Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/3fda689e-0ad2-3ecb-8886-46983d4e7eea.roa
File:                     3fda689e-0ad2-3ecb-8886-46983d4e7eea.roa (raw, json)
Hash identifier:          JjPRa7CVNTLRe633MfMgOZsF6rpxjeUgwNR9BZBiWLg=
Subject key identifier:   E0:CF:40:0C:82:EE:88:6A:C8:B7:2A:F6:C7:9C:04:AF:2D:D2:70:FE
Certificate issuer:       /CN=be97cf16-b2bb-4763-9609-9b42ea45a88f
Certificate serial:       010D0C9F4328584EA787982658854AEB2CB94A80
Authority key identifier: E9:8B:C2:51:09:F3:89:39:52:D3:5C:01:6C:9A:5F:B3:D5:1F:D5:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/3fda689e-0ad2-3ecb-8886-46983d4e7eea.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     273993
IP address blocks:        76.72.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/be97cf16-b2bb-4763-9609-9b42ea45a88f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/be97cf16-b2bb-4763-9609-9b42ea45a88f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:98:26:58:85:4a:eb:2c:b9:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be97cf16-b2bb-4763-9609-9b42ea45a88f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=41cfb956-cad8-44b3-a0f9-d7fd3428c26d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9c:b6:c8:5e:f5:bf:aa:e6:39:11:c7:78:e5:
                    9c:9d:88:06:1f:70:ce:8c:2f:c5:26:6d:ea:f3:ef:
                    63:dd:5d:5c:d4:71:18:20:73:6b:07:b5:a7:c8:fb:
                    30:ba:fd:3a:d3:c1:48:d5:b9:f6:34:78:46:e8:7f:
                    8f:6a:73:0b:56:8e:ef:08:9a:c9:4c:09:5f:fb:7c:
                    45:83:17:be:d0:c0:fc:bd:86:9c:6f:e9:4e:91:da:
                    ef:4e:49:17:65:0f:d2:4f:d2:94:38:cb:71:71:d8:
                    69:02:a1:c3:9c:31:2a:9d:a6:0f:70:6d:15:68:8d:
                    a0:0f:b7:c0:00:ab:fe:99:2e:2b:33:12:27:c3:8b:
                    5e:6f:04:3f:ed:03:2f:76:38:39:f5:e3:4e:d4:21:
                    26:9b:c7:b8:d6:7f:7a:ee:b5:c5:3c:2c:b5:05:5b:
                    6b:4f:70:02:ae:fd:6f:ae:43:b6:f5:8c:c8:29:16:
                    a8:bc:c7:6b:80:8f:83:c6:18:9a:93:51:ed:18:fd:
                    04:27:33:63:03:15:29:8a:36:bb:5d:66:2d:9f:1f:
                    05:4d:a0:b3:49:1b:5c:f1:d6:29:de:14:9c:19:47:
                    d8:9a:c3:b9:4b:8b:5c:1b:ae:b8:64:12:83:30:00:
                    57:44:f4:a1:de:f4:04:67:fa:b6:e5:4f:a9:d4:ab:
                    ef:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CF:40:0C:82:EE:88:6A:C8:B7:2A:F6:C7:9C:04:AF:2D:D2:70:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/3fda689e-0ad2-3ecb-8886-46983d4e7eea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f/be97cf16-b2bb-4763-9609-9b42ea45a88f.crl

            X509v3 Authority Key Identifier:
