Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/76ae0f66-8f1d-3ccb-bdc3-5f0d961473ef.roa
File:                     76ae0f66-8f1d-3ccb-bdc3-5f0d961473ef.roa (raw, json)
Hash identifier:          MdVKwTw2NLO5nHLyw1lbQJnofFy1/MEsLnrc4jKal5I=
Subject key identifier:   5D:2F:C7:B0:1C:87:A8:F9:66:B8:FB:BA:72:DC:47:D8:F3:FA:48:BE
Certificate issuer:       /CN=d416e28d-79e4-4432-b727-97e9702afe09
Certificate serial:       010D0C9F4328584D343A154CF0774B75F5043200
Authority key identifier: AC:C0:26:32:04:53:92:DE:62:BB:D8:A7:6C:D2:76:DB:05:52:3A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/76ae0f66-8f1d-3ccb-bdc3-5f0d961473ef.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     60326
IP address blocks:        208.73.212.0/23 maxlen: 24
                          208.73.214.0/24 maxlen: 24
                          2602:fb92::/38 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/d416e28d-79e4-4432-b727-97e9702afe09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/d416e28d-79e4-4432-b727-97e9702afe09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:15:4c:f0:77:4b:75:f5:04:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d416e28d-79e4-4432-b727-97e9702afe09
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=ac3bb2b7-9d88-40e1-8a35-caf3000ae539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:67:15:77:8d:42:04:ec:38:b2:15:85:d5:0d:
                    6c:08:a0:da:a3:51:9b:84:65:30:9f:75:31:52:d1:
                    1a:97:0d:82:91:7f:5b:43:bd:d0:87:61:c0:ed:fa:
                    04:f6:06:61:1d:35:d8:ff:06:54:5c:c1:8d:bf:15:
                    26:e3:2e:78:cc:ce:8d:e3:c7:e7:0a:03:c2:e2:09:
                    b7:0f:97:5e:4a:e7:63:bf:6b:57:51:8c:aa:95:3c:
                    ba:74:53:03:48:99:10:93:d2:9b:34:5b:79:f3:78:
                    b0:46:53:4a:79:97:1e:99:ef:42:59:8f:72:92:de:
                    5a:dd:37:a9:de:73:3d:3a:7c:fc:83:95:26:a0:c0:
                    c3:e7:6f:df:61:93:38:8e:53:b9:b0:2c:a1:fc:a3:
                    50:68:8a:38:02:73:19:14:4b:eb:6b:73:05:8c:e4:
                    d6:fd:4b:6b:6c:dc:a5:67:55:8d:2e:73:cf:06:37:
                    26:33:4e:ea:8c:73:9b:79:70:02:78:c1:e3:9a:c5:
                    cb:44:5e:fa:4a:89:81:54:62:3a:65:22:b1:91:06:
                    ee:84:ad:ba:72:9b:99:03:9d:29:f3:e1:6a:76:25:
                    1c:72:5e:89:48:7a:c1:b4:82:cf:c3:60:50:72:47:
                    ae:cb:ab:d9:94:0f:05:5e:87:b3:61:02:8e:a9:46:
                    f1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:2F:C7:B0:1C:87:A8:F9:66:B8:FB:BA:72:DC:47:D8:F3:FA:48:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/76ae0f66-8f1d-3ccb-bdc3-5f0d961473ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09/d416e28d-79e4-4432-b727-97e9702afe09.crl

            X509v3 Authority Key Identifier:
                keyid:AC:C0:26:32:04:53:92:DE:62:BB:D8:A7:6C:D2:76:DB:05:52:3A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d416e28d-79e4-4432-b727-97e9702afe09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.73.212.0-208.73.214.255
