Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/8cfcb8e1-8f43-3893-9d33-144e0e7e607c.roa
File:                     8cfcb8e1-8f43-3893-9d33-144e0e7e607c.roa (raw, json)
Hash identifier:          R9cXMZmct+3AAJFnVN+a7rpGxiHYqPy273Xwk6OfYPM=
Subject key identifier:   29:7B:3A:02:B3:2E:BF:C6:60:CF:7C:E0:AA:93:D6:87:9F:0A:E0:A3
Certificate issuer:       /CN=329c727b-a867-426a-ad3d-167aed3107dd
Certificate serial:       010D0C9F4328584E736A20F9F35F48F81CEAA080
Authority key identifier: 3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/8cfcb8e1-8f43-3893-9d33-144e0e7e607c.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     6327
IP address blocks:        24.76.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:20:f9:f3:5f:48:f8:1c:ea:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329c727b-a867-426a-ad3d-167aed3107dd
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=04186cf3-715e-452f-9fe1-da59ef3eb5a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:49:02:aa:37:30:fd:25:7d:58:2e:9f:10:40:
                    a7:04:a1:27:10:f7:2d:6e:ee:1a:3b:2a:f6:f8:d6:
                    c5:39:f6:56:4d:ae:9e:64:4d:de:a0:79:d5:7c:fe:
                    67:5c:f6:31:7e:c5:ce:cf:e4:37:08:d1:f9:21:86:
                    ca:c1:85:5a:d1:83:cb:e0:84:8b:9d:95:49:da:5f:
                    5f:1a:fb:9f:51:60:b9:cc:2e:2c:39:97:2c:8a:23:
                    77:c3:16:6b:47:06:3c:6d:9b:ee:ec:55:1f:c5:6d:
                    fa:7c:ad:96:c6:2b:e4:83:7c:77:58:05:a3:e5:bd:
                    a4:d0:69:dd:c0:c6:29:f6:bf:59:86:48:95:c1:ca:
                    83:6a:56:f6:65:cc:05:6d:ca:94:e3:b4:f8:20:fd:
                    b9:39:e2:51:e8:2b:e8:b1:41:7e:37:38:a8:0c:64:
                    80:ea:aa:35:3e:4d:ea:c4:4d:1f:35:66:18:8f:cf:
                    56:b2:5f:eb:20:ed:5c:00:de:59:15:10:2a:ac:d5:
                    5d:22:2b:6a:c2:eb:04:3b:1a:4c:89:ea:70:c8:bb:
                    9c:ce:fa:f0:91:6b:d2:b3:1d:0f:30:22:d3:15:4b:
                    40:67:cb:36:c0:84:b7:07:9e:f1:65:03:1b:af:38:
                    17:e3:5e:0b:f2:cb:c5:3d:48:d1:db:f3:f3:f5:1c:
                    af:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7B:3A:02:B3:2E:BF:C6:60:CF:7C:E0:AA:93:D6:87:9F:0A:E0:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/8cfcb8e1-8f43-3893-9d33-144e0e7e607c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl

            X509v3 Authority Key Identifier:
                keyid:3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.76.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:1f:84:bb:f7:5f:18:a5:8a:04:3d:61:67:5e:31:6a:90:a0:
         f3:b9:52:74:a3:91:f0:f1:50:6b:30:bd:83:2e:37:cd:1e:fa:
         e8:9e:03:93:ca:68:02:41:78:81:4b:18:ac:55:3e:d8:3f:43:
         fa:00:2b:83:e2:d7:33:55:64:f8:c7:83:f8:b7:60:e8:89:bd:
         80:0c:b8:e8:d3:a4:d3:b5:25:91:d2:00:f1:57:fa:51:6b:bd:
         91:a3:2b:f6:66:9e:10:14:a2:e1:d5:2f:ed:7a:32:60:ed:1b:
         60:90:a9:3d:f1:d0:12:e4:55:12:4a:6f:dd:2c:ca:d2:f9:3f:
         c9:eb:15:0b:f1:0f:b1:09:6d:f3:2e:1e:86:cb:87:09:64:e5:
         1d:37:6a:4d:7b:3d:ac:22:6e:12:f6:71:39:b8:65:8e:4d:bb:
         f7:23:8c:ed:9b:b9:d3:ed:c3:b0:c3:aa:bb:ad:77:6d:ef:78:
         25:3c:15:98:76:0e:15:31:5c:a6:92:22:0e:c0:5b:8c:4e:e5:
         aa:80:aa:e5:3c:fa:2c:44:08:5f:02:04:2e:bf:49:7e:1e:fc:
         74:63:e4:b7:df:50:f3:4f:42:2d:b8:3a:ae:45:81:84:bd:50:
         10:cf:ba:f7:ce:8e:ec:48:3e:d6:b8:16:cf:33:07:cf:3b:75:
         a4:a3:f7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:36:22 2026 by rpki-client