Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/db743816-314d-30a5-9761-d6c850190cc5.roa
File:                     db743816-314d-30a5-9761-d6c850190cc5.roa (raw, json)
Hash identifier:          S8yLbNebENHbc+o7JOguwpZdpS6ge9jlw+KlaJfCO6M=
Subject key identifier:   51:57:CF:69:2D:EA:A3:CA:3B:9B:A1:C3:40:09:82:FE:49:3C:1A:5B
Certificate issuer:       /CN=8b973e20-42b5-497e-831b-66d353f928d7
Certificate serial:       010D0C9F4328584F2ABD2F896BBEA98F49CCBE80
Authority key identifier: 0C:A2:EB:93:3F:8C:DC:D9:88:91:5A:BD:94:65:16:32:77:02:19:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/db743816-314d-30a5-9761-d6c850190cc5.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     6341
IP address blocks:        156.76.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:2f:89:6b:be:a9:8f:49:cc:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b973e20-42b5-497e-831b-66d353f928d7
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=13cfdb5c-5248-4992-866f-ddf1c1476bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e1:9a:96:5c:78:91:9c:b8:79:5f:d4:07:a0:
                    63:40:36:c5:21:6b:ea:58:8f:84:b1:e5:62:ce:fc:
                    f6:36:45:8c:c4:b4:42:0d:e8:23:47:78:03:df:b3:
                    ca:1e:ad:2b:b8:98:af:65:0e:01:f1:3a:5a:8e:0c:
                    87:56:d4:fa:de:07:4c:da:f1:dc:ea:85:fa:95:5d:
                    c9:e7:81:41:d8:af:99:f0:47:74:d8:99:99:11:09:
                    96:1a:d0:89:bc:10:b1:59:be:e4:cc:88:f8:5b:32:
                    3e:1b:44:3c:62:58:89:28:ec:b8:52:c0:cd:ed:bf:
                    47:68:e3:e1:9b:e3:e1:e0:6d:22:a8:98:d0:b3:ac:
                    2d:4a:a0:97:86:10:48:a0:b8:55:98:41:be:d1:69:
                    be:67:19:da:f7:99:7e:91:a8:d0:20:6a:ad:2a:1e:
                    9a:54:6b:46:a1:b7:39:6f:77:6e:74:a1:57:72:30:
                    75:d7:fe:60:0a:bf:22:44:1a:b1:ff:7e:8d:93:22:
                    2d:1b:b6:f9:d3:89:d0:4e:05:fa:f7:95:09:6d:a2:
                    0a:7b:23:09:54:56:d7:b9:f8:ed:6e:33:8f:5d:4b:
                    a6:95:19:21:d7:bf:9e:2b:3b:a3:cc:6d:14:3b:55:
                    6c:65:da:9d:14:4b:8d:93:10:73:11:b5:c7:b9:57:
                    46:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:57:CF:69:2D:EA:A3:CA:3B:9B:A1:C3:40:09:82:FE:49:3C:1A:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/db743816-314d-30a5-9761-d6c850190cc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.crl

            X509v3 Authority Key Identifier:
                keyid:0C:A2:EB:93:3F:8C:DC:D9:88:91:5A:BD:94:65:16:32:77:02:19:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.76.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:3d:04:7e:46:ef:cb:27:a7:29:d5:e1:e5:e3:6d:fb:d1:b9:
         25:c4:92:05:09:7c:39:51:a3:ff:a3:35:e0:b9:4f:3b:0a:3f:
         07:19:e0:0a:28:38:d7:56:7f:67:21:15:91:e6:8b:50:51:e3:
         92:e0:2b:d7:97:d0:5b:65:2e:22:d9:93:da:f9:cd:8e:79:8a:
         02:58:ef:47:3f:f0:1a:d3:03:7d:7d:50:13:1f:76:a7:90:b9:
         5c:43:64:35:96:f0:2e:01:32:44:cf:fb:8c:04:fe:7a:35:0e:
         16:c8:b9:42:45:e0:00:63:99:b2:e2:78:31:c3:2e:60:a0:2e:
         f8:b5:ba:85:ac:03:bc:1f:44:44:11:b8:43:21:45:72:2d:40:
         eb:21:f3:ae:65:a8:dc:8d:c5:ee:74:40:68:8f:90:f0:37:f5:
         58:61:08:cf:21:cd:ad:f3:9f:7a:9f:d0:68:37:a6:b7:4a:34:
         0a:df:03:3f:af:ce:12:3a:dd:40:45:16:f7:18:f6:e8:c8:e0:
         8a:a3:4d:fb:2b:06:99:3f:b2:1f:f5:17:1a:6e:19:55:7f:cb:
         94:4f:8d:66:3d:ed:85:fa:d9:9e:99:8c:a4:d2:c6:19:99:84:
         53:23:a7:6b:4a:93:cb:c3:b2:d5:02:29:ff:f0:58:c6:a2:bd:
         d1:95:a3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:54:53 2026 by rpki-client