Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/372f9bb5-348c-3a6e-baa6-de9c27d9d273.roa
File:                     372f9bb5-348c-3a6e-baa6-de9c27d9d273.roa (raw, json)
Hash identifier:          oV56IY+Fdpz1nfMBGzXA/qKWxQH1HbFAyULf8xmVbi0=
Subject key identifier:   3C:68:73:9B:24:C0:3C:B9:8B:B7:CC:B9:BF:3A:5B:8C:FC:5F:EB:77
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584ED432508195368E95EC745B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/372f9bb5-348c-3a6e-baa6-de9c27d9d273.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     22258
IP address blocks:        76.138.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:32:50:81:95:36:8e:95:ec:74:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=c4ffe030-e9d8-40a0-b4b9-c28a7dede2b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:40:7a:cb:3e:1f:45:44:ed:cf:64:38:bf:a1:
                    03:6d:fc:d7:f9:b5:87:d8:ed:0b:9c:0d:25:d8:f0:
                    1e:f5:0c:3a:ea:87:6c:51:85:e0:e2:6e:a5:40:fe:
                    82:92:fa:51:5e:1a:75:7b:4e:9c:6b:cc:04:4a:9a:
                    d9:97:e9:b5:1c:32:18:33:67:03:9c:05:d2:4c:42:
                    52:c1:31:1c:e8:4b:f5:4e:b0:b1:6d:5f:c9:bf:30:
                    f6:b1:68:1e:43:2d:f6:42:68:f5:5c:5a:b4:e3:81:
                    49:89:9c:6e:75:dd:e6:49:d4:37:57:8d:de:cf:a0:
                    8e:0d:d4:22:da:fd:df:c0:ed:4c:f3:e3:9b:fc:fe:
                    f6:08:c7:b5:5f:02:24:94:07:36:37:0a:56:4e:2d:
                    ea:ec:ff:c2:c0:84:61:e4:2c:98:19:0f:62:bb:e5:
                    bd:36:01:56:f5:4d:82:78:3f:01:39:45:cf:b5:5b:
                    ca:19:f3:25:28:a8:b3:1f:17:d7:6b:f1:93:05:e5:
                    aa:fd:13:1c:a5:9b:d6:e5:b3:5a:56:37:5b:ff:ad:
                    bc:16:52:9b:ae:bc:f3:1b:c1:c6:b2:90:b2:4b:03:
                    e0:9b:5a:60:12:eb:7d:e3:f9:74:27:c5:c8:ef:0a:
                    05:91:92:7d:3c:86:ff:8a:40:9b:f6:8e:84:5c:bd:
                    be:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:68:73:9B:24:C0:3C:B9:8B:B7:CC:B9:BF:3A:5B:8C:FC:5F:EB:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/372f9bb5-348c-3a6e-baa6-de9c27d9d273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.138.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:aa:36:27:92:71:f7:a6:86:c3:96:0f:5c:0d:92:10:33:dc:
         10:0b:44:96:6e:47:49:d1:18:17:fb:24:fa:ef:67:81:1a:f3:
         d8:53:4c:0f:51:cd:5b:7b:00:f8:86:f4:c2:b6:d2:23:1f:48:
         0b:49:69:9a:54:7a:74:30:1e:7f:71:ef:f5:db:44:ea:c9:7e:
         13:56:d2:4c:c9:d3:60:12:64:ff:73:f6:fe:d9:cc:f9:68:41:
         c5:f1:93:bd:0c:ff:3f:f7:69:df:9c:92:e4:f1:2a:5f:3e:83:
         8a:4f:b8:92:51:ba:91:c7:7f:49:25:34:65:d6:ae:b7:8b:6e:
         c2:f0:f9:83:36:41:91:aa:ff:6d:b6:74:a2:ed:86:03:4b:dd:
         70:94:c1:36:95:12:3f:df:dd:b9:5b:4b:87:30:89:8a:2b:48:
         c1:a1:49:3e:be:b6:6d:1e:2d:1f:f7:fb:fc:95:14:52:b8:01:
         a8:26:de:0a:c3:b3:26:85:c8:d0:73:93:6f:35:6e:3f:55:fa:
         45:b1:8b:45:89:c1:51:23:70:c8:f1:cb:91:66:95:8e:73:3a:
         50:25:54:04:fd:c7:ba:76:ee:89:45:ca:11:0c:a0:72:2b:be:
         f8:c5:ee:9c:e8:fd:b1:7b:66:75:3e:16:72:bb:d5:36:74:0e:
         18:80:76:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMlCBlTaOlex0WwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk
YzRmZmUwMzAtZTlkOC00MGEwLWI0YjktYzI4YTdkZWRlMmI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0B6yz4fRUTtz2Q4v6EDbfzX+bWH2O0LnA0l
2PAe9Qw66odsUYXg4m6lQP6CkvpRXhp1e06ca8wESprZl+m1HDIYM2cDnAXSTEJS
wTEc6Ev1TrCxbV/JvzD2sWgeQy32Qmj1XFq044FJiZxudd3mSdQ3V43ez6CODdQi
2v3fwO1M8+Ob/P72CMe1XwIklAc2NwpWTi3q7P/CwIRh5CyYGQ9iu+W9NgFW9U2C
eD8BOUXPtVvKGfMlKKizHxfXa/GTBeWq/RMcpZvW5bNaVjdb/628FlKbrrzzG8HG
spCySwPgm1pgEut94/l0J8XI7woFkZJ9PIb/ikCb9o6EXL2+swIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDxoc5skwDy5i7fMub86W4z8X+t3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzcyZjliYjUtMzQ4Yy0z
YTZlLWJhYTYtZGU5YzI3ZDlkMjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIpQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABuqNieScfemhsOWD1wNkhAz3BALRJZuR0nRGBf7JPrvZ4Ea89hTTA9R
zVt7APiG9MK20iMfSAtJaZpUenQwHn9x7/XbROrJfhNW0kzJ02ASZP9z9v7ZzPlo
QcXxk70M/z/3ad+ckuTxKl8+g4pPuJJRupHHf0klNGXWrreLbsLw+YM2QZGq/222
dKLthgNL3XCUwTaVEj/f3blbS4cwiYorSMGhST6+tm0eLR/3+/yVFFK4Aagm3grD
syaFyNBzk281bj9V+kWxi0WJwVEjcMjxy5FmlY5zOlAlVAT9x7p27olFyhEMoHIr
vvjF7pzo/bF7ZnU+FnK71TZ0DhiAdko=
-----END CERTIFICATE-----
Generated at Sat Sep 5 14:22:16 2026 by rpki-client