Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/86388de2-583a-33f3-8f8c-142350f6349b.roa
File:                     86388de2-583a-33f3-8f8c-142350f6349b.roa (raw, json)
Hash identifier:          6JulwWsoxjTCbppoDwvG4MzwOtohSaiy5w+Nalt7KxA=
Subject key identifier:   BB:AC:11:65:36:F4:65:8A:53:04:A0:AF:9D:5A:95:42:82:C5:D9:2E
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584CCBA77BB8916016930AED6300
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/86388de2-583a-33f3-8f8c-142350f6349b.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     54858
IP address blocks:        76.191.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:7b:b8:91:60:16:93:0a:ed:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=15361de4-2ed7-4884-a073-aa31e289054b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a1:84:5b:9f:2f:0a:3e:3a:1b:dc:85:a0:ce:
                    f6:13:26:a5:48:12:e0:a8:cd:20:cf:48:95:10:c5:
                    10:99:5e:d5:41:37:fd:f5:28:f6:87:73:8e:5d:f9:
                    0c:87:25:d0:71:f8:77:be:9b:3a:eb:50:9f:17:a8:
                    6b:28:3d:34:88:19:55:1c:de:b7:86:0e:d5:5e:1b:
                    9a:d2:74:33:7a:e5:62:78:e4:b2:75:da:ab:59:89:
                    bb:e7:3b:68:1c:29:74:8a:a7:c2:a1:13:27:7c:12:
                    5c:c7:42:fe:c6:3d:c3:7f:7e:f9:a0:b5:7a:d9:5d:
                    65:d4:ca:39:f9:43:a8:76:d7:44:3a:ca:a2:f9:dd:
                    5a:16:01:b2:16:57:74:25:07:27:da:e8:63:f0:68:
                    82:ae:84:c3:83:ab:30:d3:b8:ec:a0:24:d5:7d:e4:
                    df:56:45:b8:30:bf:9c:25:cd:cd:38:0a:4c:3d:f1:
                    51:e9:66:6f:11:f9:68:e4:7d:a5:97:3e:4e:3a:73:
                    19:68:af:84:b0:b9:a9:f5:4a:ba:ca:96:19:75:1f:
                    a6:d2:a5:79:e2:c7:4d:19:58:3d:a5:a9:12:f8:ce:
                    80:fa:4e:ee:21:4f:6e:fa:bc:b1:50:a6:df:3e:18:
                    de:89:83:80:e7:46:24:74:46:e5:f0:e8:c3:4f:1b:
                    ce:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:AC:11:65:36:F4:65:8A:53:04:A0:AF:9D:5A:95:42:82:C5:D9:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/86388de2-583a-33f3-8f8c-142350f6349b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.191.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:93:c1:fa:43:93:e7:0c:88:cc:9c:93:55:8f:b1:bf:4e:9a:
         90:43:fb:ae:ea:14:e1:f4:64:47:b9:f5:aa:65:2f:43:f9:21:
         f8:b4:f3:c3:8f:7d:94:38:d6:d3:2c:2d:f4:7d:78:34:83:ea:
         77:d6:de:9b:a1:63:be:44:9d:3e:b0:ea:89:bc:c2:d8:36:af:
         73:fb:ba:f0:07:6f:18:20:eb:16:4f:c5:e4:13:10:5a:c5:9e:
         0f:a6:23:13:98:07:f0:0f:71:e2:50:75:e8:46:f8:a2:80:e8:
         8f:24:28:f5:02:45:b2:2a:03:0b:3e:57:48:b0:e9:12:a2:58:
         72:34:20:4f:38:e0:dd:69:29:2d:b5:d7:b2:98:a3:03:c5:52:
         b7:2e:d2:c9:2f:26:16:89:e5:a3:74:05:af:2c:1d:7a:f3:5d:
         99:21:83:12:44:74:1d:0d:3b:1b:b6:fa:e7:de:1f:9a:a7:0a:
         c1:55:05:86:ce:32:c0:7b:6d:94:cc:a8:13:4d:ee:64:24:fa:
         49:f4:78:83:76:49:1e:e7:fd:96:f1:8c:1a:e9:f7:ab:8e:e5:
         44:f4:c1:b7:dc:21:b8:7a:57:61:98:cd:50:31:20:30:6e:0f:
         d4:4e:fb:76:41:a0:65:ce:5e:f6:5d:e3:a0:fc:ad:b7:f9:07:
         c0:98:e3:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzLp3u4kWAWkwrtYwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk
MTUzNjFkZTQtMmVkNy00ODg0LWEwNzMtYWEzMWUyODkwNTRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqGEW58vCj46G9yFoM72EyalSBLgqM0gz0iV
EMUQmV7VQTf99Sj2h3OOXfkMhyXQcfh3vps661CfF6hrKD00iBlVHN63hg7VXhua
0nQzeuVieOSyddqrWYm75ztoHCl0iqfCoRMnfBJcx0L+xj3Df375oLV62V1l1Mo5
+UOodtdEOsqi+d1aFgGyFld0JQcn2uhj8GiCroTDg6sw07jsoCTVfeTfVkW4ML+c
Jc3NOApMPfFR6WZvEflo5H2llz5OOnMZaK+EsLmp9Uq6ypYZdR+m0qV54sdNGVg9
pakS+M6A+k7uIU9u+ryxUKbfPhjeiYOA50YkdEbl8OjDTxvOmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLusEWU29GWKUwSgr51alUKCxdkuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvODYzODhkZTItNTgzYS0z
M2YzLThmOGMtMTQyMzUwZjYzNDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGTL9AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADaTwfpDk+cMiMyck1WPsb9OmpBD+67qFOH0ZEe59aplL0P5Ifi088OP
fZQ41tMsLfR9eDSD6nfW3puhY75EnT6w6om8wtg2r3P7uvAHbxgg6xZPxeQTEFrF
ng+mIxOYB/APceJQdehG+KKA6I8kKPUCRbIqAws+V0iw6RKiWHI0IE844N1pKS21
17KYowPFUrcu0skvJhaJ5aN0Ba8sHXrzXZkhgxJEdB0NOxu2+ufeH5qnCsFVBYbO
MsB7bZTMqBNN7mQk+kn0eIN2SR7n/ZbxjBrp96uO5UT0wbfcIbh6V2GYzVAxIDBu
D9RO+3ZBoGXOXvZd46D8rbf5B8CY46g=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:49:19 2026 by rpki-client