Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/76820b0a-ea84-3122-a601-1ee1fc90ed9a.roa
File:                     76820b0a-ea84-3122-a601-1ee1fc90ed9a.roa (raw, json)
Hash identifier:          EYaRqQFEwZ+6vobwsO9jO1dYCcytWn2K2yId02bLY8E=
Subject key identifier:   01:30:82:B5:24:22:2D:80:F1:B5:67:AC:6A:AA:7D:70:5A:A1:0E:9A
Certificate issuer:       /CN=ae67d891-3b16-4302-bf8b-4adb69436dbe
Certificate serial:       010D0C9F4328584EA7917F5AEF67F84FC192C6A4
Authority key identifier: A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/76820b0a-ea84-3122-a601-1ee1fc90ed9a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     26831
IP address blocks:        209.124.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:7f:5a:ef:67:f8:4f:c1:92:c6:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae67d891-3b16-4302-bf8b-4adb69436dbe
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e9e8e642-1ba2-41b6-b132-4edd67b07500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:24:75:54:39:92:de:0b:ff:89:d0:c5:43:1d:
                    63:b5:e9:51:89:b4:35:d5:77:84:81:54:2f:4b:dd:
                    97:c2:e2:8c:48:be:0a:ac:c1:81:2f:6f:12:fc:84:
                    b6:1a:a8:f6:ab:ca:fa:d8:25:05:83:22:a3:db:f1:
                    97:51:6c:06:1b:b0:73:01:ae:74:e1:9a:e8:40:96:
                    e3:e0:a7:1a:92:53:8d:00:27:51:b1:03:e9:b7:84:
                    9c:20:e0:1e:56:36:5f:c4:92:5f:a1:a9:e1:21:25:
                    0d:66:23:52:c0:5f:a2:c8:57:aa:0c:be:74:70:9b:
                    1c:c5:ad:b9:8d:d9:ee:ea:cc:e2:41:de:ca:dc:0d:
                    ae:da:e2:db:dc:07:cb:9d:dd:82:4f:e7:50:60:7f:
                    06:78:30:41:10:cd:7f:86:58:7a:7f:0c:35:ae:f5:
                    a5:b1:80:08:18:32:28:54:66:c8:e3:da:a2:c0:1a:
                    d8:6d:85:1c:e4:6c:2c:d1:4e:40:88:c2:9c:b2:91:
                    9e:2a:4f:3a:eb:9e:0a:c6:68:be:8d:aa:1c:ff:88:
                    c8:9d:db:b7:b4:e7:c4:3a:54:c0:9b:5f:2d:31:9a:
                    00:39:25:ec:4f:da:43:16:2f:b2:c0:d4:5b:3f:14:
                    42:d5:43:44:6a:99:e4:9e:d8:9d:6f:5f:d8:a1:c6:
                    2a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:30:82:B5:24:22:2D:80:F1:B5:67:AC:6A:AA:7D:70:5A:A1:0E:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/76820b0a-ea84-3122-a601-1ee1fc90ed9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe/ae67d891-3b16-4302-bf8b-4adb69436dbe.crl

            X509v3 Authority Key Identifier:
                keyid:A9:04:D2:8D:FE:69:EA:93:AF:E4:50:87:50:B5:35:CD:BC:9D:90:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ae67d891-3b16-4302-bf8b-4adb69436dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:b3:db:0a:18:b3:66:f9:59:ba:af:e0:5a:a6:02:82:40:e7:
