Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60729c63-ab36-3d52-832f-ee09c1a87bdb.roa
File:                     60729c63-ab36-3d52-832f-ee09c1a87bdb.roa (raw, json)
Hash identifier:          KWAny8DYRdzHA+zwbpuhyGD5O1L5AiT+LFv2JOhrszs=
Subject key identifier:   24:98:43:B4:23:D2:BC:5E:81:F3:AF:69:78:A3:90:79:C7:FD:CD:D6
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E36002E2ECD2FBA2AC18BBA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60729c63-ab36-3d52-832f-ee09c1a87bdb.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33662
IP address blocks:        76.143.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:2e:2e:cd:2f:ba:2a:c1:8b:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=f78ab2fa-cc9a-4cbc-ab18-ae8ba60be4fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3d:2c:e9:e1:ec:11:03:e4:18:8c:0a:28:a5:
                    9c:8b:c6:48:cf:74:87:95:4b:8c:da:1e:a8:06:c1:
                    ed:ff:18:6d:15:ee:f4:14:84:4c:8b:d0:55:4b:08:
                    be:e8:cc:35:5e:dd:3c:38:05:ab:54:fb:5d:d2:36:
                    af:b9:91:a5:65:8c:70:a7:76:65:95:94:0d:a1:8b:
                    c8:85:06:02:42:ea:03:3d:4a:ec:bc:74:03:03:ff:
                    84:19:fb:51:da:48:a4:70:a2:16:ba:50:27:e3:44:
                    68:d1:48:37:5f:1e:1c:f0:2f:7d:a3:0c:57:d8:0b:
                    b6:1c:9a:f3:ed:a6:f4:48:89:99:d3:f9:8d:b3:c1:
                    8b:59:56:30:bd:bf:4e:c3:98:2e:27:74:64:e0:2e:
                    4e:8a:1f:ba:fe:77:5c:40:c7:ec:9f:2a:3e:3b:c6:
                    16:89:35:f1:b4:0f:dc:cd:ea:94:87:4f:29:e1:15:
                    a4:31:f5:2e:95:f0:60:a0:e3:10:53:14:d8:d3:3f:
                    46:5a:ad:86:7f:7b:30:d5:db:cc:df:46:bb:e0:ba:
                    88:34:21:34:e1:92:ba:7e:1a:f0:2c:1d:f9:3e:6b:
                    64:89:d1:82:87:07:ce:6f:99:08:b3:6a:3d:df:c8:
                    13:6e:69:ec:f6:49:98:2f:86:73:28:4c:fe:08:f8:
                    69:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:98:43:B4:23:D2:BC:5E:81:F3:AF:69:78:A3:90:79:C7:FD:CD:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60729c63-ab36-3d52-832f-ee09c1a87bdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.143.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:83:3d:e9:83:af:89:9b:c1:50:3d:83:d7:fc:d5:34:da:8c:
         d1:de:5b:07:aa:1a:f5:7f:4a:c5:9e:9d:62:bd:95:69:fc:ae:
         fa:7b:2d:1f:53:6b:68:9e:b5:63:33:ff:85:44:a8:31:a6:cb:
         22:5b:fe:4e:e4:68:f8:5a:af:20:1d:7a:f9:d0:62:4e:f4:e1:
         3e:f5:c8:4c:26:c0:5b:2f:f1:eb:a7:68:45:95:78:21:bd:2b:
         ed:0b:1b:99:52:4e:d1:32:e3:94:1e:05:bd:2c:13:d4:70:49:
         78:fd:9c:d9:ad:62:db:ba:d4:b4:db:15:5d:c5:d5:ae:e4:82:
         29:36:d3:a7:7a:91:fd:72:c7:07:56:31:a4:83:51:77:29:c7:
         c6:df:f4:10:d7:68:fa:fa:a2:05:01:bb:aa:de:c8:19:ce:01:
         c7:7e:d3:f6:92:49:f7:68:2a:5b:a1:44:a1:fb:98:ba:9f:a6:
         19:e8:5e:2c:b5:77:01:da:1e:c4:2c:cf:a5:54:ed:7d:65:57:
         48:15:0b:e1:c0:6e:46:99:a5:dd:e8:87:21:9d:61:46:8b:e9:
         35:09:17:c6:5e:3d:83:33:9a:de:f1:b9:ed:63:aa:27:7a:aa:
         fd:89:ce:02:e7:e8:51:da:f9:2b:cb:ab:a1:a1:2a:a2:57:30:
         27:2c:dd:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE42AC4uzS+6KsGLugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk
Zjc4YWIyZmEtY2M5YS00Y2JjLWFiMTgtYWU4YmE2MGJlNGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD0s6eHsEQPkGIwKKKWci8ZIz3SHlUuM2h6o
BsHt/xhtFe70FIRMi9BVSwi+6Mw1Xt08OAWrVPtd0javuZGlZYxwp3ZllZQNoYvI
hQYCQuoDPUrsvHQDA/+EGftR2kikcKIWulAn40Ro0Ug3Xx4c8C99owxX2Au2HJrz
7ab0SImZ0/mNs8GLWVYwvb9Ow5guJ3Rk4C5Oih+6/ndcQMfsnyo+O8YWiTXxtA/c
zeqUh08p4RWkMfUulfBgoOMQUxTY0z9GWq2Gf3sw1dvM30a74LqINCE04ZK6fhrw
LB35PmtkidGChwfOb5kIs2o938gTbmns9kmYL4ZzKEz+CPhpcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCSYQ7Qj0rxegfOvaXijkHnH/c3WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjA3MjljNjMtYWIzNi0z
ZDUyLTgzMmYtZWUwOWMxYTg3YmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTI/sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFyDPemDr4mbwVA9g9f81TTajNHeWweqGvV/SsWenWK9lWn8rvp7LR9T
a2ietWMz/4VEqDGmyyJb/k7kaPharyAdevnQYk704T71yEwmwFsv8eunaEWVeCG9
K+0LG5lSTtEy45QeBb0sE9RwSXj9nNmtYtu61LTbFV3F1a7kgik206d6kf1yxwdW
MaSDUXcpx8bf9BDXaPr6ogUBu6reyBnOAcd+0/aSSfdoKluhRKH7mLqfphnoXiy1
dwHaHsQsz6VU7X1lV0gVC+HAbkaZpd3ohyGdYUaL6TUJF8ZePYMzmt7xue1jqid6
qv2JzgLn6FHa+SvLq6GhKqJXMCcs3RU=
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:41:46 2026 by rpki-client