Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/39172874-e704-3ead-86af-45a9b5714958.roa
File:                     39172874-e704-3ead-86af-45a9b5714958.roa (raw, json)
Hash identifier:          lJO/9P98JWDJjbQttGs9pFovoNViO6417e3eydq5Xhg=
Subject key identifier:   4A:E8:8C:7C:A1:8A:94:CE:4B:A8:5F:90:17:FA:0A:5D:AF:C2:C0:51
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F4328584D492A70FB02F1B166DAEDD980
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/39172874-e704-3ead-86af-45a9b5714958.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     61317
IP address blocks:        67.43.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:70:fb:02:f1:b1:66:da:ed:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=55c74fe6-95c9-4306-8685-7784909bfa77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:80:76:6c:10:00:a8:1e:62:c8:f4:8e:c5:1d:
                    c1:35:4d:09:4f:95:62:7f:86:4a:f0:9f:45:8e:52:
                    fb:18:6b:6b:7b:c3:81:42:a3:8a:0d:38:09:e9:b7:
                    4b:2a:bb:bf:bc:ed:35:f9:75:ae:0b:be:10:b6:eb:
                    d1:13:be:f4:58:f6:be:e1:ba:84:c0:36:35:41:3f:
                    17:32:ab:a7:81:1d:ed:20:52:a7:ec:4f:39:bd:e8:
                    f2:ab:d6:54:90:d6:38:91:a7:d0:77:59:1e:d9:33:
                    49:2d:7c:63:d1:7a:94:7f:ca:34:5e:24:36:d9:26:
                    4a:db:01:78:26:c3:40:1d:f7:3b:d3:2f:30:ef:1f:
                    3a:b6:37:22:ff:dc:45:b7:09:04:e6:a6:a2:3e:70:
                    c1:44:7c:e9:62:37:b2:ba:7f:d3:ee:1f:fc:df:de:
                    35:e5:6d:64:fc:e3:60:d0:2b:a3:2c:75:66:17:de:
                    4a:51:77:fd:dc:97:b8:2d:51:a9:11:12:21:41:51:
                    dd:1e:9b:4c:5c:1b:05:92:a7:39:1c:fb:4c:96:f4:
                    1a:6f:e9:f3:9c:51:7b:70:1c:98:16:ff:ff:e1:58:
                    09:66:ca:50:19:5c:50:38:0a:88:9a:67:53:87:d5:
                    92:a3:fb:f2:ef:7a:6e:2a:68:ac:bf:8f:2a:d5:0d:
                    b1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E8:8C:7C:A1:8A:94:CE:4B:A8:5F:90:17:FA:0A:5D:AF:C2:C0:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/39172874-e704-3ead-86af-45a9b5714958.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:c9:2b:12:67:33:d0:8a:c0:3d:74:b3:66:0c:7e:fe:a8:53:
         04:96:64:6f:2e:62:32:b1:6c:b6:54:b2:9e:b1:7b:6d:9c:26:
         60:4f:ae:27:0a:fc:3d:4b:e3:1f:90:68:61:af:3c:73:c2:b8:
         46:ee:51:b0:f5:be:5e:1f:e0:8d:cb:43:df:e3:ce:e9:20:d5:
         17:c4:ba:4a:2f:e0:9d:dd:5c:89:d5:45:67:61:17:c5:fd:1d:
         c3:c3:14:82:60:b5:3b:c7:d6:83:08:8b:4d:91:88:73:b8:7a:
         37:f7:f6:d2:f7:c6:a4:a7:14:2d:5c:dd:8f:ed:1d:45:b8:9f:
         94:46:f2:8f:8d:1d:7d:4f:67:cf:23:d0:36:2b:1f:54:ed:45:
         c4:e7:cc:04:d2:5d:67:01:d1:00:f5:e6:97:7b:a9:0a:63:54:
         af:97:09:8c:60:05:0a:5b:70:f6:02:52:7b:d9:95:66:02:20:
         af:08:a3:9d:db:00:20:29:2c:28:10:33:18:9b:d6:11:e7:34:
         d4:05:e3:a0:c9:7c:18:24:90:4c:93:c6:e0:53:52:16:c1:68:
         e5:57:8a:28:b2:65:0e:87:76:2c:4f:40:74:e6:fe:d0:79:df:
         58:6a:88:31:a4:67:3a:96:63:76:6a:86:b8:3a:3a:c4:78:25:
         6e:6a:b2:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKnD7AvGxZtrt2YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2EwZDc2ZmEtMzExNC00YzMxLWI3ZGMtOTU5NzdiMzli
NGU1MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk
NTVjNzRmZTYtOTVjOS00MzA2LTg2ODUtNzc4NDkwOWJmYTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4B2bBAAqB5iyPSOxR3BNU0JT5Vif4ZK8J9F
jlL7GGtre8OBQqOKDTgJ6bdLKru/vO01+XWuC74QtuvRE770WPa+4bqEwDY1QT8X
MqungR3tIFKn7E85vejyq9ZUkNY4kafQd1ke2TNJLXxj0XqUf8o0XiQ22SZK2wF4
JsNAHfc70y8w7x86tjci/9xFtwkE5qaiPnDBRHzpYjeyun/T7h/839415W1k/ONg
0CujLHVmF95KUXf93Je4LVGpERIhQVHdHptMXBsFkqc5HPtMlvQab+nznFF7cByY
Fv//4VgJZspQGVxQOAqImmdTh9WSo/vy73puKmisv48q1Q2xQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFErojHyhipTOS6hfkBf6Cl2vwsBRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83YTBk
NzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3N2IzOWI0ZTUvMzkxNzI4NzQtZTcwNC0z
ZWFkLTg2YWYtNDVhOWI1NzE0OTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2EwZDc2ZmEtMzExNC00YzMxLWI3
ZGMtOTU5NzdiMzliNGU1LzdhMGQ3NmZhLTMxMTQtNGMzMS1iN2RjLTk1OTc3YjM5
YjRlNS5jcmwwHwYDVR0jBBgwFoAUunhjkP+G0e91jnUpHPz8mXPIPDwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83YTBkNzZmYS0zMTE0LTRjMzEtYjdkYy05NTk3
N2IzOWI0ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQyslMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEfJKxJnM9CKwD10s2YMfv6oUwSWZG8uYjKxbLZUsp6xe22cJmBPricK
/D1L4x+QaGGvPHPCuEbuUbD1vl4f4I3LQ9/jzukg1RfEukov4J3dXInVRWdhF8X9
HcPDFIJgtTvH1oMIi02RiHO4ejf39tL3xqSnFC1c3Y/tHUW4n5RG8o+NHX1PZ88j
0DYrH1TtRcTnzATSXWcB0QD15pd7qQpjVK+XCYxgBQpbcPYCUnvZlWYCIK8Io53b
ACApLCgQMxib1hHnNNQF46DJfBgkkEyTxuBTUhbBaOVXiiiyZQ6HdixPQHTm/tB5
31hqiDGkZzqWY3Zqhrg6OsR4JW5qsiE=
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:22:29 2026 by rpki-client