                IPv6:
                  2602:fb92::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:e4:0a:a7:23:e6:98:3c:76:6c:2b:e7:54:dc:49:fa:29:a1:
         fe:0f:b8:a6:23:9f:b3:9c:88:89:fd:21:ae:61:9f:d7:d3:60:
         0d:b0:ec:7a:30:aa:21:ef:82:dc:5f:ec:fe:33:7b:db:78:07:
         f2:a9:d7:8c:54:1a:ad:db:73:9d:74:59:3f:cd:c6:f6:e9:7d:
         92:95:59:4c:d7:47:76:28:2b:ee:20:0b:3e:17:bb:8f:e8:1c:
         17:79:0f:c0:b6:25:7b:b4:a9:1b:c2:81:05:82:56:3a:17:57:
         dc:59:92:7b:a0:c6:dd:ec:4f:69:c1:4e:bd:0f:a2:31:3e:b2:
         7d:5e:bf:8a:1b:a4:57:e3:ad:8c:d4:af:4f:34:d5:6e:a0:86:
         ea:3d:10:c8:7f:e8:83:5d:f3:e0:e7:9f:6c:36:34:5b:db:2b:
         36:bc:33:51:82:bd:1f:70:58:75:e9:34:72:38:93:ee:8e:cd:
         06:ef:c1:e6:7b:8f:39:61:9f:d6:f1:8d:fa:fd:5a:0f:f8:fb:
         de:6a:d5:e6:2a:5c:7a:dc:98:6b:67:14:99:c7:e1:1b:0e:1e:
         66:e7:7d:90:89:6c:f2:58:de:9c:b1:42:4b:75:28:6b:15:24:
         27:e7:53:f1:75:31:8c:ac:7d:07:d7:be:be:41:cd:39:f8:7f:
         01:a7:51:db
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWE00OhVM8HdLdfUEMgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQxNmUyOGQtNzllNC00NDMyLWI3MjctOTdlOTcwMmFm
ZTA5MB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk
YWMzYmIyYjctOWQ4OC00MGUxLThhMzUtY2FmMzAwMGFlNTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2cVd41CBOw4shWF1Q1sCKDao1GbhGUwn3Ux
UtEalw2CkX9bQ73Qh2HA7foE9gZhHTXY/wZUXMGNvxUm4y54zM6N48fnCgPC4gm3
D5deSudjv2tXUYyqlTy6dFMDSJkQk9KbNFt583iwRlNKeZceme9CWY9ykt5a3Tep
3nM9Onz8g5UmoMDD52/fYZM4jlO5sCyh/KNQaIo4AnMZFEvra3MFjOTW/UtrbNyl
Z1WNLnPPBjcmM07qjHObeXACeMHjmsXLRF76SomBVGI6ZSKxkQbuhK26cpuZA50p
8+FqdiUccl6JSHrBtILPw2BQckeuy6vZlA8FXoezYQKOqUbxuwIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFF0vx7Ach6j5Zrj7unLcR9jz+ki+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNDE2
ZTI4ZC03OWU0LTQ0MzItYjcyNy05N2U5NzAyYWZlMDkvNzZhZTBmNjYtOGYxZC0z
Y2NiLWJkYzMtNWYwZDk2MTQ3M2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDQxNmUyOGQtNzllNC00NDMyLWI3
MjctOTdlOTcwMmFmZTA5L2Q0MTZlMjhkLTc5ZTQtNDQzMi1iNzI3LTk3ZTk3MDJh
ZmUwOS5jcmwwHwYDVR0jBBgwFoAUrMAmMgRTkt5iu9inbNJ22wVSOrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kNDE2ZTI4ZC03OWU0LTQ0MzItYjcyNy05N2U5
NzAyYWZlMDkuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAUBAIAATAOMAwDBALQSdQD
BADQSdYwDgQCAAIwCAMGAiYC+5IAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC/kCqcj5pg8dmwr51TcSfop
of4PuKYjn7OciIn9Ia5hn9fTYA2w7HowqiHvgtxf7P4ze9t4B/Kp14xUGq3bc510
WT/NxvbpfZKVWUzXR3YoK+4gCz4Xu4/oHBd5D8C2JXu0qRvCgQWCVjoXV9xZknug
xt3sT2nBTr0PojE+sn1ev4obpFfjrYzUr0801W6ghuo9EMh/6INd8+Dnn2w2NFvb
Kza8M1GCvR9wWHXpNHI4k+6OzQbvweZ7jzlhn9bxjfr9Wg/4+95q1eYqXHrcmGtn
FJnH4RsOHmbnfZCJbPJY3pyxQkt1KGsVJCfnU/F1MYysfQfXvr5BzTn4fwGnUds=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:35:55 2026 by rpki-client