Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/9990d0c4-4ba4-38d8-b896-c2f229fb7d72.roa
File:                     9990d0c4-4ba4-38d8-b896-c2f229fb7d72.roa (raw, json)
Hash identifier:          7JQkoCHqOAoZkhHJCS5fmsgwhy0IPANYX6LvO3181dk=
Subject key identifier:   FB:81:98:7D:45:E5:EC:5C:A0:80:66:4B:3B:2C:45:F7:CC:9D:A0:14
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584EA2DFC1698A23242311D0EB80
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/9990d0c4-4ba4-38d8-b896-c2f229fb7d72.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     12083
IP address blocks:        67.149.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:c1:69:8a:23:24:23:11:d0:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=ad238dc0-d661-462e-ad31-cdab3c25aa4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e7:c0:6e:64:b1:f9:4c:ea:1d:f2:c2:7a:3e:
                    1e:82:67:d3:50:e7:cf:3e:6c:fd:63:11:f1:2f:51:
                    08:cd:a6:9e:0b:10:2d:28:10:d7:29:9b:04:e8:ec:
                    ac:ee:82:8c:84:41:b2:f7:f7:bc:b1:ef:0d:a4:30:
                    37:0f:64:dd:72:07:5c:c1:26:c7:40:cc:2c:fe:cf:
                    f6:6a:18:15:be:7e:90:c9:08:9d:58:ee:cc:a2:5b:
                    38:f3:43:17:31:f3:d2:b3:60:8a:34:df:08:8f:e3:
                    46:42:db:aa:71:77:cc:89:73:c5:49:c4:f1:7e:3d:
                    47:e2:2d:3c:2a:8f:ed:74:9f:62:19:18:31:79:6f:
                    71:23:b9:c4:6d:2a:22:64:51:e7:9d:68:94:3c:6b:
                    07:96:02:50:b5:d1:07:d1:52:95:bc:b6:e8:57:4d:
                    4c:ec:bf:f1:02:02:e9:ce:5c:9f:98:ad:1e:6e:78:
                    66:b7:ca:ae:ff:b5:4f:1d:10:8c:af:eb:eb:bf:e8:
                    1f:db:c6:fd:64:0a:d4:9f:17:aa:9c:12:b3:98:f4:
                    55:5b:08:44:38:15:a6:16:76:ac:7a:4f:23:fe:a3:
                    cd:a9:0d:e3:e3:eb:a7:7b:3b:99:0b:ce:fb:ca:75:
                    dd:cb:0a:77:9c:6f:b4:a5:d3:a0:5c:5d:c7:ca:21:
                    31:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:81:98:7D:45:E5:EC:5C:A0:80:66:4B:3B:2C:45:F7:CC:9D:A0:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/9990d0c4-4ba4-38d8-b896-c2f229fb7d72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.149.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:db:55:dc:28:90:58:fc:a2:71:d8:b2:3e:fd:dc:f2:dc:d7:
         48:a9:5b:5f:4a:0c:e7:12:57:46:93:d1:6c:53:55:df:93:7d:
         13:a7:ef:23:e2:09:b1:4b:5b:0c:49:16:0d:e8:19:af:c8:45:
         66:4f:b8:cc:15:74:9b:d2:7d:cd:79:95:3a:35:5f:a6:4a:ef:
         71:6a:e8:b1:7c:90:0c:74:13:91:16:1f:56:71:83:d4:3c:bf:
         61:b4:c1:9c:0e:e8:6a:38:8a:9a:9f:f3:f3:05:31:71:69:9a:
         af:70:84:54:74:6c:a7:9d:c3:58:69:7a:9b:cb:1a:c4:4d:56:
         60:26:af:be:83:28:5a:b2:e6:73:dc:23:31:7a:b2:3b:e6:f1:
         fc:33:0d:84:ed:13:a6:cc:6a:f5:67:53:84:a2:b2:92:d1:d2:
         bc:e8:4b:7b:c0:b3:00:89:b7:50:2b:1f:89:a8:63:c6:ea:0c:
         a1:10:d0:b1:7c:b1:2e:0c:1a:13:b6:7a:e4:c5:e9:6d:ad:e8:
         32:a8:6b:b9:13:53:1f:fd:18:89:3b:d9:3d:de:ff:3d:a9:c1:
         3f:6c:87:df:82:74:20:1f:ef:43:66:2d:89:09:04:98:f4:d7:
         b5:a4:36:1c:8c:62:e1:d4:c8:85:c5:24:26:a4:68:37:92:a6:
         3c:cf:d2:bd
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6i38FpiiMkIxHQ64AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm
NWZlMB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk
YWQyMzhkYzAtZDY2MS00NjJlLWFkMzEtY2RhYjNjMjVhYTRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1efAbmSx+UzqHfLCej4egmfTUOfPPmz9YxHx
L1EIzaaeCxAtKBDXKZsE6Oys7oKMhEGy9/e8se8NpDA3D2TdcgdcwSbHQMws/s/2
ahgVvn6QyQidWO7Mols480MXMfPSs2CKNN8Ij+NGQtuqcXfMiXPFScTxfj1H4i08
Ko/tdJ9iGRgxeW9xI7nEbSoiZFHnnWiUPGsHlgJQtdEH0VKVvLboV01M7L/xAgLp
zlyfmK0ebnhmt8qu/7VPHRCMr+vrv+gf28b9ZArUnxeqnBKzmPRVWwhEOBWmFnas
ek8j/qPNqQ3j4+unezuZC877ynXdywp3nG+0pdOgXF3HyiEx0wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPuBmH1F5excoIBmSzssRffMnaAUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl
MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvOTk5MGQwYzQtNGJhNC0z
OGQ4LWI4OTYtYzJmMjI5ZmI3ZDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2
ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl
ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2
N2I3ZWY1ZmUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQ5UwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAe9tV3CiQWPyicdiyPv3c8tzXSKlbX0oM5xJXRpPRbFNV35N9E6fvI+IJ
sUtbDEkWDegZr8hFZk+4zBV0m9J9zXmVOjVfpkrvcWrosXyQDHQTkRYfVnGD1Dy/
YbTBnA7oajiKmp/z8wUxcWmar3CEVHRsp53DWGl6m8saxE1WYCavvoMoWrLmc9wj
MXqyO+bx/DMNhO0Tpsxq9WdThKKyktHSvOhLe8CzAIm3UCsfiahjxuoMoRDQsXyx
LgwaE7Z65MXpba3oMqhruRNTH/0YiTvZPd7/PanBP2yH34J0IB/vQ2YtiQkEmPTX
taQ2HIxi4dTIhcUkJqRoN5KmPM/SvQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:59:21 2026 by rpki-client