Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3fc0868f-e013-3737-8610-9c5982861b4e.roa
File:                     3fc0868f-e013-3737-8610-9c5982861b4e.roa (raw, json)
Hash identifier:          6+0apLSfM/ezq0b1dycnFNkH/vc7uyV43LwUk5O9Oyk=
Subject key identifier:   9C:2F:7F:AB:47:32:52:26:AD:4F:B5:C6:1F:44:52:BF:38:C2:7F:11
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584CAE57311E5D3843CA15CD0A80
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3fc0868f-e013-3737-8610-9c5982861b4e.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     12083
IP address blocks:        66.216.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:31:1e:5d:38:43:ca:15:cd:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=0b399785-d9ea-4849-b94c-fd2e2238069c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8d:93:26:8b:9c:e0:be:94:13:65:e8:6b:77:
                    34:ba:7f:e3:d0:31:fc:a7:b8:ce:6f:65:e7:88:b5:
                    70:d0:77:fd:a4:db:8b:6d:42:80:55:f2:53:f0:df:
                    f9:21:01:be:5f:e2:4b:67:81:1d:fa:f3:72:6f:ea:
                    2c:38:3d:70:df:23:e5:10:c2:fd:2e:af:53:36:92:
                    eb:d9:5b:05:83:a6:40:97:a0:71:d3:28:73:da:8e:
                    d7:71:73:af:32:2b:b8:49:1e:8d:c7:34:08:5a:c3:
                    bf:4e:28:b1:5f:2d:01:1c:5c:48:58:37:42:52:0d:
                    53:02:5c:ed:6c:2a:34:a3:7f:9a:01:9f:58:42:2e:
                    6c:f3:72:9f:88:87:65:8c:17:36:6b:6c:1a:6b:dc:
                    f6:4f:62:a2:87:24:7d:6e:b5:91:7b:83:7d:be:e5:
                    02:4e:01:82:19:90:0d:ae:96:a9:cc:f1:75:48:c3:
                    8e:5f:fc:96:da:d7:71:59:b5:3f:3c:21:9d:80:95:
                    51:d1:1a:67:81:a7:6a:7a:6d:34:e5:cd:d2:cd:9b:
                    88:6c:5a:02:df:8a:eb:b3:a7:09:33:72:f7:33:5d:
                    6f:de:10:90:04:a2:02:8c:e7:72:32:61:1b:92:ca:
                    f8:dd:b2:c3:01:a7:ed:ad:75:21:69:b7:ed:49:31:
                    04:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:2F:7F:AB:47:32:52:26:AD:4F:B5:C6:1F:44:52:BF:38:C2:7F:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3fc0868f-e013-3737-8610-9c5982861b4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.216.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:0a:aa:2c:79:27:c6:de:76:07:23:bd:ff:9b:d4:e3:9f:12:
         cf:1d:13:d6:b7:2c:05:e9:d7:de:7f:e3:3a:cf:93:2d:f0:68:
         8e:dd:07:2f:aa:40:3d:78:62:17:e5:bc:f5:71:b7:c9:9a:66:
         df:bc:43:7c:52:54:ea:db:42:0b:24:f2:7c:6b:ec:63:00:fa:
         ab:eb:26:44:9d:22:e1:2d:a6:38:da:1e:f5:da:0a:ab:70:39:
         df:80:4e:79:9e:dc:0b:7d:14:e6:39:b3:c1:20:0b:c3:ea:66:
         c9:0c:21:66:37:63:ad:fc:85:6b:68:da:cd:98:e8:76:ae:0d:
         92:34:6f:03:b2:ee:17:8b:cd:16:c4:be:14:4f:23:b0:9f:42:
         d1:ee:a5:63:f2:b3:57:5a:0d:f6:da:20:11:d9:bc:ce:23:37:
         ad:d9:4d:9f:b8:4b:78:59:4d:e4:40:b6:5b:c6:aa:1f:78:f3:
         16:68:2a:03:1e:07:ec:8b:8c:79:b2:a8:80:ea:88:f0:e8:5e:
         1e:8c:b2:6e:42:c5:e0:eb:f3:a0:aa:4b:79:31:11:01:d8:2f:
         b5:18:1d:f4:5e:c3:3b:95:32:3e:2a:50:1e:e4:30:db:e8:4c:
         04:e5:13:4d:0b:f9:c3:83:7e:f8:61:3c:19:7e:9b:90:c4:4d:
         32:35:3b:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVzEeXThDyhXNCoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm
NWZlMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
MGIzOTk3ODUtZDllYS00ODQ5LWI5NGMtZmQyZTIyMzgwNjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt42TJouc4L6UE2Xoa3c0un/j0DH8p7jOb2Xn
iLVw0Hf9pNuLbUKAVfJT8N/5IQG+X+JLZ4Ed+vNyb+osOD1w3yPlEML9Lq9TNpLr
2VsFg6ZAl6Bx0yhz2o7XcXOvMiu4SR6NxzQIWsO/TiixXy0BHFxIWDdCUg1TAlzt
bCo0o3+aAZ9YQi5s83KfiIdljBc2a2waa9z2T2KihyR9brWRe4N9vuUCTgGCGZAN
rpapzPF1SMOOX/yW2tdxWbU/PCGdgJVR0Rpngadqem005c3SzZuIbFoC34rrs6cJ
M3L3M11v3hCQBKICjOdyMmEbksr43bLDAaftrXUhabftSTEEGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJwvf6tHMlImrU+1xh9EUr84wn8RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl
MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvM2ZjMDg2OGYtZTAxMy0z
NzM3LTg2MTAtOWM1OTgyODYxYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2
ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl
ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2
N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQtjFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJQKqix5J8bedgcjvf+b1OOfEs8dE9a3LAXp195/4zrPky3waI7dBy+q
QD14YhflvPVxt8maZt+8Q3xSVOrbQgsk8nxr7GMA+qvrJkSdIuEtpjjaHvXaCqtw
Od+ATnme3At9FOY5s8EgC8PqZskMIWY3Y638hWto2s2Y6HauDZI0bwOy7heLzRbE
vhRPI7CfQtHupWPys1daDfbaIBHZvM4jN63ZTZ+4S3hZTeRAtlvGqh948xZoKgMe
B+yLjHmyqIDqiPDoXh6Msm5CxeDr86CqS3kxEQHYL7UYHfRewzuVMj4qUB7kMNvo
TATlE00L+cODfvhhPBl+m5DETTI1Ows=
-----END CERTIFICATE-----
Generated at Thu Feb 26 12:18:21 2026 by rpki-client