Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3a1ce35c-70ec-3c00-ae79-f40ddd59ab0f.roa
File:                     3a1ce35c-70ec-3c00-ae79-f40ddd59ab0f.roa (raw, json)
Hash identifier:          uVawOIGW0whtrmpu9iGwpHcYLANx5cFlST/frmrQiLc=
Subject key identifier:   68:FC:42:45:68:23:4B:27:1A:DC:56:58:8F:E8:91:D3:BF:C3:6C:B4
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584DC29AEACE9E4E46D5AEBA8580
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3a1ce35c-70ec-3c00-ae79-f40ddd59ab0f.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     12083
IP address blocks:        24.96.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:ea:ce:9e:4e:46:d5:ae:ba:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=61e7dae1-bcb4-4695-8df6-abe2a8ae2ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d0:05:4e:7e:2e:be:6e:07:bc:cd:90:9a:8a:
                    3f:47:08:fb:87:99:34:73:77:ea:93:43:91:27:d8:
                    82:93:05:93:88:3a:e5:26:8f:8d:40:81:5b:cf:db:
                    7e:d4:d1:1f:11:f4:b8:e9:a0:8e:cc:42:0f:28:77:
                    7a:62:38:95:bd:6b:77:ca:42:3b:b5:ae:bb:87:ef:
                    64:1b:51:c7:bf:94:3a:74:4a:95:9f:36:1b:b9:4d:
                    6f:c5:d6:47:1a:92:9f:3a:42:d6:8a:91:23:a2:7d:
                    9a:53:8a:94:56:15:00:ed:e0:02:c0:aa:55:ee:6f:
                    32:18:cd:cb:04:df:83:5f:00:d8:12:ba:1c:9c:2d:
                    a1:bc:92:e7:50:a1:60:2f:b8:ef:46:26:5a:72:fc:
                    71:1f:7b:79:a2:14:14:f4:04:ac:b2:1a:c6:c6:69:
                    73:8a:d3:9a:e8:ed:ac:ca:12:e1:fb:8e:f1:fd:ce:
                    4c:09:c1:fb:6a:d8:56:24:eb:98:8a:73:14:93:81:
                    65:39:de:5a:e3:ce:4b:41:a7:00:40:3e:f9:d6:b8:
                    45:a1:49:a5:f7:a7:db:c6:1c:af:f7:67:8a:02:a0:
                    86:86:37:64:34:f6:e7:1c:5d:4d:42:39:7d:64:e2:
                    cc:78:fd:b5:58:42:1b:9c:08:2b:36:7b:c7:15:cb:
                    9f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:FC:42:45:68:23:4B:27:1A:DC:56:58:8F:E8:91:D3:BF:C3:6C:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3a1ce35c-70ec-3c00-ae79-f40ddd59ab0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.96.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:cc:21:c6:0e:d8:62:18:3a:29:d0:ec:3b:5d:36:77:97:ad:
         59:01:e7:cd:42:a8:bf:46:78:48:d4:fd:f0:69:a9:bf:e2:01:
         4d:7a:6b:e1:4a:e2:74:f2:9b:13:6f:30:88:fc:bf:b8:a8:3f:
         4c:11:df:ca:c4:40:8b:d6:e0:f5:9a:33:e1:b7:43:95:35:29:
         de:c0:eb:3f:52:b5:e3:e1:7c:92:10:a5:d5:24:61:aa:d4:11:
         97:f0:fd:82:9c:16:c9:2b:2b:c0:37:12:6b:67:79:71:89:c3:
         3f:34:5a:11:56:13:8d:c8:86:ca:a6:81:c5:f8:c6:a4:c8:70:
         f5:9d:c6:e1:94:f1:86:41:10:fd:32:01:c0:44:88:1d:1a:b3:
         03:8b:52:2a:5f:ae:78:38:41:48:2f:f4:80:d7:c4:b2:5a:1c:
         24:63:14:68:3b:12:cf:40:d4:fc:b4:77:a6:3d:56:e2:cd:e8:
         65:6d:5e:e7:b3:0b:0e:60:2c:99:c7:d7:96:11:7b:32:05:7e:
         09:0a:68:89:79:85:4e:66:d6:c2:63:31:48:3e:c6:12:81:6e:
         13:fd:66:6e:54:9a:8f:08:20:de:bb:88:5b:bb:d6:77:90:fd:
         bd:02:55:59:9d:4d:d0:05:46:0d:d2:dd:b1:3d:fb:a0:cb:8d:
         8d:82:99:d2
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE3CmurOnk5G1a66hYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc2ZTBkMTUtOTk3Ni00NDY2LWI2ZmYtMmQwNjdiN2Vm
NWZlMB4XDTI2MDUwODAxMDAyNFoXDTI2MDgwNjAxMDAyNFowLzEtMCsGA1UEAxMk
NjFlN2RhZTEtYmNiNC00Njk1LThkZjYtYWJlMmE4YWUyY2U3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndAFTn4uvm4HvM2Qmoo/Rwj7h5k0c3fqk0OR
J9iCkwWTiDrlJo+NQIFbz9t+1NEfEfS46aCOzEIPKHd6YjiVvWt3ykI7ta67h+9k
G1HHv5Q6dEqVnzYbuU1vxdZHGpKfOkLWipEjon2aU4qUVhUA7eACwKpV7m8yGM3L
BN+DXwDYErocnC2hvJLnUKFgL7jvRiZacvxxH3t5ohQU9ASsshrGxmlzitOa6O2s
yhLh+47x/c5MCcH7athWJOuYinMUk4FlOd5a485LQacAQD751rhFoUml96fbxhyv
92eKAqCGhjdkNPbnHF1NQjl9ZOLMeP21WEIbnAgrNnvHFcufgQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGj8QkVoI0snGtxWWI/okdO/w2y0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZl
MGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2N2I3ZWY1ZmUvM2ExY2UzNWMtNzBlYy0z
YzAwLWFlNzktZjQwZGRkNTlhYjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjc2ZTBkMTUtOTk3Ni00NDY2LWI2
ZmYtMmQwNjdiN2VmNWZlL2I3NmUwZDE1LTk5NzYtNDQ2Ni1iNmZmLTJkMDY3Yjdl
ZjVmZS5jcmwwHwYDVR0jBBgwFoAU3nguavrTBQBY7uiA9RbZaFHzkJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNzZlMGQxNS05OTc2LTQ0NjYtYjZmZi0yZDA2
N2I3ZWY1ZmUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAGGAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEANswhxg7YYhg6KdDsO102d5etWQHnzUKov0Z4SNT98Gmpv+IBTXpr4Uri
dPKbE28wiPy/uKg/TBHfysRAi9bg9Zoz4bdDlTUp3sDrP1K14+F8khCl1SRhqtQR
l/D9gpwWySsrwDcSa2d5cYnDPzRaEVYTjciGyqaBxfjGpMhw9Z3G4ZTxhkEQ/TIB
wESIHRqzA4tSKl+ueDhBSC/0gNfEslocJGMUaDsSz0DU/LR3pj1W4s3oZW1e57ML
DmAsmcfXlhF7MgV+CQpoiXmFTmbWwmMxSD7GEoFuE/1mblSajwgg3ruIW7vWd5D9
vQJVWZ1N0AVGDdLdsT37oMuNjYKZ0g==
-----END CERTIFICATE-----
Generated at Wed May 13 05:11:27 2026 by rpki-client