Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/930ee76b-2e76-3ba2-871a-20a7211b8448.roa
File:                     930ee76b-2e76-3ba2-871a-20a7211b8448.roa (raw, json)
Hash identifier:          9c4/htwcxNW/v+shfsUYI28GfGOxONzo3qQw25vqyYI=
Subject key identifier:   A6:06:E7:D3:86:DA:D8:29:D4:C0:C7:4C:E5:AF:2B:75:4A:3D:6D:67
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F4328584E9A7FA98681A626D5BDA93B00
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/930ee76b-2e76-3ba2-871a-20a7211b8448.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     834
IP address blocks:        67.43.33.0/24 maxlen: 24
                          67.43.34.0/24 maxlen: 24
                          67.43.35.0/24 maxlen: 24
                          67.43.40.0/24 maxlen: 24
                          67.43.42.0/24 maxlen: 24
                          68.67.192.0/24 maxlen: 24
                          68.67.193.0/24 maxlen: 24
                          68.67.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:a9:86:81:a6:26:d5:bd:a9:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=0bb47730-e116-418e-b0a4-35bafce7228f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e3:ce:64:e6:65:10:db:56:b2:35:86:57:ef:
                    5a:d8:af:3a:c7:a9:7b:f9:53:0c:16:37:e4:44:22:
                    1c:94:9e:7d:28:ac:af:76:53:be:ba:cd:bb:f7:d5:
                    11:6d:70:f1:6d:88:e1:54:e6:d1:d3:d5:c4:23:be:
                    6c:d3:c3:f4:4e:a2:5c:25:51:a4:44:55:6c:4c:10:
                    de:0f:ba:ed:30:b6:33:29:a6:d8:28:ba:70:43:2d:
                    0b:6c:25:2d:eb:c5:75:c7:18:aa:3c:de:84:d6:20:
                    04:d0:a8:e9:48:c4:03:a7:e1:42:aa:0d:31:80:59:
                    3f:4f:6f:26:30:17:4e:76:73:fa:3c:9e:ea:9d:5a:
                    c2:19:4a:b1:62:b4:22:8d:1a:7f:e6:eb:76:3d:dc:
                    80:b7:20:9d:fe:d1:f1:cb:f3:a7:01:6e:77:3a:da:
                    82:bf:88:71:bc:d8:86:dc:50:eb:f6:78:ed:7f:51:
                    dc:8a:09:db:c7:e8:5a:90:4f:b1:b1:0d:ae:9b:14:
                    c2:d7:b5:0a:71:e9:94:93:74:d5:4c:91:c0:17:85:
                    3c:7d:1f:41:46:27:2b:d2:ae:22:44:ab:11:ed:5b:
                    f7:b5:25:cc:62:ed:40:59:cc:05:9e:47:96:f9:c4:
                    fa:92:4b:96:7c:6d:de:e0:ad:d0:78:1d:08:22:03:
                    8e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:06:E7:D3:86:DA:D8:29:D4:C0:C7:4C:E5:AF:2B:75:4A:3D:6D:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/930ee76b-2e76-3ba2-871a-20a7211b8448.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.33.0-67.43.35.255
                  67.43.40.0/24
                  67.43.42.0/24
                  68.67.192.0/23
                  68.67.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:79:21:cf:d1:06:b1:a4:df:e4:ae:fd:00:b5:37:9e:b3:9d:
         c7:64:b7:3f:66:a0:15:e8:fa:c5:60:1f:93:91:b9:61:b3:70:
         cf:27:ee:ca:a3:fa:67:be:63:f0:e8:da:43:39:0c:18:02:b4:
         87:87:c2:29:d5:79:1a:08:1a:d7:34:45:fa:f4:47:0d:23:fd:
         34:88:9f:c3:f5:1f:6b:8b:bf:c3:13:76:81:5f:46:a7:63:3e:
         63:00:48:45:0b:97:ab:00:e3:c2:4f:01:07:93:7c:d3:0f:08:
         2f:a5:b2:81:17:8e:31:d8:b7:ff:12:5a:31:5f:fe:b0:7d:1e:
         86:b0:26:ef:79:40:68:5c:44:a4:c5:92:e9:cb:57:28:4e:29:
         66:24:b8:35:91:b6:f5:8e:b6:25:d9:13:51:63:29:8d:fb:bf:
         40:52:ab:79:0d:f8:4c:8b:83:3d:f4:81:66:1f:e7:b5:98:f8:
         69:b2:78:d9:05:db:81:ad:a9:2a:b3:d6:4a:48:11:e8:01:ee:
         0b:ae:2f:81:b9:d7:ff:3b:4b:ad:60:c8:ff:be:7f:da:28:4f:
         2a:cb:03:92:e0:35:94:43:d4:da:2f:52:b0:e2:64:78:bc:5c:
         0e:e4:2e:76:1c:40:90:d6:7f:70:b6:ca:f2:d6:20:ba:5f:de:
         11:6f:30:ae
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWE6af6mGgaYm1b2pOwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli
NGU1MB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk
MGJiNDc3MzAtZTExNi00MThlLWIwYTQtMzViYWZjZTcyMjhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOPOZOZlENtWsjWGV+9a2K86x6l7+VMMFjfk
RCIclJ59KKyvdlO+us2799URbXDxbYjhVObR09XEI75s08P0TqJcJVGkRFVsTBDe
D7rtMLYzKabYKLpwQy0LbCUt68V1xxiqPN6E1iAE0KjpSMQDp+FCqg0xgFk/T28m
MBdOdnP6PJ7qnVrCGUqxYrQijRp/5ut2PdyAtyCd/tHxy/OnAW53OtqCv4hxvNiG
3FDr9njtf1Hcignbx+hakE+xsQ2umxTC17UKcemUk3TVTJHAF4U8fR9BRicr0q4i
RKsR7Vv3tSXMYu1AWcwFnkeW+cT6kkuWfG3e4K3QeB0IIgOOoQIDAQABo4IDdTCC
A3EwHQYDVR0OBBYEFKYG59OG2tgp1MDHTOWvK3VKPW1nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk
NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvOTMwZWU3NmItMmU3Ni0z
YmEyLTg3MWEtMjBhNzIxMWI4NDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3
ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5
YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3
N2IzOWI0ZTUuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBABDKyED
BAJDKyADBABDKygDBABDKyoDBAFEQ8ADBABEQ8YwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAv3khz9EGsaTf
5K79ALU3nrOdx2S3P2agFej6xWAfk5G5YbNwzyfuyqP6Z75j8OjaQzkMGAK0h4fC
KdV5Ggga1zRF+vRHDSP9NIifw/Ufa4u/wxN2gV9Gp2M+YwBIRQuXqwDjwk8BB5N8
0w8IL6WygReOMdi3/xJaMV/+sH0ehrAm73lAaFxEpMWS6ctXKE4pZiS4NZG29Y62
JdkTUWMpjfu/QFKreQ34TIuDPfSBZh/ntZj4abJ42QXbga2pKrPWSkgR6AHuC64v
gbnX/ztLrWDI/75/2ihPKssDkuA1lEPU2i9SsOJkeLxcDuQudhxAkNZ/cLbK8tYg
ul/eEW8wrg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:06:10 2026 by rpki-client