Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/9b23c8d1-c1ca-349a-abe2-34de70914da3.roa
File:                     9b23c8d1-c1ca-349a-abe2-34de70914da3.roa (raw, json)
Hash identifier:          6QbZhuGk1tp4wKlCXBgVklP171Kr9WS9vDwhoh0M0fw=
Subject key identifier:   AC:96:1F:20:BE:8D:F2:32:6E:20:56:DC:55:51:CE:EF:4B:CC:D2:88
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584EA2DFC666B9502D76878CF100
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/9b23c8d1-c1ca-349a-abe2-34de70914da3.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     12083
IP address blocks:        75.76.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:c6:66:b9:50:2d:76:87:8c:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=4b8b4de8-e4e2-490e-96dd-fd1dcb000632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4a:0e:a2:fc:8b:30:5a:6f:ae:cb:d6:1e:86:
                    99:62:a6:69:4a:93:8c:4b:dd:51:40:7a:60:bd:cf:
                    22:9f:aa:53:f6:65:ab:9a:7c:d7:a1:42:40:48:26:
                    dc:1f:5b:3c:7c:fa:63:b0:8d:bb:d9:67:13:d0:da:
                    95:7e:bf:b6:db:21:b7:9c:d4:78:19:ad:c1:5a:01:
                    9e:9c:db:a9:51:b1:c2:80:40:52:09:2f:53:3f:4c:
                    86:98:63:18:95:30:5a:ee:56:b2:c2:a2:c5:4f:34:
                    38:a9:ef:de:7e:b5:87:7b:ae:68:bf:14:83:5e:36:
                    95:1a:91:bc:a7:30:dc:1a:d9:03:a8:3f:8f:b3:f8:
                    64:22:61:02:6a:42:bb:f1:e2:33:36:54:25:e3:07:
                    c1:fb:70:7e:37:19:f5:15:4e:29:64:11:a7:c1:53:
                    2c:0d:19:1b:fe:6d:8d:96:50:a6:24:4b:b0:2c:df:
                    f1:1a:e4:10:95:02:06:f0:e5:0b:f3:12:ae:8b:04:
                    a2:17:3d:d9:b7:51:4a:7a:33:40:4c:a9:80:c7:80:
                    8f:5a:e2:c0:35:d1:77:4d:7c:39:13:c7:3f:88:b9:
                    33:95:03:d2:cc:b3:fa:e1:85:68:9a:28:ec:73:ab:
                    e0:fb:66:b1:da:90:e2:d2:fd:b3:24:1e:60:ca:63:
                    43:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:96:1F:20:BE:8D:F2:32:6E:20:56:DC:55:51:CE:EF:4B:CC:D2:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/9b23c8d1-c1ca-349a-abe2-34de70914da3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.76.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:b2:18:21:15:39:90:82:df:75:cf:85:43:f5:ae:6e:a6:18:
         91:b7:da:4f:8d:2c:56:77:8a:f8:e2:7a:3f:42:a3:47:b9:0c:
         75:7c:31:8d:2f:cf:72:4e:ba:d2:bf:e1:7d:fd:06:20:82:5f:
         4a:f1:d6:5f:82:48:ed:41:6d:f1:60:31:5c:ee:af:4d:b9:2f:
         36:fa:6e:7f:93:58:a8:e2:30:27:f4:42:16:a6:63:c7:50:eb:
         60:da:33:a7:27:d8:fb:26:f5:a5:61:ec:ee:77:92:c8:63:13:
         9d:c7:4a:45:14:f4:eb:26:09:ce:0b:24:6a:e0:26:a0:d5:26:
         0b:4e:af:4a:41:8d:c0:d6:6d:a6:67:96:28:7b:f1:e6:9d:3f:
         bc:ba:de:bd:dc:cf:1d:65:ec:c7:0a:2d:0b:bb:c6:31:d9:f9:
         ba:d8:e1:05:a0:a9:73:7d:75:e9:be:0c:78:2b:d4:bc:59:57:
         24:05:52:0b:c7:36:3b:b5:54:80:04:53:3a:81:e0:98:1c:3a:
         e0:09:68:86:d4:23:12:f6:79:5b:6d:4d:90:6a:f0:92:35:5c:
         9e:4a:a6:08:7d:72:7a:0d:a2:5d:18:54:32:bc:98:08:1f:52:
         eb:95:bc:23:73:60:c1:21:80:9d:0f:97:63:c1:ab:28:4e:51:
         91:94:24:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6i38ZmuVAtdoeM8QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm
NWZlMB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk
NGI4YjRkZTgtZTRlMi00OTBlLTk2ZGQtZmQxZGNiMDAwNjMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUoOovyLMFpvrsvWHoaZYqZpSpOMS91RQHpg
vc8in6pT9mWrmnzXoUJASCbcH1s8fPpjsI272WcT0NqVfr+22yG3nNR4Ga3BWgGe
nNupUbHCgEBSCS9TP0yGmGMYlTBa7laywqLFTzQ4qe/efrWHe65ovxSDXjaVGpG8
pzDcGtkDqD+Ps/hkImECakK78eIzNlQl4wfB+3B+Nxn1FU4pZBGnwVMsDRkb/m2N
llCmJEuwLN/xGuQQlQIG8OUL8xKuiwSiFz3Zt1FKejNATKmAx4CPWuLANdF3TXw5
E8c/iLkzlQPSzLP64YVomijsc6vg+2ax2pDi0v2zJB5gymNDGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKyWHyC+jfIybiBW3FVRzu9LzNKIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl
MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvOWIyM2M4ZDEtYzFjYS0z
NDlhLWFiZTItMzRkZTcwOTE0ZGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2
ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl
ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2
N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES0yQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGiyGCEVOZCC33XPhUP1rm6mGJG32k+NLFZ3ivjiej9Co0e5DHV8MY0v
z3JOutK/4X39BiCCX0rx1l+CSO1BbfFgMVzur025Lzb6bn+TWKjiMCf0QhamY8dQ
62DaM6cn2Psm9aVh7O53kshjE53HSkUU9OsmCc4LJGrgJqDVJgtOr0pBjcDWbaZn
lih78eadP7y63r3czx1l7McKLQu7xjHZ+brY4QWgqXN9dem+DHgr1LxZVyQFUgvH
Nju1VIAEUzqB4JgcOuAJaIbUIxL2eVttTZBq8JI1XJ5Kpgh9cnoNol0YVDK8mAgf
UuuVvCNzYMEhgJ0Pl2PBqyhOUZGUJLM=
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:56:47 2026 by rpki-client