Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/76bd2a12-f402-3a5b-9b1e-2a7e4887cb91.roa
File:                     76bd2a12-f402-3a5b-9b1e-2a7e4887cb91.roa (raw, json)
Hash identifier:          FihLskUlkHgNpYjOncQEh4vLuOnI3o9lglXjArYKanM=
Subject key identifier:   28:6C:0C:8B:F1:8B:5B:BB:37:26:77:9B:3C:3A:92:6A:A1:FD:EC:89
Certificate issuer:       /CN=bf895287-fee6-4682-8ac4-732f64947fe4
Certificate serial:       010D0C9F4328584E98F0BB3527F18F63D9F83500
Authority key identifier: 75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/76bd2a12-f402-3a5b-9b1e-2a7e4887cb91.roa
Signing time:             Thu 23 Jul 2026 19:36:26 +0000
ROA not before:           Thu 23 Jul 2026 19:36:26 +0000
ROA not after:            Wed 21 Oct 2026 19:36:26 +0000
asID:                     54847
IP address blocks:        66.232.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:98:f0:bb:35:27:f1:8f:63:d9:f8:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf895287-fee6-4682-8ac4-732f64947fe4
        Validity
            Not Before: Jul 23 19:36:26 2026 GMT
            Not After : Oct 21 19:36:26 2026 GMT
        Subject: CN=9f83b589-b11d-4bc4-a966-e10de16f124b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:05:dd:de:c9:2c:45:7e:43:a1:59:31:72:b7:
                    d0:57:e8:f8:3f:a5:a9:fe:41:1c:7c:2a:4b:b1:e1:
                    92:80:04:d2:d3:05:ae:59:2b:79:2c:85:89:fe:28:
                    07:69:a0:65:33:f9:8c:d3:63:2e:da:aa:a6:8b:c8:
                    60:d2:dd:9b:c0:26:34:83:18:6c:45:d0:8e:56:3c:
                    75:a3:59:6f:80:cc:9d:79:99:12:a9:7c:b4:9a:f5:
                    88:ce:fc:74:c2:cc:99:18:b2:92:65:38:59:83:e9:
                    22:59:8b:50:95:85:f4:d0:92:12:25:4d:fe:a1:f6:
                    ec:d2:0e:34:ae:a8:28:f4:8d:ab:16:6e:7b:42:a5:
                    c0:ed:62:48:d6:a0:bc:8a:e8:f1:b1:f8:d7:b4:a1:
                    67:d2:5b:08:20:7c:d0:a5:d4:19:5f:d5:69:92:d1:
                    52:f9:05:9d:01:3b:72:20:84:bf:9e:e2:53:51:9d:
                    c7:74:7a:83:10:87:35:1e:b1:97:46:37:6a:e1:f9:
                    25:91:6e:9e:86:08:bb:99:c8:a8:52:e3:96:3e:2c:
                    ba:02:7b:dd:d4:48:fe:0b:f9:3a:42:b7:59:83:8f:
                    74:55:af:b0:1b:2b:fe:d4:b6:aa:fd:25:c7:e9:a9:
                    62:c2:80:66:6d:93:55:d9:ea:59:d9:a2:3b:53:e2:
                    62:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6C:0C:8B:F1:8B:5B:BB:37:26:77:9B:3C:3A:92:6A:A1:FD:EC:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/76bd2a12-f402-3a5b-9b1e-2a7e4887cb91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl

            X509v3 Authority Key Identifier:
