Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/f7088b17-f162-3a8d-bfec-e70cdc9c9db6.roa
File:                     f7088b17-f162-3a8d-bfec-e70cdc9c9db6.roa (raw, json)
Hash identifier:          DdGabLbQGtD342KmP/gs7qP91zsRlhgKMRTZB0L9kNA=
Subject key identifier:   8F:BA:D5:10:9F:22:B0:3A:13:D4:E2:27:52:9B:3C:62:BB:E1:2D:8D
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584F549D482449E5F4B29D0F9500
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/f7088b17-f162-3a8d-bfec-e70cdc9c9db6.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     7385
IP address blocks:        76.164.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:48:24:49:e5:f4:b2:9d:0f:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=285650eb-7abd-4e0e-8d38-3d0849986a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c8:4d:16:03:bc:7e:91:ee:80:e6:46:19:c8:
                    d6:4d:61:df:c7:0e:cf:19:c4:42:69:e7:71:c8:7d:
                    e5:dc:16:ab:86:49:f5:f4:cf:76:5b:18:52:b1:51:
                    30:74:f8:c6:d5:47:c6:b7:bb:29:2f:d3:a2:ab:3b:
                    aa:89:28:46:70:6e:35:73:79:38:f1:1b:8b:68:fb:
                    32:90:2a:a8:37:50:96:22:b6:44:df:da:ba:e8:84:
                    b3:2d:63:ab:29:34:f7:7f:56:7a:1b:03:9d:e0:dd:
                    09:8b:60:b9:48:11:ac:83:3d:57:2f:ff:0f:4d:bf:
                    e2:c5:89:11:27:14:fd:df:41:f0:c1:fe:b9:a7:7e:
                    f7:5a:98:43:69:ae:7c:26:ba:1b:4d:0c:3a:e2:e9:
                    d8:50:c3:ed:cc:93:69:39:dc:d3:44:e2:f7:93:22:
                    e6:81:6e:43:aa:75:49:7a:ff:d6:d6:7c:3b:4f:6e:
                    ce:a7:38:64:78:30:09:0b:e4:da:9b:8d:92:4e:82:
                    db:87:63:98:79:bd:85:65:b0:b0:ca:c9:b2:c3:ba:
                    38:22:15:64:71:1d:7a:05:50:ca:e5:ea:89:9f:97:
                    02:79:3c:00:0b:30:86:82:48:7b:4f:d7:64:aa:e4:
                    80:05:8d:6b:16:04:26:93:a1:90:de:97:97:47:4b:
                    5c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BA:D5:10:9F:22:B0:3A:13:D4:E2:27:52:9B:3C:62:BB:E1:2D:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/f7088b17-f162-3a8d-bfec-e70cdc9c9db6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:37:12:a7:e9:5e:36:b4:3e:7d:22:1c:47:cd:90:c6:d3:f3:
         94:85:5d:38:27:4a:1d:f9:01:55:12:9e:33:86:ce:7a:88:4f:
         da:3e:ff:e3:73:b8:dd:87:25:fc:21:48:b8:57:10:1e:6e:79:
         ea:21:ea:c1:05:3e:2c:78:0b:99:5e:4d:08:be:d0:19:d1:b0:
         40:99:03:65:97:b4:9f:0a:37:df:d4:af:6c:98:22:c3:21:4c:
         64:86:20:77:0e:48:35:14:d8:9f:0c:85:be:3e:23:0d:9e:c9:
         40:24:04:a0:e9:68:da:f6:21:6a:ff:b4:39:50:44:03:3a:ae:
         bc:0a:b4:f8:c6:2c:b5:ae:c4:fa:c2:65:38:73:07:b2:ce:1b:
         e1:f9:80:b6:d8:83:00:8a:a5:aa:f3:d1:3c:23:08:d2:83:fa:
         92:64:81:5b:64:6e:a7:39:2a:2d:74:b1:5c:f6:d0:6e:c0:36:
         e1:74:f0:54:03:1e:f7:82:80:58:bc:c8:bf:2a:a8:24:ef:51:
         0b:e2:33:65:f0:34:c8:ed:db:ba:5a:ca:d7:c8:ce:cd:e5:0a:
         21:59:fd:4f:d8:9c:db:b8:b2:ca:a8:47:ca:cd:e0:11:b4:df:
         1b:59:d0:f3:ba:12:a4:8a:81:f1:ca:aa:6b:fd:66:f4:aa:da:
         17:bc:11:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnUgkSeX0sp0PlQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjk2ODY5MDAtZjIwMS00YjJjLWExYzctYWZiNzI1YWJl
NDdmMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk
Mjg1NjUwZWItN2FiZC00ZTBlLThkMzgtM2QwODQ5OTg2YTQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAishNFgO8fpHugOZGGcjWTWHfxw7PGcRCaedx
yH3l3Barhkn19M92WxhSsVEwdPjG1UfGt7spL9OiqzuqiShGcG41c3k48RuLaPsy
kCqoN1CWIrZE39q66ISzLWOrKTT3f1Z6GwOd4N0Ji2C5SBGsgz1XL/8PTb/ixYkR
JxT930Hwwf65p373WphDaa58JrobTQw64unYUMPtzJNpOdzTROL3kyLmgW5DqnVJ
ev/W1nw7T27OpzhkeDAJC+Tam42SToLbh2OYeb2FZbCwysmyw7o4IhVkcR16BVDK
5eqJn5cCeTwACzCGgkh7T9dkquSABY1rFgQmk6GQ3peXR0tcZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI+61RCfIrA6E9TiJ1KbPGK74S2NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82OTY4
NjkwMC1mMjAxLTRiMmMtYTFjNy1hZmI3MjVhYmU0N2YvZjcwODhiMTctZjE2Mi0z
YThkLWJmZWMtZTcwY2RjOWM5ZGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjk2ODY5MDAtZjIwMS00YjJjLWEx
YzctYWZiNzI1YWJlNDdmLzY5Njg2OTAwLWYyMDEtNGIyYy1hMWM3LWFmYjcyNWFi
ZTQ3Zi5jcmwwHwYDVR0jBBgwFoAURs2354epIDJb5uOqVlhZzABXhPIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82OTY4NjkwMC1mMjAxLTRiMmMtYTFjNy1hZmI3
MjVhYmU0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTKQIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADo3EqfpXja0Pn0iHEfNkMbT85SFXTgnSh35AVUSnjOGznqIT9o+/+Nz
uN2HJfwhSLhXEB5ueeoh6sEFPix4C5leTQi+0BnRsECZA2WXtJ8KN9/Ur2yYIsMh
TGSGIHcOSDUU2J8Mhb4+Iw2eyUAkBKDpaNr2IWr/tDlQRAM6rrwKtPjGLLWuxPrC
ZThzB7LOG+H5gLbYgwCKparz0TwjCNKD+pJkgVtkbqc5Ki10sVz20G7ANuF08FQD
HveCgFi8yL8qqCTvUQviM2XwNMjt27paytfIzs3lCiFZ/U/YnNu4ssqoR8rN4BG0
3xtZ0PO6EqSKgfHKqmv9ZvSq2he8Edo=
-----END CERTIFICATE-----
Generated at Tue Sep 29 05:07:37 2026 by rpki-client