E1:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3e9b275f-91c7-3669-bf4a-d209d3fd53ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.89.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:52:99:e1:8a:1f:e0:54:e3:cf:5e:65:4c:85:e6:84:90:5b:
         34:c4:a1:99:cb:d3:12:54:28:a5:ab:61:df:52:b9:e1:49:0f:
         ae:44:97:e2:70:26:11:87:7c:4f:94:02:44:45:a3:f3:62:e3:
         da:7c:02:9e:89:bb:b2:b8:12:6e:be:bc:88:9c:e6:47:8d:99:
         b4:3f:21:fb:3d:ed:44:04:c1:66:f9:9c:b7:81:fa:30:aa:7f:
         01:90:ba:da:59:a2:16:fa:54:1f:29:a2:9e:c1:33:1b:06:52:
         ef:15:bb:f5:52:03:fa:7a:18:74:aa:f6:7b:b3:2c:6f:66:a7:
         dd:cb:33:2a:07:b9:79:9a:df:1b:35:5e:56:fe:86:83:2c:47:
         bc:87:18:7c:8f:76:fb:c2:80:f9:b5:f7:08:32:76:ac:5d:35:
         a0:9a:70:6c:94:09:62:cd:50:b6:35:9e:88:54:04:fe:10:47:
         18:7d:32:8e:0b:2c:11:79:38:5a:bc:79:55:95:01:fc:45:ef:
         be:13:3c:5b:8d:8b:04:7e:d5:72:c7:6c:a8:2b:0a:df:50:ab:
         38:8e:04:74:77:0f:46:54:df:a7:0d:6d:51:91:aa:3b:e6:42:
         c9:87:b6:a2:e0:fa:4c:19:a3:42:b7:a8:12:10:4d:1e:35:2f:
         42:0e:98:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:10:30 2026 by rpki-client