Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/6b0d4b7a-9cda-33f9-a820-773849923e4f.roa
File:                     6b0d4b7a-9cda-33f9-a820-773849923e4f.roa (raw, json)
Hash identifier:          9bWeKjt0mHgCn1+y9Y4qZm+qCtaqYmpJr62fK3GYQ8c=
Subject key identifier:   B4:59:8F:BA:2F:1A:68:C7:75:8F:82:12:B6:1C:21:8B:EE:9C:2A:45
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584D8C2A9E402833535A6D1F9F40
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/6b0d4b7a-9cda-33f9-a820-773849923e4f.roa
Signing time:             Sat 18 Apr 2026 13:00:30 +0000
ROA not before:           Sat 18 Apr 2026 13:00:30 +0000
ROA not after:            Fri 17 Jul 2026 13:00:30 +0000
asID:                     13768
IP address blocks:        76.74.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8c:2a:9e:40:28:33:53:5a:6d:1f:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Apr 18 13:00:30 2026 GMT
            Not After : Jul 17 13:00:30 2026 GMT
        Subject: CN=e9dc3189-6cc9-4e84-b22d-381041e7ad92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7e:ce:63:6b:92:40:a3:54:6f:dc:10:6a:19:
                    21:f2:df:54:b5:18:5f:80:9a:71:0a:9e:a2:28:3b:
                    55:ce:5a:3e:93:6a:a3:6d:f1:de:d7:54:45:f6:72:
                    bd:eb:31:25:1c:02:18:4e:2b:1e:21:3b:82:64:7b:
                    12:e1:94:76:d3:7e:9e:e0:76:da:cf:e5:7d:f6:85:
                    20:9b:26:c8:3c:b0:a3:be:94:38:d0:3b:c2:ce:32:
                    85:3a:84:c9:f7:3c:91:e7:b8:ab:c6:46:2e:68:62:
                    10:34:07:32:32:cd:1a:32:52:f3:38:cf:49:20:10:
                    0e:aa:e6:ec:ef:06:b4:54:71:36:c9:64:a2:f0:04:
                    d9:a4:fc:e8:c1:8c:cb:08:02:5a:6d:50:61:98:0f:
                    79:b4:c0:8b:32:ec:6d:b3:e5:22:5a:db:a8:d4:6c:
                    b2:01:fd:a2:92:1a:22:45:ef:12:d6:b4:fc:68:38:
                    f5:12:77:09:4d:51:ae:04:50:9a:96:97:88:41:2e:
                    08:da:fa:0f:e1:19:a3:49:16:58:f5:e9:e7:5c:c3:
                    35:95:6f:0c:ad:45:11:09:ed:b2:a8:7d:9e:d9:8b:
                    5d:c7:ac:7d:81:de:7b:9d:e0:13:bc:25:b1:cf:bc:
                    0a:64:1a:aa:1c:a2:be:1e:51:1a:42:45:0a:0f:70:
                    30:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:59:8F:BA:2F:1A:68:C7:75:8F:82:12:B6:1C:21:8B:EE:9C:2A:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/6b0d4b7a-9cda-33f9-a820-773849923e4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.74.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:27:94:d3:eb:ea:f9:67:37:ac:39:8e:f5:6b:34:ad:7f:64:
         2b:af:58:b9:6d:08:d4:65:51:a7:e8:c8:aa:25:e7:c5:21:61:
         92:b7:b3:3f:47:f5:63:3d:37:99:42:2a:04:96:15:9e:1c:97:
         3f:59:b4:08:35:7c:2e:a9:05:08:be:45:7c:2a:d6:af:7d:9b:
         67:df:d9:25:80:ef:04:e2:42:40:b4:21:cf:d7:9a:c8:80:96:
         e5:67:76:d1:9f:86:c0:e9:d1:ad:58:17:03:6a:10:59:c0:8c:
         65:91:88:78:f1:12:4e:1f:90:2e:02:85:04:02:9b:d2:55:3c:
         e1:e5:f6:02:6f:21:02:62:53:7d:09:17:44:49:97:f7:95:6b:
         ea:0b:36:6d:df:f4:be:ad:75:23:65:3f:15:94:6e:0b:ac:31:
         89:d9:ce:b9:b8:62:a6:b2:b4:a9:2c:59:22:fb:d0:c7:8e:a8:
         5d:ff:b8:da:a4:af:46:5c:d3:a6:74:2e:e5:ae:c3:bf:15:e3:
         d7:d9:d8:37:c9:9f:b5:2d:c6:ba:d3:c3:07:90:e8:77:78:eb:
         b0:bc:05:6d:57:a9:ab:9f:6e:73:7a:9f:7c:52:60:4b:da:97:
         78:80:cd:b5:75:86:81:21:9c:79:61:b5:fe:5a:46:bb:c8:48:
         f9:97:68:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKp5AKDNTWm0fn0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk
YjEwMB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk
ZTlkYzMxODktNmNjOS00ZTg0LWIyMmQtMzgxMDQxZTdhZDkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhH7OY2uSQKNUb9wQahkh8t9UtRhfgJpxCp6i
KDtVzlo+k2qjbfHe11RF9nK96zElHAIYTiseITuCZHsS4ZR2036e4Hbaz+V99oUg
mybIPLCjvpQ40DvCzjKFOoTJ9zyR57irxkYuaGIQNAcyMs0aMlLzOM9JIBAOqubs
7wa0VHE2yWSi8ATZpPzowYzLCAJabVBhmA95tMCLMuxts+UiWtuo1GyyAf2ikhoi
Re8S1rT8aDj1EncJTVGuBFCalpeIQS4I2voP4RmjSRZY9ennXMM1lW8MrUURCe2y
qH2e2Ytdx6x9gd57neATvCWxz7wKZBqqHKK+HlEaQkUKD3AwzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLRZj7ovGmjHdY+CErYcIYvunCpFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3
OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvNmIwZDRiN2EtOWNkYS0z
M2Y5LWE4MjAtNzczODQ5OTIzZTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0
YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1
ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl
NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATEqJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABAnlNPr6vlnN6w5jvVrNK1/ZCuvWLltCNRlUafoyKol58UhYZK3sz9H
9WM9N5lCKgSWFZ4clz9ZtAg1fC6pBQi+RXwq1q99m2ff2SWA7wTiQkC0Ic/XmsiA
luVndtGfhsDp0a1YFwNqEFnAjGWRiHjxEk4fkC4ChQQCm9JVPOHl9gJvIQJiU30J
F0RJl/eVa+oLNm3f9L6tdSNlPxWUbgusMYnZzrm4YqaytKksWSL70MeOqF3/uNqk
r0Zc06Z0LuWuw78V49fZ2DfJn7UtxrrTwweQ6Hd467C8BW1XqaufbnN6n3xSYEva
l3iAzbV1hoEhnHlhtf5aRrvISPmXaAI=
-----END CERTIFICATE-----
Generated at Sun May 3 00:52:00 2026 by rpki-client