Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/f42044dc-4bba-3889-9d93-7be101a8b14b.roa
File:                     f42044dc-4bba-3889-9d93-7be101a8b14b.roa (raw, json)
Hash identifier:          kqPCMWN+c9d04GTBzSIxfUEbu9449oee8SZAkUhL4dI=
Subject key identifier:   3E:0E:13:32:4A:43:8F:CB:A0:7F:0E:D0:3C:EF:A3:3E:5C:D1:FB:7C
Certificate issuer:       /CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
Certificate serial:       010D0C9F4328584E9A7FCFF5A65F5E4BC695E800
Authority key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/f42044dc-4bba-3889-9d93-7be101a8b14b.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     400928
IP address blocks:        76.164.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:cf:f5:a6:5f:5e:4b:c6:95:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=011fda09-f354-4146-a398-5d4786647962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f7:16:0b:01:72:ba:29:16:02:a7:76:07:8a:
                    29:fc:e2:3d:22:84:c6:89:95:d4:38:1c:b3:e9:0f:
                    38:5e:f4:dc:b8:98:5a:0c:3c:8c:70:27:f4:de:4f:
                    91:35:97:04:a9:d7:d7:e0:2d:b6:4e:a6:25:55:d1:
                    0b:d6:f5:7e:48:f3:ac:bc:8b:c4:c7:82:24:f9:8e:
                    f5:d6:57:ee:60:96:c7:d9:58:2e:ef:db:1d:53:dc:
                    72:32:8d:5a:24:2c:4c:8b:5d:f7:e3:7a:2b:6f:5d:
                    f1:3c:c2:f7:d4:f2:f2:e2:34:da:6f:81:57:17:e3:
                    af:28:50:b8:65:40:fc:ac:7f:90:08:3b:8b:e1:fe:
                    83:1a:b2:8c:26:07:1b:4b:92:fb:fd:09:bf:5d:e3:
                    84:a9:c5:35:bf:b2:ec:b9:69:40:ca:ff:c5:a5:03:
                    df:65:a7:7a:4f:be:30:ce:c4:93:ad:9f:3d:f2:88:
                    38:ac:e4:c6:81:0b:5f:d7:8c:ca:7d:b9:71:5d:f2:
                    95:f0:b6:ae:3b:85:10:6c:9b:69:a0:b7:da:96:b9:
                    e3:51:c5:26:a6:9e:97:6a:eb:bc:5d:24:78:18:5a:
                    64:20:9a:8a:0d:7a:85:49:fe:75:b3:dd:27:bb:d2:
                    25:28:04:75:f7:5e:4f:e8:98:23:70:69:99:6f:51:
                    ae:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0E:13:32:4A:43:8F:CB:A0:7F:0E:D0:3C:EF:A3:3E:5C:D1:FB:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/f42044dc-4bba-3889-9d93-7be101a8b14b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl

            X509v3 Authority Key Identifier:
                keyid:92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:a2:f6:05:8c:d8:1b:83:ab:60:9d:58:80:44:2d:41:fd:22:
         a3:4c:bf:7d:b4:87:0f:59:e4:da:cf:15:c5:84:26:45:49:e8:
         db:6c:dc:cb:3a:6c:df:de:2a:d0:ad:f6:f3:fe:60:cd:80:b6:
         9d:80:68:34:63:d5:c6:31:ab:0b:e2:49:94:47:8e:27:25:13:
         78:c1:b9:6d:f6:2e:ba:77:55:f3:8f:4e:f3:b2:f7:46:c8:f0:
         c7:ab:8e:53:77:71:91:48:f2:e7:8b:ec:18:4a:2b:5c:fe:7e:
         0d:19:31:12:30:4c:ac:dd:fa:2d:a5:99:43:00:db:0b:01:4f:
         3e:e1:79:d3:da:5f:ac:ac:f3:f3:27:7c:8d:d5:2d:f8:87:ab:
         ef:c0:c1:4c:b2:4f:f0:ac:a9:e3:18:6e:78:12:19:1d:2d:34:
         ce:fd:3d:72:2b:a5:f3:37:24:af:04:20:31:75:8e:96:11:f5:
         5c:63:50:19:9e:83:d2:95:9d:2e:97:2f:1d:fa:e7:81:a1:73:
         a3:6a:b5:55:04:52:a8:7e:07:16:53:a3:61:72:8d:60:14:74:
         a6:96:98:e3:8d:cd:eb:6a:93:a9:0e:92:fc:03:55:18:c9:74:
         b7:b1:31:4d:95:5b:cc:80:28:b1:b2:36:75:35:17:11:fc:71:
         5d:14:73:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af8/1pl9eS8aV6AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjVkYjQ1ZGItOGM5Mi00YjYxLWEzZDUtZjViYmI5OTNi
ZGMzMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk
MDExZmRhMDktZjM1NC00MTQ2LWEzOTgtNWQ0Nzg2NjQ3OTYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/cWCwFyuikWAqd2B4op/OI9IoTGiZXUOByz
6Q84XvTcuJhaDDyMcCf03k+RNZcEqdfX4C22TqYlVdEL1vV+SPOsvIvEx4Ik+Y71
1lfuYJbH2Vgu79sdU9xyMo1aJCxMi13343orb13xPML31PLy4jTab4FXF+OvKFC4
ZUD8rH+QCDuL4f6DGrKMJgcbS5L7/Qm/XeOEqcU1v7LsuWlAyv/FpQPfZad6T74w
zsSTrZ898og4rOTGgQtf14zKfblxXfKV8LauO4UQbJtpoLfalrnjUcUmpp6Xauu8
XSR4GFpkIJqKDXqFSf51s90nu9IlKAR1915P6JgjcGmZb1GuIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD4OEzJKQ4/LoH8O0Dzvoz5c0ft8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iNWRi
NDVkYi04YzkyLTRiNjEtYTNkNS1mNWJiYjk5M2JkYzMvZjQyMDQ0ZGMtNGJiYS0z
ODg5LTlkOTMtN2JlMTAxYThiMTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjVkYjQ1ZGItOGM5Mi00YjYxLWEz
ZDUtZjViYmI5OTNiZGMzL2I1ZGI0NWRiLThjOTItNGI2MS1hM2Q1LWY1YmJiOTkz
YmRjMy5jcmwwHwYDVR0jBBgwFoAUkn3XcB+0+u5+Zl1mjwwJi7KTpGAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iNWRiNDVkYi04YzkyLTRiNjEtYTNkNS1mNWJi
Yjk5M2JkYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATKTMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADyi9gWM2BuDq2CdWIBELUH9IqNMv320hw9Z5NrPFcWEJkVJ6Nts3Ms6
bN/eKtCt9vP+YM2Atp2AaDRj1cYxqwviSZRHjiclE3jBuW32Lrp3VfOPTvOy90bI
8MerjlN3cZFI8ueL7BhKK1z+fg0ZMRIwTKzd+i2lmUMA2wsBTz7hedPaX6ys8/Mn
fI3VLfiHq+/AwUyyT/CsqeMYbngSGR0tNM79PXIrpfM3JK8EIDF1jpYR9VxjUBme
g9KVnS6XLx3654Ghc6NqtVUEUqh+BxZTo2FyjWAUdKaWmOONzetqk6kOkvwDVRjJ
dLexMU2VW8yAKLGyNnU1FxH8cV0Uc8M=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:52:37 2026 by rpki-client