Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a882745c-46c2-3b5f-96c4-d7de25c95eba.roa
File:                     a882745c-46c2-3b5f-96c4-d7de25c95eba.roa (raw, json)
Hash identifier:          lexNwnzSZ24NzoYptGyd7OazrMcyRUId16OZCv/UxgE=
Subject key identifier:   92:93:D3:11:5C:89:24:10:89:89:68:FB:04:EA:1A:41:5A:64:28:92
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B3A0277C2BA674C2EB4036020
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a882745c-46c2-3b5f-96c4-d7de25c95eba.roa
Signing time:             Wed 17 Sep 2025 17:09:33 +0000
ROA not before:           Wed 17 Sep 2025 17:09:33 +0000
ROA not after:            Tue 16 Dec 2025 18:09:33 +0000
asID:                     23473
IP address blocks:        76.10.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:02:77:c2:ba:67:4c:2e:b4:03:60:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 17 17:09:33 2025 GMT
            Not After : Dec 16 18:09:33 2025 GMT
        Subject: CN=9e66c71b-c575-4267-b8b0-091015e26513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7c:92:76:5a:18:96:03:c5:76:e7:a2:f1:7f:
                    cc:2c:61:a9:0b:62:c7:fa:e4:06:1d:8c:df:2a:e8:
                    30:80:4e:22:4f:f3:65:30:fb:4e:b4:dc:db:02:55:
                    1b:50:2d:20:0d:f4:75:89:8f:9d:e6:cb:4b:0c:86:
                    03:44:f6:c5:ea:27:6d:0e:e7:6a:e8:99:fb:7f:de:
                    38:98:06:7e:d1:cc:dc:e4:de:d3:4f:b0:3a:b5:f3:
                    69:d7:97:87:a3:45:e5:87:d6:c4:37:61:fe:6d:26:
                    e7:30:d1:a7:bd:5a:a7:74:08:78:71:e8:e8:72:ab:
                    e0:76:a1:b9:cc:81:21:79:db:85:1a:c6:a5:4c:09:
                    d3:4b:f5:38:e8:e7:cd:06:a6:45:4e:92:c4:ef:a2:
                    50:a1:2d:4d:59:72:c3:99:3f:4e:90:70:2d:33:3d:
                    42:5b:26:8f:29:57:10:c7:04:25:30:33:ba:04:ae:
                    bd:34:12:f0:02:2f:a0:25:73:55:02:2c:71:fb:d2:
                    8a:f3:9e:55:12:40:f7:28:bd:97:9a:aa:a7:a1:29:
                    50:f9:96:8d:8b:d0:48:b5:4c:ab:91:9e:8e:03:08:
                    ab:eb:5b:42:e8:cb:2c:f9:ff:62:43:78:fb:ac:6c:
                    1b:78:81:4f:35:02:0a:b6:d8:b2:93:f4:c5:27:53:
                    04:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:93:D3:11:5C:89:24:10:89:89:68:FB:04:EA:1A:41:5A:64:28:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a882745c-46c2-3b5f-96c4-d7de25c95eba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.10.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:11:c6:a7:12:e3:d5:93:07:d3:d4:7a:9b:e8:d4:39:00:84:
         c9:87:12:0f:ba:95:13:a8:05:13:39:81:06:c5:ad:9d:64:e4:
         56:73:32:b5:ce:6b:91:7d:b6:8e:36:f8:7f:6f:15:ec:96:1c:
         9a:f7:82:41:56:f3:94:74:70:63:86:b9:12:52:e9:1f:02:bd:
         f1:8f:df:b6:51:6f:ae:32:84:7e:34:86:b2:0d:c0:29:6a:95:
         cc:ae:25:45:04:8a:be:54:fe:e6:ce:a8:15:f4:1f:5b:a1:5c:
         c8:26:c5:dc:4d:7a:e2:b7:68:5a:23:64:64:62:67:3c:d1:01:
         79:4f:9d:49:03:f6:12:d6:31:4a:3a:8f:ff:03:a0:15:1d:9d:
         cd:c9:a1:1d:a4:37:83:7a:e5:54:8f:17:ba:52:93:52:e6:bd:
         1c:05:b6:57:16:f2:c1:24:93:f0:fa:9d:f4:18:8b:d5:6e:e9:
         e7:c5:8c:12:bb:ce:c6:9e:70:16:06:7d:21:13:b5:ba:58:db:
         a5:27:cb:81:a2:b1:36:ca:ef:9b:5a:67:73:bb:d8:74:a1:e6:
         a6:ce:53:d2:6b:65:0c:44:32:8d:11:ee:f9:38:91:ff:60:9c:
         ee:9d:ee:b1:66:a5:d1:6b:ea:bd:bd:cf:ff:35:7a:0a:a3:ef:
         9e:d0:30:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs6AnfCumdMLrQDYCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI1MDkxNzE3MDkzM1oXDTI1MTIxNjE4MDkzM1owLzEtMCsGA1UEAxMk
OWU2NmM3MWItYzU3NS00MjY3LWI4YjAtMDkxMDE1ZTI2NTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3ySdloYlgPFduei8X/MLGGpC2LH+uQGHYzf
KugwgE4iT/NlMPtOtNzbAlUbUC0gDfR1iY+d5stLDIYDRPbF6idtDudq6Jn7f944
mAZ+0czc5N7TT7A6tfNp15eHo0Xlh9bEN2H+bSbnMNGnvVqndAh4cejocqvgdqG5
zIEheduFGsalTAnTS/U46OfNBqZFTpLE76JQoS1NWXLDmT9OkHAtMz1CWyaPKVcQ
xwQlMDO6BK69NBLwAi+gJXNVAixx+9KK855VEkD3KL2XmqqnoSlQ+ZaNi9BItUyr
kZ6OAwir61tC6Mss+f9iQ3j7rGwbeIFPNQIKttiyk/TFJ1MEqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJKT0xFciSQQiYlo+wTqGkFaZCiSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvYTg4Mjc0NWMtNDZjMi0z
YjVmLTk2YzQtZDdkZTI1Yzk1ZWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTAoAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFQRxqcS49WTB9PUepvo1DkAhMmHEg+6lROoBRM5gQbFrZ1k5FZzMrXO
a5F9to42+H9vFeyWHJr3gkFW85R0cGOGuRJS6R8CvfGP37ZRb64yhH40hrINwClq
lcyuJUUEir5U/ubOqBX0H1uhXMgmxdxNeuK3aFojZGRiZzzRAXlPnUkD9hLWMUo6
j/8DoBUdnc3JoR2kN4N65VSPF7pSk1LmvRwFtlcW8sEkk/D6nfQYi9Vu6efFjBK7
zsaecBYGfSETtbpY26Uny4GisTbK75taZ3O72HSh5qbOU9JrZQxEMo0R7vk4kf9g
nO6d7rFmpdFr6r29z/81egqj757QMNU=
-----END CERTIFICATE-----
Generated at Fri Oct 10 03:58:26 2025 by rpki-client