Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2d232f3-7bf8-373f-a7b8-8341022d2daf.roa
File:                     d2d232f3-7bf8-373f-a7b8-8341022d2daf.roa (raw, json)
Hash identifier:          L0Hz+1pbOpVYuybPkpjXW4X5hbOei9CH5J9IxzflGig=
Subject key identifier:   B9:87:20:B8:D2:26:DB:F1:02:C8:14:6C:26:B2:48:48:6B:D7:AA:83
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584E36006E7E650F2774C5BFDB60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2d232f3-7bf8-373f-a7b8-8341022d2daf.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     33490
IP address blocks:        76.138.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:36:00:6e:7e:65:0f:27:74:c5:bf:db:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=e88295e8-6499-40af-aa6f-24837a1a4742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2e:65:0d:bc:a4:dd:85:ea:6a:16:2d:d2:ee:
                    e6:ca:74:28:57:5d:49:14:f3:43:3b:ad:bc:38:0d:
                    2d:b1:de:31:c1:bb:18:7a:bf:3f:75:c8:bb:36:bf:
                    ee:75:c1:15:6b:4e:b2:95:28:06:dc:36:60:16:73:
                    46:c1:34:8e:ea:6e:cd:9d:48:ba:00:f3:e1:4a:af:
                    f9:22:45:86:f6:b5:ee:b9:aa:dc:d7:fa:8c:af:7f:
                    e1:2d:b2:15:da:b8:71:4b:69:ea:27:03:b5:81:61:
                    d8:c4:ae:c4:4f:36:71:ad:26:14:ac:7b:ea:5d:82:
                    23:92:8e:e2:ba:73:20:90:f1:32:71:64:6b:39:67:
                    e2:ea:b9:68:81:4e:71:4b:12:d1:0f:26:93:00:9e:
                    5e:16:89:d1:2b:e9:e2:bf:e8:78:21:6e:b2:3f:0e:
                    fe:39:25:e0:bc:2e:49:77:31:44:3f:15:f8:8b:d3:
                    b2:a5:ff:eb:fb:e4:6c:40:21:f6:49:fe:a4:41:04:
                    79:69:11:b4:d4:35:ad:e3:38:c6:ae:29:29:8b:d9:
                    07:8e:85:ee:89:2a:21:6b:72:13:bc:e2:fe:ef:61:
                    78:5f:62:c7:9e:02:49:d3:57:b3:3b:d5:27:e6:a8:
                    17:e2:87:f1:8b:b2:9c:fe:c5:46:a5:1b:58:02:0a:
                    43:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:87:20:B8:D2:26:DB:F1:02:C8:14:6C:26:B2:48:48:6B:D7:AA:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2d232f3-7bf8-373f-a7b8-8341022d2daf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.138.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:50:df:db:a7:6f:42:16:d1:e9:93:ab:5d:17:01:e3:4b:d5:
         de:9e:19:08:34:6a:c2:84:5c:51:73:cc:c8:11:88:06:45:f9:
         df:3c:eb:27:40:38:36:4d:f3:cd:c1:7a:eb:3e:33:f2:e7:39:
         f5:14:59:30:c4:53:01:c7:4c:59:4e:30:45:8a:7f:15:a8:47:
         81:42:84:2c:36:3e:05:64:e3:ca:fe:f5:2a:27:a8:4e:ac:3f:
         10:c5:4d:6c:49:b8:fd:f6:c1:ea:ff:2c:58:2a:f5:b3:6c:94:
         7e:94:a4:43:2a:b6:1a:b1:9c:99:75:31:54:fe:0b:bc:9f:37:
         c1:88:0f:0e:54:0d:a8:2f:77:cd:e3:90:c7:39:5f:1c:08:1f:
         ca:85:a7:c6:73:ba:9e:d3:89:34:26:0e:cc:f0:e0:5d:7e:a1:
         6d:12:2f:85:6f:17:e4:76:b7:de:b3:9f:7c:41:e1:b5:8b:fe:
         2a:1a:1f:c8:23:ee:a6:ae:d8:3c:d4:f4:2c:a4:a3:6d:b3:a6:
         33:52:84:03:c6:b2:5e:df:46:35:e1:6c:7b:bf:d8:d6:77:8b:
         ac:ef:84:e5:7e:a7:23:8b:b1:69:69:fb:da:3c:5d:53:df:11:
         10:27:01:3f:6a:66:85:59:65:d4:6e:08:bf:50:7f:10:82:0e:
         a0:d9:50:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE42AG5+ZQ8ndMW/22AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk
ZTg4Mjk1ZTgtNjQ5OS00MGFmLWFhNmYtMjQ4MzdhMWE0NzQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS5lDbyk3YXqahYt0u7mynQoV11JFPNDO628
OA0tsd4xwbsYer8/dci7Nr/udcEVa06ylSgG3DZgFnNGwTSO6m7NnUi6APPhSq/5
IkWG9rXuuarc1/qMr3/hLbIV2rhxS2nqJwO1gWHYxK7ETzZxrSYUrHvqXYIjko7i
unMgkPEycWRrOWfi6rlogU5xSxLRDyaTAJ5eFonRK+niv+h4IW6yPw7+OSXgvC5J
dzFEPxX4i9Oypf/r++RsQCH2Sf6kQQR5aRG01DWt4zjGrikpi9kHjoXuiSoha3IT
vOL+72F4X2LHngJJ01ezO9Un5qgX4ofxi7Kc/sVGpRtYAgpDjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLmHILjSJtvxAsgUbCaySEhr16qDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDJkMjMyZjMtN2JmOC0z
NzNmLWE3YjgtODM0MTAyMmQyZGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTIqwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA9Q39unb0IW0emTq10XAeNL1d6eGQg0asKEXFFzzMgRiAZF+d886ydA
ODZN883Beus+M/LnOfUUWTDEUwHHTFlOMEWKfxWoR4FChCw2PgVk48r+9SonqE6s
PxDFTWxJuP32wer/LFgq9bNslH6UpEMqthqxnJl1MVT+C7yfN8GIDw5UDagvd83j
kMc5XxwIH8qFp8Zzup7TiTQmDszw4F1+oW0SL4VvF+R2t96zn3xB4bWL/ioaH8gj
7qau2DzU9Cyko22zpjNShAPGsl7fRjXhbHu/2NZ3i6zvhOV+pyOLsWlp+9o8XVPf
ERAnAT9qZoVZZdRuCL9QfxCCDqDZUBM=
-----END CERTIFICATE-----
Generated at Wed Jul 22 00:18:13 2026 by rpki-client