Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5a8cbbf2-5b03-3ba8-87bc-cfd39bbd69df.roa
File:                     5a8cbbf2-5b03-3ba8-87bc-cfd39bbd69df.roa (raw, json)
Hash identifier:          lA6Lzcei1wzLEIE1lIpjQAhjo4vfjSA+C3WCC31K5YA=
Subject key identifier:   29:FC:45:BF:7B:32:82:F0:98:CF:53:97:44:E1:D9:0A:56:ED:AB:5B
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584F4974B270788BEF3727C20880
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5a8cbbf2-5b03-3ba8-87bc-cfd39bbd69df.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        76.10.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:b2:70:78:8b:ef:37:27:c2:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8bc6cf82-ea81-41f9-935e-eb5862a6352d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:47:bf:51:ca:2b:a2:52:88:a3:75:74:d4:6f:
                    24:23:e1:88:e0:dc:14:89:ae:b3:aa:3e:d5:7c:e7:
                    dc:f6:c1:e6:f4:af:37:3e:1b:14:c2:69:c0:bc:12:
                    63:ad:0a:15:e2:fe:99:8e:d7:41:27:77:4f:10:ae:
                    24:c7:f5:1e:21:e6:f2:86:e5:90:0d:89:1f:34:0e:
                    37:f1:d1:4c:51:cf:e9:ec:2c:82:9c:25:87:87:94:
                    6b:f1:29:2f:32:57:3a:9b:5b:79:e1:cd:3f:2c:38:
                    f9:ad:89:3d:c1:4b:d0:b2:04:54:f5:59:dc:f4:cb:
                    43:92:d1:4d:f3:f2:b7:5d:51:1f:da:80:f4:d3:d9:
                    39:bb:0c:71:dc:75:42:be:be:c7:29:fd:41:48:7b:
                    bc:32:aa:6f:eb:40:c0:89:c8:2b:83:26:7e:b7:30:
                    20:b4:56:9d:ae:90:d9:c4:10:73:e1:01:71:93:be:
                    69:7e:19:fa:e0:d8:a5:ef:f2:36:42:9f:82:2d:ab:
                    ed:db:a3:94:b0:f8:ef:9b:c8:ce:71:b0:47:7b:a2:
                    00:88:c5:5d:c6:28:e7:30:c9:f7:c5:e1:60:80:47:
                    18:36:08:aa:88:41:33:00:fb:f2:47:1b:99:57:85:
                    2f:ca:38:a5:80:4f:f6:97:e7:5c:be:20:f0:38:cc:
                    24:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FC:45:BF:7B:32:82:F0:98:CF:53:97:44:E1:D9:0A:56:ED:AB:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/5a8cbbf2-5b03-3ba8-87bc-cfd39bbd69df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.10.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:6f:6d:04:c8:13:fe:7c:ca:fe:6a:f3:10:e6:85:0b:19:21:
         a4:79:72:9a:72:13:ca:bc:ff:21:10:83:cf:b6:63:1a:92:ea:
         88:6f:9e:6d:21:0e:60:d1:f4:9c:88:ee:f3:63:66:9d:16:bc:
         25:8e:26:3e:71:b0:65:bf:ef:cb:7d:ac:3f:36:ba:d4:4b:7a:
         94:47:00:e6:e1:fd:b0:b8:c9:fe:f6:7e:a5:48:b6:ad:81:70:
         6a:37:4c:21:36:a3:1a:ac:56:ae:23:0f:0d:0a:8f:70:ca:21:
         b4:ef:a6:f8:f7:4f:73:bd:cc:b8:74:4d:b4:d3:c0:6b:76:04:
         28:39:80:a8:48:75:a8:84:49:4b:1d:1e:5b:e6:aa:56:c4:94:
         5e:e6:07:87:6a:61:17:71:bf:56:f8:12:bb:16:c6:4a:ff:e5:
         d0:ca:3b:dc:2b:05:61:c7:6f:fc:10:91:56:40:c4:71:87:55:
         5f:c5:4e:a2:b9:0d:a1:c3:e9:8a:ba:38:49:a1:46:b9:b2:7f:
         8e:74:39:6f:61:94:b6:1e:b4:de:b7:13:d8:1f:a6:82:39:95:
         a0:c8:94:1d:1b:e4:09:9e:5a:09:eb:55:ce:ae:0b:f6:3e:e4:
         37:c1:ab:4b:a0:9a:79:95:f9:c1:ae:14:bb:ee:a1:21:98:f7:
         ee:8e:3e:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdLJweIvvNyfCCIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OGJjNmNmODItZWE4MS00MWY5LTkzNWUtZWI1ODYyYTYzNTJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUe/UcorolKIo3V01G8kI+GI4NwUia6zqj7V
fOfc9sHm9K83PhsUwmnAvBJjrQoV4v6ZjtdBJ3dPEK4kx/UeIebyhuWQDYkfNA43
8dFMUc/p7CyCnCWHh5Rr8SkvMlc6m1t54c0/LDj5rYk9wUvQsgRU9Vnc9MtDktFN
8/K3XVEf2oD009k5uwxx3HVCvr7HKf1BSHu8Mqpv60DAicgrgyZ+tzAgtFadrpDZ
xBBz4QFxk75pfhn64Nil7/I2Qp+CLavt26OUsPjvm8jOcbBHe6IAiMVdxijnMMn3
xeFggEcYNgiqiEEzAPvyRxuZV4UvyjilgE/2l+dcviDwOMwk9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCn8Rb97MoLwmM9Tl0Th2QpW7atbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNWE4Y2JiZjItNWIwMy0z
YmE4LTg3YmMtY2ZkMzliYmQ2OWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATAodMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEZvbQTIE/58yv5q8xDmhQsZIaR5cppyE8q8/yEQg8+2YxqS6ohvnm0h
DmDR9JyI7vNjZp0WvCWOJj5xsGW/78t9rD82utRLepRHAObh/bC4yf72fqVItq2B
cGo3TCE2oxqsVq4jDw0Kj3DKIbTvpvj3T3O9zLh0TbTTwGt2BCg5gKhIdaiESUsd
HlvmqlbElF7mB4dqYRdxv1b4ErsWxkr/5dDKO9wrBWHHb/wQkVZAxHGHVV/FTqK5
DaHD6Yq6OEmhRrmyf450OW9hlLYetN63E9gfpoI5laDIlB0b5AmeWgnrVc6uC/Y+
5DfBq0ugmnmV+cGuFLvuoSGY9+6OPrA=
-----END CERTIFICATE-----
Generated at Sat Sep 26 01:53:13 2026 by rpki-client