Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ec2c2b56-469b-386e-982c-9bd0fb0efc7a.roa
File:                     ec2c2b56-469b-386e-982c-9bd0fb0efc7a.roa (raw, json)
Hash identifier:          6FpCyjMUwjvvjHs1qtgVuMCoRjtLYs//bOzY0g3xvT0=
Subject key identifier:   7C:9A:D9:2C:A6:28:06:98:A6:86:32:8E:50:CD:40:96:2E:B7:08:29
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584EF87CB4DD1EA2AF17691B2AE0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ec2c2b56-469b-386e-982c-9bd0fb0efc7a.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     23473
IP address blocks:        76.10.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:b4:dd:1e:a2:af:17:69:1b:2a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=484284b3-5129-4b77-9193-31a72b1b4c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3c:86:8f:48:0a:9d:94:7b:5e:4c:44:11:74:
                    e2:f2:3e:5c:f7:8f:86:cd:cc:9d:31:3a:77:d2:1f:
                    45:52:89:eb:f2:0d:bf:b9:aa:04:8f:7f:06:e1:7b:
                    63:49:9f:f6:23:53:15:34:9c:64:d0:ac:aa:d1:22:
                    46:02:b2:c1:35:81:a0:53:79:b9:79:72:c5:61:a1:
                    fa:94:37:90:7e:85:24:73:45:be:4e:0b:f8:43:bc:
                    9f:da:4a:4c:f8:09:5e:ca:a2:d8:f0:30:51:53:a7:
                    ae:36:93:6a:54:3a:e1:71:26:22:ba:70:54:12:49:
                    0a:dc:da:fa:95:61:81:fe:c0:89:41:28:7c:1a:61:
                    d7:c2:4d:6f:fa:d5:a3:c5:bb:f3:95:a7:41:50:ee:
                    de:89:e4:87:93:52:ad:83:86:64:82:78:f7:0a:da:
                    56:77:97:d4:79:3d:20:b1:42:b2:da:67:d4:17:91:
                    05:be:8a:89:ce:4b:02:33:3a:03:a7:f1:ac:ec:d5:
                    d4:d9:7e:c7:c1:c5:ec:ef:40:99:87:0f:63:a8:51:
                    b3:46:51:19:d4:6e:f7:25:ae:b5:5a:4d:eb:9d:09:
                    14:eb:1a:84:12:77:66:15:61:19:85:99:40:6f:c4:
                    10:28:aa:dd:1b:3a:54:68:82:e3:02:77:6b:fd:97:
                    53:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9A:D9:2C:A6:28:06:98:A6:86:32:8E:50:CD:40:96:2E:B7:08:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ec2c2b56-469b-386e-982c-9bd0fb0efc7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.10.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:01:4f:fc:9e:93:d1:10:64:8b:f7:b3:bf:3b:ba:dd:72:4a:
         43:64:96:79:5b:87:2d:22:dc:f1:80:c4:0a:c5:2e:d2:91:6c:
         4c:b4:b4:ee:b6:92:0f:7e:68:8e:33:37:57:21:a5:7b:d2:40:
         9a:48:b8:cf:b3:0f:16:d3:23:93:17:c0:86:ee:03:3b:b0:53:
         f8:09:ba:9f:d4:a6:cb:6a:e8:22:eb:d8:bc:39:22:28:e2:39:
         3c:6c:c0:42:ca:7a:15:d7:02:e7:1c:63:da:0e:10:f2:cd:80:
         f3:4d:2f:61:f5:6f:cd:7b:60:c0:96:1e:b8:87:6a:d6:70:04:
         91:a8:3e:95:67:ce:77:d5:28:21:62:50:0f:dc:c0:32:2c:0a:
         92:0c:80:fc:07:04:29:78:24:1b:3f:6c:c6:21:2e:db:4a:f8:
         85:6d:3c:77:f0:2d:d0:50:c5:06:47:17:fb:59:4b:3e:33:41:
         b3:4d:40:2a:15:df:8a:63:99:bb:23:77:99:b4:37:6d:21:a7:
         70:79:3d:fd:7a:eb:10:07:a3:74:78:09:55:88:f5:5c:fe:61:
         22:ef:fe:c6:9a:d8:b1:4c:9f:5a:69:4c:38:96:e6:ad:da:c9:
         61:ce:ee:3a:55:30:30:76:2b:5b:b9:33:09:34:a0:df:19:cd:
         bc:c1:0c:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fLTdHqKvF2kbKuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk
NDg0Mjg0YjMtNTEyOS00Yjc3LTkxOTMtMzFhNzJiMWI0YzJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDyGj0gKnZR7XkxEEXTi8j5c94+GzcydMTp3
0h9FUonr8g2/uaoEj38G4XtjSZ/2I1MVNJxk0Kyq0SJGArLBNYGgU3m5eXLFYaH6
lDeQfoUkc0W+Tgv4Q7yf2kpM+AleyqLY8DBRU6euNpNqVDrhcSYiunBUEkkK3Nr6
lWGB/sCJQSh8GmHXwk1v+tWjxbvzladBUO7eieSHk1Ktg4Zkgnj3CtpWd5fUeT0g
sUKy2mfUF5EFvoqJzksCMzoDp/Gs7NXU2X7HwcXs70CZhw9jqFGzRlEZ1G73Ja61
Wk3rnQkU6xqEEndmFWEZhZlAb8QQKKrdGzpUaILjAndr/ZdTJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHya2SymKAaYpoYyjlDNQJYutwgpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZWMyYzJiNTYtNDY5Yi0z
ODZlLTk4MmMtOWJkMGZiMGVmYzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATAolMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADEBT/yek9EQZIv3s787ut1ySkNklnlbhy0i3PGAxArFLtKRbEy0tO62
kg9+aI4zN1chpXvSQJpIuM+zDxbTI5MXwIbuAzuwU/gJup/Upstq6CLr2Lw5Iiji
OTxswELKehXXAuccY9oOEPLNgPNNL2H1b817YMCWHriHatZwBJGoPpVnznfVKCFi
UA/cwDIsCpIMgPwHBCl4JBs/bMYhLttK+IVtPHfwLdBQxQZHF/tZSz4zQbNNQCoV
34pjmbsjd5m0N20hp3B5Pf166xAHo3R4CVWI9Vz+YSLv/saa2LFMn1ppTDiW5q3a
yWHO7jpVMDB2K1u5Mwk0oN8ZzbzBDAk=
-----END CERTIFICATE-----
Generated at Sat Sep 26 01:36:01 2026 by rpki-client