Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a3e9f7b3-4915-32e2-ae04-ad51f09a3807.roa
File:                     a3e9f7b3-4915-32e2-ae04-ad51f09a3807.roa (raw, json)
Hash identifier:          sY+aLzkfXDq1SanbFIADyTMSkIPzaT0M+TwZu5ngIrA=
Subject key identifier:   2E:7F:FF:C4:D2:53:FF:06:42:B7:23:A0:7E:7A:6C:B7:6A:51:46:AF
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584D40CB1DF8BB3DC11BDBA83700
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a3e9f7b3-4915-32e2-ae04-ad51f09a3807.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     10838
IP address blocks:        76.89.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:1d:f8:bb:3d:c1:1b:db:a8:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=56d62e80-3c55-4ebb-a6d9-a66c50d63c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:de:ef:44:14:02:45:34:e2:5e:54:42:e8:35:
                    52:18:6c:1d:a2:06:7b:9f:21:e0:5d:2d:e5:14:17:
                    f4:ce:de:db:dd:42:1e:7b:51:2b:ae:b0:e2:05:68:
                    44:c0:18:9c:65:d9:c6:8d:be:d2:20:58:c9:d3:8d:
                    5f:f6:9e:69:63:6a:36:17:2e:02:a1:b5:08:8a:5c:
                    f5:f1:47:32:99:a2:80:4a:55:4b:64:fb:9f:17:47:
                    d2:bb:0c:d0:24:07:4e:c4:15:ea:cc:50:9c:21:5b:
                    7c:e6:2f:29:35:6f:e5:bb:ae:cd:26:c2:89:e3:8d:
                    42:ca:37:96:c9:08:4e:0f:98:cc:fb:b3:ca:b4:35:
                    0b:7d:40:5b:f5:2a:b0:32:e7:f3:80:ea:fa:a5:70:
                    98:10:f6:91:76:80:e5:42:a9:c8:48:24:62:40:cb:
                    66:db:11:4d:3c:10:bf:32:1a:60:9b:38:17:ac:21:
                    32:07:00:e9:b4:73:f0:46:ba:66:17:d9:df:eb:12:
                    a0:3d:9c:4f:52:fe:4a:cb:f2:4f:e0:3c:af:b4:b8:
                    95:81:0b:59:8d:b2:c5:b9:40:5c:6d:04:de:ab:5e:
                    39:30:7b:44:02:2b:a6:67:97:36:53:8b:37:67:a1:
                    75:37:03:20:52:5c:2b:28:50:89:91:5c:7b:78:65:
                    10:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7F:FF:C4:D2:53:FF:06:42:B7:23:A0:7E:7A:6C:B7:6A:51:46:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/a3e9f7b3-4915-32e2-ae04-ad51f09a3807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.89.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:f1:ca:0d:c5:21:a0:ab:b3:4b:51:62:bb:6d:6b:a0:ac:a2:
         83:7c:bb:e0:ef:0a:fa:21:1d:aa:40:11:c5:37:bd:7e:c7:a2:
         c0:03:50:c7:98:7b:08:07:b4:ca:53:69:72:e7:d1:69:d3:63:
         00:f6:e6:50:c7:3e:8e:d5:af:84:f6:51:90:a3:42:95:b8:8d:
         2a:1a:f1:ab:88:6a:84:17:3c:64:56:e7:b6:c6:52:b3:00:93:
         b5:97:fe:49:5d:b2:a1:23:3d:10:4c:84:c0:13:db:42:b4:03:
         e3:ff:57:e0:d8:23:0a:08:69:2c:48:be:4f:8b:1d:2a:7a:8e:
         c8:c7:c6:5f:9b:fa:5d:ef:73:7d:ba:ca:59:52:60:3d:fb:e9:
         c7:9a:40:4d:b4:06:8b:75:64:5f:0c:ff:db:f0:36:a8:95:32:
         2f:e7:90:e7:99:6c:a5:d2:29:21:9d:45:48:2a:ba:72:9b:41:
         9d:ff:5d:e6:60:f4:57:83:6f:76:7e:b3:66:76:13:8d:8f:0b:
         7b:e8:d1:ad:e5:3e:54:53:22:5f:35:85:bb:e9:76:c8:c1:f0:
         4c:3e:62:95:db:03:15:7d:37:7f:bc:36:db:25:6c:2f:cc:a7:
         48:c6:88:76:61:57:20:e2:a5:bd:a4:f0:2c:82:36:c9:e7:1a:
         1f:fd:73:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ayx34uz3BG9uoNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
NTZkNjJlODAtM2M1NS00ZWJiLWE2ZDktYTY2YzUwZDYzYzMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA897vRBQCRTTiXlRC6DVSGGwdogZ7nyHgXS3l
FBf0zt7b3UIee1ErrrDiBWhEwBicZdnGjb7SIFjJ041f9p5pY2o2Fy4CobUIilz1
8UcymaKASlVLZPufF0fSuwzQJAdOxBXqzFCcIVt85i8pNW/lu67NJsKJ441CyjeW
yQhOD5jM+7PKtDULfUBb9SqwMufzgOr6pXCYEPaRdoDlQqnISCRiQMtm2xFNPBC/
MhpgmzgXrCEyBwDptHPwRrpmF9nf6xKgPZxPUv5Ky/JP4DyvtLiVgQtZjbLFuUBc
bQTeq145MHtEAiumZ5c2U4s3Z6F1NwMgUlwrKFCJkVx7eGUQEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC5//8TSU/8GQrcjoH56bLdqUUavMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYTNlOWY3YjMtNDkxNS0z
MmUyLWFlMDQtYWQ1MWYwOWEzODA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTFk+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFTxyg3FIaCrs0tRYrtta6CsooN8u+DvCvohHapAEcU3vX7HosADUMeY
ewgHtMpTaXLn0WnTYwD25lDHPo7Vr4T2UZCjQpW4jSoa8auIaoQXPGRW57bGUrMA
k7WX/kldsqEjPRBMhMAT20K0A+P/V+DYIwoIaSxIvk+LHSp6jsjHxl+b+l3vc326
yllSYD376ceaQE20Bot1ZF8M/9vwNqiVMi/nkOeZbKXSKSGdRUgqunKbQZ3/XeZg
9FeDb3Z+s2Z2E42PC3vo0a3lPlRTIl81hbvpdsjB8Ew+YpXbAxV9N3+8NtslbC/M
p0jGiHZhVyDipb2k8CyCNsnnGh/9cyY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:32:20 2026 by rpki-client