Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/76f978c5-39cd-3d91-bb1d-04e987ea7c9d.roa
File:                     76f978c5-39cd-3d91-bb1d-04e987ea7c9d.roa (raw, json)
Hash identifier:          yGnRc+53oZU7Z6ge5wupTreXwSmKR4wvyNf0ZJXugIA=
Subject key identifier:   D1:D8:C4:D5:03:96:DD:E5:80:0C:D1:84:BB:CD:64:60:CB:2C:64:E7
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584EF9E2102ED5E8E50203D6FA80
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/76f978c5-39cd-3d91-bb1d-04e987ea7c9d.roa
Signing time:             Thu 27 Aug 2026 13:00:12 +0000
ROA not before:           Thu 27 Aug 2026 13:00:12 +0000
ROA not after:            Wed 25 Nov 2026 14:00:12 +0000
asID:                     3561
IP address blocks:        208.138.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:e2:10:2e:d5:e8:e5:02:03:d6:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Aug 27 13:00:12 2026 GMT
            Not After : Nov 25 14:00:12 2026 GMT
        Subject: CN=bdc1f0d1-3f22-44a9-990c-ed8128c49456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a0:2d:c3:78:2b:fb:46:92:03:f6:a6:dd:8b:
                    da:11:ac:2a:09:77:42:b8:4f:47:bb:66:50:f7:d0:
                    88:fb:15:7c:fd:91:33:44:b8:6c:df:47:59:80:90:
                    11:f9:b3:1b:15:0f:78:8e:74:27:b3:4b:9f:8b:dd:
                    c3:fa:8b:25:28:1c:a8:a2:a3:dd:4c:f9:ed:8a:81:
                    6f:f2:b1:ef:bb:f3:64:a6:49:55:24:82:a3:32:5e:
                    02:be:99:24:fe:70:68:62:ba:1a:e4:15:b3:e5:c4:
                    36:78:e2:1a:3b:67:26:03:6b:f3:2b:25:1a:dd:6c:
                    a7:1e:89:61:f7:a2:ff:c4:02:32:aa:fb:41:ff:4d:
                    b2:28:68:83:40:de:b7:39:32:8b:9c:03:29:fb:a9:
                    5d:6f:5c:59:be:d0:d7:da:47:f3:58:35:1f:22:a1:
                    93:0c:4b:4b:80:e1:66:fc:4e:75:99:0a:98:a1:98:
                    46:f4:a7:a0:ee:17:02:01:a5:e6:c2:d4:f1:02:54:
                    46:49:dd:96:8a:fa:45:3e:1b:8b:0f:1c:d4:60:0f:
                    f4:d6:22:70:5c:80:cb:90:e6:fe:8e:07:67:ee:a0:
                    3e:36:f2:78:37:d0:0f:9e:30:28:6b:07:9e:d2:04:
                    72:4f:e7:5b:0b:08:f6:8d:4b:63:a2:82:68:da:a1:
                    15:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D8:C4:D5:03:96:DD:E5:80:0C:D1:84:BB:CD:64:60:CB:2C:64:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/76f978c5-39cd-3d91-bb1d-04e987ea7c9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.138.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:71:c5:bb:56:81:79:1f:c7:de:15:63:0e:c0:14:41:ff:f0:
         8e:f8:6a:24:8e:94:85:3a:a7:84:ab:1b:0d:a6:83:cf:15:a8:
         b4:6a:67:81:dc:35:57:90:81:68:62:ff:fb:bf:fc:5d:5e:3b:
         f9:63:0f:ec:b8:a8:7c:fd:e7:43:19:e1:94:6f:ec:ad:2c:5e:
         fc:5e:ba:06:57:a2:08:e5:b6:05:bd:d6:7f:34:ea:ac:33:45:
         9d:b7:0f:62:6c:73:1a:84:09:15:c5:f6:4c:a6:9f:7c:f5:89:
         bb:f7:fe:d9:f3:67:3d:71:8c:a8:e1:c5:4a:4c:65:f9:7a:2d:
         bb:13:0f:e2:ae:93:af:6c:60:19:6f:02:c1:71:e3:ad:90:48:
         7d:cb:30:34:d3:94:3f:ba:7a:5a:05:f6:88:e7:85:41:5e:aa:
         33:64:b1:47:79:8c:0d:31:0f:8a:1d:bb:8d:b1:d4:bc:4b:f5:
         f7:07:8d:25:ec:7e:18:2a:f0:91:b6:14:09:f9:dd:a0:b6:ff:
         b1:5d:05:4a:b4:47:2d:7b:cd:e2:17:60:21:b1:a8:aa:0a:41:
         b7:42:f6:72:8c:a3:25:0e:37:d3:3b:cd:46:5b:0e:d9:cd:e3:
         d2:35:34:60:59:b0:b0:ca:f9:f3:a3:a0:59:91:c7:c1:c5:0c:
         0f:9e:c9:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE754hAu1ejlAgPW+oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm
M2VjMB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk
YmRjMWYwZDEtM2YyMi00NGE5LTk5MGMtZWQ4MTI4YzQ5NDU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqAtw3gr+0aSA/am3YvaEawqCXdCuE9Hu2ZQ
99CI+xV8/ZEzRLhs30dZgJAR+bMbFQ94jnQns0ufi93D+oslKByooqPdTPntioFv
8rHvu/NkpklVJIKjMl4Cvpkk/nBoYroa5BWz5cQ2eOIaO2cmA2vzKyUa3WynHolh
96L/xAIyqvtB/02yKGiDQN63OTKLnAMp+6ldb1xZvtDX2kfzWDUfIqGTDEtLgOFm
/E51mQqYoZhG9Keg7hcCAaXmwtTxAlRGSd2WivpFPhuLDxzUYA/01iJwXIDLkOb+
jgdn7qA+NvJ4N9APnjAoawee0gRyT+dbCwj2jUtjooJo2qEVpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNHYxNUDlt3lgAzRhLvNZGDLLGTnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3
YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvNzZmOTc4YzUtMzljZC0z
ZDkxLWJiMWQtMDRlOTg3ZWE3YzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5
MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0
ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm
ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0IqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALhxxbtWgXkfx94VYw7AFEH/8I74aiSOlIU6p4SrGw2mg88VqLRqZ4Hc
NVeQgWhi//u//F1eO/ljD+y4qHz950MZ4ZRv7K0sXvxeugZXogjltgW91n806qwz
RZ23D2JscxqECRXF9kymn3z1ibv3/tnzZz1xjKjhxUpMZfl6LbsTD+Kuk69sYBlv
AsFx462QSH3LMDTTlD+6eloF9ojnhUFeqjNksUd5jA0xD4odu42x1LxL9fcHjSXs
fhgq8JG2FAn53aC2/7FdBUq0Ry17zeIXYCGxqKoKQbdC9nKMoyUON9M7zUZbDtnN
49I1NGBZsLDK+fOjoFmRx8HFDA+eyYI=
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:53:15 2026 by rpki-client