Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/21d603d4-2ee1-33b9-bdb1-2624427e3137.roa
File:                     21d603d4-2ee1-33b9-bdb1-2624427e3137.roa (raw, json)
Hash identifier:          nxPX23tmlDSNTk0a5BaqUsWVbgIt0DNjPEdi33NFCAA=
Subject key identifier:   20:E0:28:AA:FE:EE:FC:82:7F:2B:91:56:64:8C:F2:33:A4:E8:9A:F6
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584F4542901B6D7A5321CFE5C400
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/21d603d4-2ee1-33b9-bdb1-2624427e3137.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     12083
IP address blocks:        75.76.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:90:1b:6d:7a:53:21:cf:e5:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=acf8daa3-95b1-404e-a361-03c382029d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:78:c4:1b:e3:43:34:ea:2c:40:9b:6d:21:08:
                    e5:8b:c4:66:58:00:0d:86:7b:7c:ae:34:79:58:53:
                    b5:e2:0d:33:1c:17:bf:71:bc:d0:42:cb:ed:82:32:
                    ba:cf:33:3d:43:93:72:ac:67:cb:49:b4:a9:29:f2:
                    6e:19:e5:a3:84:40:f2:f4:59:07:31:68:3c:43:21:
                    cb:59:b1:d7:0b:03:41:42:73:60:74:8f:c7:6a:3d:
                    ee:4f:be:8c:4d:24:9a:f5:ea:70:9b:86:d3:f4:49:
                    87:b0:fc:0b:b9:4d:ee:f8:24:ec:d8:de:5c:64:2b:
                    57:74:9b:30:11:94:72:ac:0d:e0:a6:79:ae:df:06:
                    45:17:90:6c:ef:72:6a:cc:bc:c5:3a:ee:01:76:7b:
                    c0:3d:3f:c5:12:cf:eb:6a:e0:36:ee:2c:b4:4f:22:
                    cb:6a:3f:46:59:15:c4:32:97:ae:4b:f2:04:05:89:
                    bc:e5:cb:95:d0:b6:a3:b3:83:cd:0a:e2:5a:40:e6:
                    b1:ba:7f:d1:e1:c6:cc:6e:48:24:4e:4c:e2:66:22:
                    45:0b:9b:a9:8b:22:ba:d0:53:3b:84:01:d0:b8:ff:
                    61:3d:96:e9:40:a7:9f:6e:04:7b:a3:77:9a:83:ee:
                    ad:2d:8c:46:5f:d4:6e:3f:3d:18:7b:2b:43:d4:a7:
                    3d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E0:28:AA:FE:EE:FC:82:7F:2B:91:56:64:8C:F2:33:A4:E8:9A:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/21d603d4-2ee1-33b9-bdb1-2624427e3137.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.76.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:da:3c:06:b1:b8:e5:fb:94:07:4b:c1:cc:79:39:85:e8:3e:
         be:59:ad:7b:8c:f1:49:90:37:e6:74:a5:04:e7:35:2d:29:bc:
         53:bf:41:22:ab:bf:77:e9:90:95:ce:01:e2:03:f2:b4:a2:ab:
         90:ab:1c:bb:8f:55:a4:be:66:ab:b9:45:7d:f4:65:ef:f9:91:
         c1:55:9c:af:4e:53:44:07:a7:50:9f:69:d4:24:dd:e7:7a:2c:
         2e:9b:85:d6:10:d7:c6:40:76:36:73:c9:ec:63:3b:0b:f2:61:
         6e:2f:6d:91:e5:78:63:62:70:42:7a:c7:ed:9f:79:c6:5b:4e:
         23:19:6e:e3:a2:22:e0:e8:88:d5:26:3d:db:30:1b:3c:93:31:
         aa:6e:a5:10:f5:96:25:0c:4a:96:b2:83:a9:72:74:58:09:b1:
         a0:e7:42:b2:9f:86:3e:5e:82:5a:55:0e:02:20:cc:c6:70:9a:
         cd:48:dd:6a:07:50:c3:3f:b8:c2:3f:8b:d9:2c:8d:c8:d8:45:
         9c:e6:ad:17:83:83:f7:3f:69:ce:cd:d5:4d:a6:17:dc:a3:c2:
         8b:bd:1a:c2:d4:c4:da:a3:07:30:55:df:a5:91:7c:9f:9d:0b:
         3f:91:e9:4c:85:14:2b:46:6e:ca:3b:c9:8e:12:26:e5:09:e3:
         17:00:4e:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FQpAbbXpTIc/lxAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm
NWZlMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk
YWNmOGRhYTMtOTViMS00MDRlLWEzNjEtMDNjMzgyMDI5ZDE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHjEG+NDNOosQJttIQjli8RmWAANhnt8rjR5
WFO14g0zHBe/cbzQQsvtgjK6zzM9Q5NyrGfLSbSpKfJuGeWjhEDy9FkHMWg8QyHL
WbHXCwNBQnNgdI/Haj3uT76MTSSa9epwm4bT9EmHsPwLuU3u+CTs2N5cZCtXdJsw
EZRyrA3gpnmu3wZFF5Bs73JqzLzFOu4BdnvAPT/FEs/rauA27iy0TyLLaj9GWRXE
MpeuS/IEBYm85cuV0Lajs4PNCuJaQOaxun/R4cbMbkgkTkziZiJFC5upiyK60FM7
hAHQuP9hPZbpQKefbgR7o3eag+6tLYxGX9RuPz0YeytD1Kc9zwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCDgKKr+7vyCfyuRVmSM8jOk6Jr2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl
MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvMjFkNjAzZDQtMmVlMS0z
M2I5LWJkYjEtMjYyNDQyN2UzMTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2
ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl
ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2
N2I3ZWY1ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS0ygMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFzaPAaxuOX7lAdLwcx5OYXoPr5ZrXuM8UmQN+Z0pQTnNS0pvFO/QSKr
v3fpkJXOAeID8rSiq5CrHLuPVaS+Zqu5RX30Ze/5kcFVnK9OU0QHp1CfadQk3ed6
LC6bhdYQ18ZAdjZzyexjOwvyYW4vbZHleGNicEJ6x+2fecZbTiMZbuOiIuDoiNUm
PdswGzyTMapupRD1liUMSpayg6lydFgJsaDnQrKfhj5eglpVDgIgzMZwms1I3WoH
UMM/uMI/i9ksjcjYRZzmrReDg/c/ac7N1U2mF9yjwou9GsLUxNqjBzBV36WRfJ+d
Cz+R6UyFFCtGbso7yY4SJuUJ4xcATgo=
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:48:15 2026 by rpki-client