                keyid:75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.232.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:64:5b:a1:41:1a:00:46:9f:85:bd:45:50:70:7e:f5:0d:73:
         a3:20:f4:b9:ab:13:b1:6f:03:65:f8:c1:27:47:99:93:c8:89:
         2b:14:91:57:44:73:04:cf:45:2f:24:7f:c6:46:69:a9:af:65:
         9e:44:4c:6e:25:89:2c:08:84:df:e6:c3:78:a8:d3:82:70:ff:
         44:3e:c5:35:e9:70:8e:88:e4:9d:e6:f1:11:e8:01:62:5d:1d:
         28:32:ca:d1:13:2d:e6:ac:17:30:e3:39:2e:e3:5e:e2:1f:9d:
         fb:2c:d3:7d:c6:63:31:70:df:e2:1c:78:43:21:4c:1b:ae:dc:
         27:bc:3a:e6:4d:c6:d2:b1:3f:5a:9d:a1:bd:25:15:8f:35:1a:
         e3:8b:45:9d:89:c1:ce:65:df:72:3d:a6:2f:67:3c:f5:1a:a7:
         fb:76:07:42:9e:f2:b8:ed:80:15:cb:d5:9d:f4:58:2b:b5:b8:
         63:df:d5:3b:29:03:cc:00:f4:14:88:98:6a:37:0d:8a:bf:19:
         ff:bd:5d:4c:83:60:3c:2c:cb:1c:36:cd:82:71:e0:72:07:d1:
         9c:eb:17:95:dd:c9:90:8f:56:bc:0f:34:d6:78:bf:bd:04:62:
         a6:e2:1b:21:72:48:d3:54:43:5a:ec:e4:1b:57:70:33:d0:34:
         71:a7:2b:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Y8Ls1J/GPY9n4NQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmY4OTUyODctZmVlNi00NjgyLThhYzQtNzMyZjY0OTQ3
ZmU0MB4XDTI2MDcyMzE5MzYyNloXDTI2MTAyMTE5MzYyNlowLzEtMCsGA1UEAxMk
OWY4M2I1ODktYjExZC00YmM0LWE5NjYtZTEwZGUxNmYxMjRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwXd3sksRX5DoVkxcrfQV+j4P6Wp/kEcfCpL
seGSgATS0wWuWSt5LIWJ/igHaaBlM/mM02Mu2qqmi8hg0t2bwCY0gxhsRdCOVjx1
o1lvgMydeZkSqXy0mvWIzvx0wsyZGLKSZThZg+kiWYtQlYX00JISJU3+ofbs0g40
rqgo9I2rFm57QqXA7WJI1qC8iujxsfjXtKFn0lsIIHzQpdQZX9VpktFS+QWdATty
IIS/nuJTUZ3HdHqDEIc1HrGXRjdq4fklkW6ehgi7mcioUuOWPiy6Anvd1Ej+C/k6
QrdZg490Va+wGyv+1Laq/SXH6aliwoBmbZNV2epZ2aI7U+JicQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFChsDIvxi1u7NyZ3mzw6kmqh/eyJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZjg5
NTI4Ny1mZWU2LTQ2ODItOGFjNC03MzJmNjQ5NDdmZTQvNzZiZDJhMTItZjQwMi0z
YTViLTliMWUtMmE3ZTQ4ODdjYjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmY4OTUyODctZmVlNi00NjgyLThh
YzQtNzMyZjY0OTQ3ZmU0L2JmODk1Mjg3LWZlZTYtNDY4Mi04YWM0LTczMmY2NDk0
N2ZlNC5jcmwwHwYDVR0jBBgwFoAUdfQONwd2lIOhCT08mnfB3pf3ZsMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZjg5NTI4Ny1mZWU2LTQ2ODItOGFjNC03MzJm
NjQ5NDdmZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQuhUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC1kW6FBGgBGn4W9RVBwfvUNc6Mg9LmrE7FvA2X4wSdHmZPIiSsUkVdE
cwTPRS8kf8ZGaamvZZ5ETG4liSwIhN/mw3io04Jw/0Q+xTXpcI6I5J3m8RHoAWJd
HSgyytETLeasFzDjOS7jXuIfnfss033GYzFw3+IceEMhTBuu3Ce8OuZNxtKxP1qd
ob0lFY81GuOLRZ2Jwc5l33I9pi9nPPUap/t2B0Ke8rjtgBXL1Z30WCu1uGPf1Tsp
A8wA9BSImGo3DYq/Gf+9XUyDYDwsyxw2zYJx4HIH0ZzrF5XdyZCPVrwPNNZ4v70E
YqbiGyFySNNUQ1rs5BtXcDPQNHGnKy8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:01:12 2026 by rpki-client