                keyid:E9:8B:C2:51:09:F3:89:39:52:D3:5C:01:6C:9A:5F:B3:D5:1F:D5:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/be97cf16-b2bb-4763-9609-9b42ea45a88f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.72.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:f4:89:d3:a9:cc:4d:22:39:bf:13:0a:ea:33:81:56:9b:bd:
         e1:37:48:ec:59:b1:77:40:e3:1f:71:47:91:82:ca:e6:32:4f:
         9b:a1:ea:31:1d:88:62:7b:8d:fa:f2:55:fe:f9:0c:bd:9e:63:
         52:4c:fd:cd:0c:12:0c:8a:dc:70:3b:5b:be:2d:79:f7:37:b6:
         81:6c:3b:6f:f1:c3:5d:54:30:db:e9:64:2d:0b:60:8b:8e:a4:
         3b:07:3b:1d:2e:1c:a1:6a:57:aa:8b:00:0a:e0:e0:76:a3:8c:
         51:6d:70:dd:3b:f1:e7:8b:68:72:e0:dd:b8:f6:65:f4:e5:01:
         32:f6:92:e4:23:f0:bb:cc:21:6d:d7:9f:d5:2f:d7:30:42:58:
         be:be:f1:7a:56:b6:d5:90:b5:4c:1b:61:1f:83:de:9d:fe:65:
         ab:de:95:d4:87:0f:34:46:b2:a9:13:10:b4:8c:04:cc:37:da:
         ba:21:63:f7:61:5f:9d:56:77:08:b5:dc:2c:c3:1b:eb:f8:33:
         9c:22:44:c8:e6:e8:b5:b8:5e:90:2d:40:08:b8:9c:9e:99:b2:
         c9:06:a9:f6:a8:97:33:42:f5:82:70:95:57:af:35:3c:f3:fe:
         2d:a9:b0:00:b7:19:e3:7a:af:2c:61:a3:aa:07:33:2e:83:fe:
         b7:6c:bc:c3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh5gmWIVK6yy5SoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmU5N2NmMTYtYjJiYi00NzYzLTk2MDktOWI0MmVhNDVh
ODhmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NDFjZmI5NTYtY2FkOC00NGIzLWEwZjktZDdmZDM0MjhjMjZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15y2yF71v6rmORHHeOWcnYgGH3DOjC/FJm3q
8+9j3V1c1HEYIHNrB7WnyPswuv0608FI1bn2NHhG6H+PanMLVo7vCJrJTAlf+3xF
gxe+0MD8vYacb+lOkdrvTkkXZQ/ST9KUOMtxcdhpAqHDnDEqnaYPcG0VaI2gD7fA
AKv+mS4rMxInw4tebwQ/7QMvdjg59eNO1CEmm8e41n967rXFPCy1BVtrT3ACrv1v
rkO29YzIKRaovMdrgI+Dxhiak1HtGP0EJzNjAxUpija7XWYtnx8FTaCzSRtc8dYp
3hScGUfYmsO5S4tcG664ZBKDMABXRPSh3vQEZ/q25U+p1KvvgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFODPQAyC7ohqyLcq9secBK8t0nD+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZTk3
Y2YxNi1iMmJiLTQ3NjMtOTYwOS05YjQyZWE0NWE4OGYvM2ZkYTY4OWUtMGFkMi0z
ZWNiLTg4ODYtNDY5ODNkNGU3ZWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmU5N2NmMTYtYjJiYi00NzYzLTk2
MDktOWI0MmVhNDVhODhmL2JlOTdjZjE2LWIyYmItNDc2My05NjA5LTliNDJlYTQ1
YTg4Zi5jcmwwHwYDVR0jBBgwFoAU6YvCUQnziTlS01wBbJpfs9Uf1SUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iZTk3Y2YxNi1iMmJiLTQ3NjMtOTYwOS05YjQy
ZWE0NWE4OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATEiqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA70idOpzE0iOb8TCuozgVabveE3SOxZsXdA4x9xR5GCyuYyT5uh6jEd
iGJ7jfryVf75DL2eY1JM/c0MEgyK3HA7W74tefc3toFsO2/xw11UMNvpZC0LYIuO
pDsHOx0uHKFqV6qLAArg4HajjFFtcN078eeLaHLg3bj2ZfTlATL2kuQj8LvMIW3X
n9Uv1zBCWL6+8XpWttWQtUwbYR+D3p3+ZaveldSHDzRGsqkTELSMBMw32rohY/dh
X51Wdwi13CzDG+v4M5wiRMjm6LW4XpAtQAi4nJ6ZsskGqfaolzNC9YJwlVevNTzz
/i2psAC3GeN6ryxho6oHMy6D/rdsvMM=
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:48:50 2026 by rpki-client