Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/76a518c4-ae63-39c1-b643-eda9f57b2ff6.roa
File:                     76a518c4-ae63-39c1-b643-eda9f57b2ff6.roa (raw, json)
Hash identifier:          HMBwG0eqa6fFqV+aYQxzU7BYyLRdMTIyCfVv8DNZp8w=
Subject key identifier:   CC:BC:90:5A:9D:66:91:E1:81:CD:A3:EE:47:65:16:7E:44:08:2D:84
Certificate issuer:       /CN=40b39b2a-cdef-4445-ace8-bb39d43cda5d
Certificate serial:       010D0C9F4328584E8DEF9ECA62D1F39A4DEB0800
Authority key identifier: DA:82:75:7B:6B:78:B8:76:D7:46:CA:D8:81:7A:BF:9A:0B:16:5B:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/76a518c4-ae63-39c1-b643-eda9f57b2ff6.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        204.8.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:9e:ca:62:d1:f3:9a:4d:eb:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40b39b2a-cdef-4445-ace8-bb39d43cda5d
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=ee272490-4716-47ca-a0ba-fa1fcc083ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c2:0a:cc:b9:6b:58:6b:3e:13:ce:73:70:04:
                    59:aa:29:38:92:61:aa:a3:32:03:ff:80:de:19:00:
                    89:dc:b7:29:d8:f0:35:4a:ae:52:99:c7:ce:5a:42:
                    e6:b9:bb:05:8e:66:af:f1:e3:7b:76:7c:3b:20:9c:
                    65:7a:b9:df:1c:c2:cd:df:a8:fb:ed:08:5b:c5:93:
                    d2:0b:b2:94:d8:fc:a4:92:a4:bf:3f:98:8e:c3:a9:
                    71:3d:cf:7d:28:27:6c:aa:95:f7:3c:15:fc:74:a5:
                    f4:ab:06:df:87:b6:a0:7b:d6:48:c1:b5:20:35:bb:
                    9e:d3:64:e7:88:31:8c:2a:26:7b:5b:5e:72:b6:0b:
                    99:48:75:28:72:de:5b:eb:99:88:4c:1b:43:12:14:
                    c2:b9:b2:aa:e7:05:39:43:95:ff:17:60:12:e3:98:
                    37:30:95:60:ff:bd:c8:37:ec:dc:9d:18:27:47:cb:
                    83:90:d5:3f:94:2e:d7:69:86:9f:4d:c9:dc:5a:f5:
                    88:0f:81:61:aa:f7:5d:c9:11:5b:da:70:3b:2e:3d:
                    38:23:46:0c:12:4a:f0:0e:20:bf:b6:43:00:5b:af:
                    0a:72:70:ab:18:bc:ab:00:db:fc:54:e8:82:58:c7:
                    8f:94:c7:0f:b7:b1:09:c7:a6:43:2f:2f:3d:6d:08:
                    d4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BC:90:5A:9D:66:91:E1:81:CD:A3:EE:47:65:16:7E:44:08:2D:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/76a518c4-ae63-39c1-b643-eda9f57b2ff6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.crl

            X509v3 Authority Key Identifier:
                keyid:DA:82:75:7B:6B:78:B8:76:D7:46:CA:D8:81:7A:BF:9A:0B:16:5B:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:fc:bb:3d:a9:30:e3:5b:52:65:61:d9:f7:ba:a9:30:05:36:
