Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bfff2a34-8a85-3854-ae2e-da7d1c515173.roa
File:                     bfff2a34-8a85-3854-ae2e-da7d1c515173.roa (raw, json)
Hash identifier:          HCk1M/w320NpTqF+t0Eg/CYlGISLP6Vw//OYzaLtGU8=
Subject key identifier:   14:01:A3:64:73:FB:61:59:64:E9:B6:B7:F7:43:5C:FA:F7:37:8E:E1
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D1B1A0970B525F52654905380
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bfff2a34-8a85-3854-ae2e-da7d1c515173.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     20115
IP address blocks:        76.58.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:09:70:b5:25:f5:26:54:90:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=10582344-e3d0-49a2-8ed0-5b0943e1edd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e9:95:56:07:08:ff:ed:aa:08:67:40:7b:e1:
                    24:29:09:76:d0:a1:e6:6a:e1:0b:7e:95:8b:70:35:
                    c8:15:e3:c2:23:1e:b3:1d:42:4b:56:e4:21:da:1d:
                    f1:bf:17:4f:a5:b4:10:c4:eb:4b:10:08:af:c2:73:
                    cf:6a:f4:8b:cd:f7:46:96:da:ff:16:c8:a6:cc:b7:
                    4b:2c:3f:78:81:dc:88:0d:9a:88:49:d3:f6:7c:82:
                    2e:5d:76:8e:65:9c:7e:d5:5f:b6:70:9a:b6:ae:81:
                    5a:57:32:90:70:2e:8a:8f:37:0e:18:ab:d4:2b:61:
                    16:af:c3:14:30:6b:7a:1c:48:cf:2b:58:4d:87:11:
                    9a:3a:70:3b:7f:6a:a0:d0:33:39:34:27:4e:31:cf:
                    d8:c9:5b:70:b1:72:fc:bd:5f:31:5b:d7:33:f8:28:
                    a1:05:1a:d3:1d:b4:b2:c3:33:9d:fd:4c:85:54:44:
                    7b:f2:5b:e9:9a:5b:c3:81:28:a5:39:c5:22:4b:36:
                    be:26:b7:25:39:0d:14:62:62:80:46:cd:3c:f2:04:
                    c7:be:49:d5:4a:e0:4b:e3:3a:0d:c1:06:ce:aa:ca:
                    5b:f9:e1:2a:63:fd:26:9d:08:e7:ff:93:8a:94:dd:
                    51:6d:b3:50:de:0c:11:9d:53:a8:90:f4:da:98:2e:
                    31:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:01:A3:64:73:FB:61:59:64:E9:B6:B7:F7:43:5C:FA:F7:37:8E:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bfff2a34-8a85-3854-ae2e-da7d1c515173.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.58.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:8e:12:51:07:9e:d7:7a:c7:7f:4b:9e:17:d1:75:96:8c:37:
         d3:68:dc:ac:20:76:18:18:47:88:d6:f0:09:f7:30:9b:7e:5c:
         d3:c9:22:10:a0:67:5e:3b:05:fc:eb:c5:8c:d7:ca:a7:66:43:
         c6:ee:e8:de:ca:55:d8:91:5f:93:fc:4e:6e:b9:a5:ef:c1:3a:
         cb:9f:9e:9c:1d:df:14:5f:c6:fd:a1:1a:e5:df:bc:a4:a8:95:
         65:5b:cb:22:1c:d3:56:69:26:c1:f2:2b:d7:e5:03:c6:9d:e8:
         9a:d1:c4:1d:cc:20:2d:2c:9d:67:56:57:0f:da:a4:ed:d2:7a:
         bd:61:71:5d:f9:c3:1d:c0:d1:c1:fb:56:33:73:c3:be:7b:9f:
         c8:e6:d5:d1:f1:a7:f6:22:53:2b:1d:d2:1d:a1:aa:d0:c8:13:
         35:ef:3e:6a:d3:db:38:25:4c:67:ca:e6:63:0c:94:56:58:ed:
         54:fc:31:a0:1d:25:24:2d:d2:69:eb:1a:1a:45:bb:f1:3c:c5:
         90:b8:c5:fd:c3:8c:9f:01:02:b1:9d:75:a3:ca:79:83:d4:be:
         8b:61:14:97:a3:c4:f0:e7:2c:76:cc:dd:08:6b:c0:4d:de:9c:
         26:50:1b:5e:15:d2:0f:52:1d:5a:16:2e:d3:4b:30:cc:18:a7:
         5e:b6:3d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:43:03 2026 by rpki-client