         0d:c9:9b:b9:27:db:9a:50:ba:52:45:3c:18:47:05:a9:48:e3:
         72:77:21:b0:db:d3:57:74:4f:57:3a:91:38:f6:b7:a5:a4:c4:
         05:27:a6:53:bc:2c:12:91:9c:cb:50:1e:77:04:ed:67:82:b7:
         88:cc:f0:bc:3c:b0:1f:2f:15:8d:be:25:53:74:ef:d6:dd:20:
         c8:93:43:23:f7:fe:81:72:c5:23:64:99:1c:d4:a3:b1:61:db:
         1b:c9:04:79:62:5f:77:c6:23:30:b7:64:8f:82:78:1c:be:1a:
         61:95:fb:82:96:49:f6:e0:51:bb:74:59:cd:63:8a:38:8c:22:
         c5:8f:49:7e:4e:86:ad:ef:c2:25:4c:2e:15:7d:2d:e6:4f:c8:
         9e:7b:2b:56:2a:3b:fc:3b:5e:80:c6:c5:90:cd:5c:fd:3c:e9:
         b0:94:7d:2b:7a:01:4f:bd:9e:29:cb:93:a7:03:83:d9:23:92:
         d0:a8:a8:76:a6:62:db:c4:9d:8d:19:6d:86:49:ba:6b:39:0c:
         98:f6:fb:ed:28:92:70:2d:b5:e8:46:a1:82:88:47:cf:40:d4:
         97:ce:82:c3:dd:89:5f:3f:ce:41:1b:0c:08:b0:80:c7:8e:17:
         9e:82:09:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkX9a72f4T8GSxqQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWU2N2Q4OTEtM2IxNi00MzAyLWJmOGItNGFkYjY5NDM2
ZGJlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZTllOGU2NDItMWJhMi00MWI2LWIxMzItNGVkZDY3YjA3NTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSR1VDmS3gv/idDFQx1jtelRibQ11XeEgVQv
S92XwuKMSL4KrMGBL28S/IS2Gqj2q8r62CUFgyKj2/GXUWwGG7BzAa504ZroQJbj
4KcaklONACdRsQPpt4ScIOAeVjZfxJJfoanhISUNZiNSwF+iyFeqDL50cJscxa25
jdnu6sziQd7K3A2u2uLb3AfLnd2CT+dQYH8GeDBBEM1/hlh6fww1rvWlsYAIGDIo
VGbI49qiwBrYbYUc5Gws0U5AiMKcspGeKk86654Kxmi+jaoc/4jIndu3tOfEOlTA
m18tMZoAOSXsT9pDFi+ywNRbPxRC1UNEapnkntidb1/YocYqhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAEwgrUkIi2A8bVnrGqqfXBaoQ6aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hZTY3
ZDg5MS0zYjE2LTQzMDItYmY4Yi00YWRiNjk0MzZkYmUvNzY4MjBiMGEtZWE4NC0z
MTIyLWE2MDEtMWVlMWZjOTBlZDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWU2N2Q4OTEtM2IxNi00MzAyLWJm
OGItNGFkYjY5NDM2ZGJlL2FlNjdkODkxLTNiMTYtNDMwMi1iZjhiLTRhZGI2OTQz
NmRiZS5jcmwwHwYDVR0jBBgwFoAUqQTSjf5p6pOv5FCHULU1zbydkCgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hZTY3ZDg5MS0zYjE2LTQzMDItYmY4Yi00YWRi
Njk0MzZkYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XyOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEOz2woYs2b5Wbqv4FqmAoJA5w3Jm7kn25pQulJFPBhHBalI43J3IbDb
01d0T1c6kTj2t6WkxAUnplO8LBKRnMtQHncE7WeCt4jM8Lw8sB8vFY2+JVN079bd
IMiTQyP3/oFyxSNkmRzUo7Fh2xvJBHliX3fGIzC3ZI+CeBy+GmGV+4KWSfbgUbt0
Wc1jijiMIsWPSX5Ohq3vwiVMLhV9LeZPyJ57K1YqO/w7XoDGxZDNXP086bCUfSt6
AU+9ninLk6cDg9kjktCoqHamYtvEnY0ZbYZJums5DJj2++0oknAttehGoYKIR89A
1JfOgsPdiV8/zkEbDAiwgMeOF56CCYA=
-----END CERTIFICATE-----
Generated at Sat Aug 22 18:11:28 2026 by rpki-client