         33:2c:d8:60:ba:d1:a9:0d:29:35:57:f3:aa:be:00:ed:18:d8:
         98:f1:01:48:ec:87:80:0f:b3:c0:94:77:1e:aa:30:03:fd:31:
         94:60:c0:3a:24:5d:53:6e:93:4e:e0:ef:bc:f0:b9:db:78:06:
         c4:6d:6b:f4:b7:de:3f:87:77:92:ca:6c:97:67:b7:84:e8:3e:
         3d:ef:69:bb:d7:d8:aa:96:24:3a:63:09:ef:0f:5c:49:18:59:
         0e:87:2e:1f:4b:10:e0:f9:9c:92:8e:0c:82:e5:9b:e4:8d:72:
         1f:4c:c3:b6:3d:cb:27:4b:62:5c:00:4c:95:47:4a:57:bd:d2:
         41:e8:1e:6f:fb:d8:28:7b:ae:09:cc:d2:a7:f2:36:fd:3e:bd:
         70:6b:c7:e6:19:c0:bb:51:47:0d:c9:8e:70:5c:d4:b9:c5:42:
         09:7e:ba:0d:67:1e:78:6a:19:71:d2:cd:d6:4d:41:3b:ea:e2:
         d8:f7:36:f9:1c:59:1b:da:2a:0f:2d:e3:a8:55:d6:e0:6a:04:
         d8:18:b4:a3:2b:b7:2d:05:39:df:ef:44:73:e9:f8:dd:a3:c8:
         ed:a2:1e:31:8e:db:9e:e9:62:b6:ca:85:e6:aa:ad:14:90:12:
         bf:04:cc:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N757KYtHzmk3rCAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDBiMzliMmEtY2RlZi00NDQ1LWFjZTgtYmIzOWQ0M2Nk
YTVkMB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk
ZWUyNzI0OTAtNDcxNi00N2NhLWEwYmEtZmExZmNjMDgzZWUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8IKzLlrWGs+E85zcARZqik4kmGqozID/4De
GQCJ3Lcp2PA1Sq5SmcfOWkLmubsFjmav8eN7dnw7IJxlernfHMLN36j77QhbxZPS
C7KU2PykkqS/P5iOw6lxPc99KCdsqpX3PBX8dKX0qwbfh7age9ZIwbUgNbue02Tn
iDGMKiZ7W15ytguZSHUoct5b65mITBtDEhTCubKq5wU5Q5X/F2AS45g3MJVg/73I
N+zcnRgnR8uDkNU/lC7XaYafTcncWvWID4FhqvddyRFb2nA7Lj04I0YMEkrwDiC/
tkMAW68KcnCrGLyrANv8VOiCWMePlMcPt7EJx6ZDLy89bQjU/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMy8kFqdZpHhgc2j7kdlFn5ECC2EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80MGIz
OWIyYS1jZGVmLTQ0NDUtYWNlOC1iYjM5ZDQzY2RhNWQvNzZhNTE4YzQtYWU2My0z
OWMxLWI2NDMtZWRhOWY1N2IyZmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDBiMzliMmEtY2RlZi00NDQ1LWFj
ZTgtYmIzOWQ0M2NkYTVkLzQwYjM5YjJhLWNkZWYtNDQ0NS1hY2U4LWJiMzlkNDNj
ZGE1ZC5jcmwwHwYDVR0jBBgwFoAU2oJ1e2t4uHbXRsrYgXq/mgsWW2IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80MGIzOWIyYS1jZGVmLTQ0NDUtYWNlOC1iYjM5
ZDQzY2RhNWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAitMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD/8uz2pMONbUmVh2fe6qTAFNjMs2GC60akNKTVX86q+AO0Y2JjxAUjs
h4APs8CUdx6qMAP9MZRgwDokXVNuk07g77zwudt4BsRta/S33j+Hd5LKbJdnt4To
Pj3vabvX2KqWJDpjCe8PXEkYWQ6HLh9LEOD5nJKODILlm+SNch9Mw7Y9yydLYlwA
TJVHSle90kHoHm/72Ch7rgnM0qfyNv0+vXBrx+YZwLtRRw3JjnBc1LnFQgl+ug1n
HnhqGXHSzdZNQTvq4tj3NvkcWRvaKg8t46hV1uBqBNgYtKMrty0FOd/vRHPp+N2j
yO2iHjGO257pYrbKheaqrRSQEr8EzI4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:26:13 2026 by rpki-client