Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7876d134-3637-313a-9343-6955464c6af6.roa
File:                     7876d134-3637-313a-9343-6955464c6af6.roa (raw, json)
Hash identifier:          9fHvK/w26znZPx17bT5Fy32jiqvaeYG8LvzLu260eDE=
Subject key identifier:   D1:D1:F7:5B:CB:26:87:CB:FC:05:88:FB:18:03:36:AB:6D:5D:78:53
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584E842A392DE4224D3C2E3A3940
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7876d134-3637-313a-9343-6955464c6af6.roa
Signing time:             Thu 16 Jul 2026 09:00:12 +0000
ROA not before:           Thu 16 Jul 2026 09:00:12 +0000
ROA not after:            Wed 14 Oct 2026 09:00:12 +0000
asID:                     852
IP address blocks:        96.1.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:2a:39:2d:e4:22:4d:3c:2e:3a:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 16 09:00:12 2026 GMT
            Not After : Oct 14 09:00:12 2026 GMT
        Subject: CN=3bc046ec-b040-49bc-bfae-4a95013e74d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9d:a2:71:91:0d:2d:06:d2:3a:7c:42:c0:5d:
                    e7:f3:ae:f6:e4:28:f3:33:5b:d8:6b:63:5c:c5:c4:
                    5d:b6:ff:cb:53:5b:a1:37:5b:a9:de:af:81:48:70:
                    55:68:51:ea:ff:0f:0b:5b:f3:1c:8a:a8:5b:e0:9e:
                    66:8d:73:39:3c:57:dc:4f:06:c8:df:fb:0b:39:d8:
                    0d:ab:8f:8f:29:dd:0e:cd:9a:8b:b2:a7:14:74:8b:
                    57:a8:ce:62:dc:44:96:2f:a3:92:0b:96:45:80:6b:
                    66:91:33:c6:69:6d:32:32:ab:ce:f7:f4:57:b0:49:
                    98:e8:f9:2b:c3:a6:26:e2:5d:0b:3c:92:03:4f:3b:
                    0c:e5:50:72:69:5e:38:ec:74:11:fd:3d:5c:d3:d4:
                    58:6e:71:f7:92:c4:27:19:07:89:44:04:ff:65:ba:
                    9e:5f:1d:33:ea:f1:57:7a:08:f3:fe:83:83:c5:89:
                    44:f1:92:4c:22:2e:66:20:05:8c:06:8d:46:e0:f3:
                    47:c0:f7:ee:56:54:55:d5:cd:36:06:22:e1:5f:ec:
                    94:8e:0e:80:26:87:2e:89:ac:56:76:11:14:80:bf:
                    be:b2:73:e5:81:b0:0c:81:4a:bc:9f:3b:39:6c:11:
                    af:2a:02:d4:ac:51:74:c2:42:a9:64:42:d6:b9:a5:
                    40:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D1:F7:5B:CB:26:87:CB:FC:05:88:FB:18:03:36:AB:6D:5D:78:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7876d134-3637-313a-9343-6955464c6af6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.1.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ec:8e:0b:2e:db:15:3c:41:81:7e:b2:d7:f2:ac:f2:d0:43:2f:
         ff:d0:c2:04:70:2c:0d:57:b5:82:bb:16:d8:29:86:79:ba:77:
         dd:60:68:39:79:2c:c1:8e:10:b6:48:17:2e:80:ab:1f:e2:7b:
         cd:2f:0b:19:ae:17:17:4e:68:96:74:65:48:be:c1:2c:8b:8e:
         f1:4f:03:68:ca:50:c5:8b:7a:1e:3c:22:60:b1:31:88:47:4c:
         c7:2a:db:c3:80:b8:64:da:a5:eb:b7:f8:d1:b8:8d:df:e4:e4:
         a5:b1:da:bf:d8:e3:12:59:03:56:c5:74:5d:8f:c1:32:e4:c4:
         1d:ac:a4:12:ca:5d:b6:7f:f1:ba:98:5c:c9:0f:46:87:f6:9f:
         3e:08:9f:4d:1c:33:62:3a:45:c7:78:23:77:95:eb:56:6d:8d:
         a2:1b:11:f6:3d:6e:3b:5f:ad:e7:b6:00:10:e0:85:b4:10:52:
         18:9b:4e:94:e6:70:46:80:3c:1c:14:61:e8:ac:16:68:95:35:
         6d:dd:16:74:66:f2:1d:c8:40:f1:18:cf:e6:e5:3b:88:ac:29:
         a9:ef:60:ab:43:6a:61:93:92:f1:18:53:85:a2:93:c8:73:79:
         f9:44:3f:17:57:22:65:c2:75:b3:a9:17:ac:07:da:f8:f8:07:
         26:44:80:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6EKjkt5CJNPC46OUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI2MDcxNjA5MDAxMloXDTI2MTAxNDA5MDAxMlowLzEtMCsGA1UEAxMk
M2JjMDQ2ZWMtYjA0MC00OWJjLWJmYWUtNGE5NTAxM2U3NGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ2icZENLQbSOnxCwF3n86725CjzM1vYa2Nc
xcRdtv/LU1uhN1up3q+BSHBVaFHq/w8LW/Mciqhb4J5mjXM5PFfcTwbI3/sLOdgN
q4+PKd0OzZqLsqcUdItXqM5i3ESWL6OSC5ZFgGtmkTPGaW0yMqvO9/RXsEmY6Pkr
w6Ym4l0LPJIDTzsM5VByaV447HQR/T1c09RYbnH3ksQnGQeJRAT/ZbqeXx0z6vFX
egjz/oODxYlE8ZJMIi5mIAWMBo1G4PNHwPfuVlRV1c02BiLhX+yUjg6AJocuiaxW
dhEUgL++snPlgbAMgUq8nzs5bBGvKgLUrFF0wkKpZELWuaVAOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNHR91vLJofL/AWI+xgDNqttXXhTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNzg3NmQxMzQtMzYzNy0z
MTNhLTkzNDMtNjk1NTQ2NGM2YWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYAESMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAOyOCy7bFTxBgX6y1/Ks8tBDL//QwgRwLA1XtYK7Ftgphnm6d91gaDl5
LMGOELZIFy6Aqx/ie80vCxmuFxdOaJZ0ZUi+wSyLjvFPA2jKUMWLeh48ImCxMYhH
TMcq28OAuGTapeu3+NG4jd/k5KWx2r/Y4xJZA1bFdF2PwTLkxB2spBLKXbZ/8bqY
XMkPRof2nz4In00cM2I6Rcd4I3eV61ZtjaIbEfY9bjtfree2ABDghbQQUhibTpTm
cEaAPBwUYeisFmiVNW3dFnRm8h3IQPEYz+blO4isKanvYKtDamGTkvEYU4Wik8hz
eflEPxdXImXCdbOpF6wH2vj4ByZEgH8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:51:24 2026 by rpki-client