Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/400a67da-27e0-347b-9533-557441601d84.roa
File:                     400a67da-27e0-347b-9533-557441601d84.roa (raw, json)
Hash identifier:          GDXLkwaHkhOUQ6M7VPLAqTscLkCV0iwzmSRRrRV0LF4=
Subject key identifier:   E3:D6:54:5E:DD:AB:5B:9A:6E:76:F7:A8:29:F2:CB:71:18:A2:11:4B
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F06721CC9A466E9B06C84DF80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/400a67da-27e0-347b-9533-557441601d84.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     33017
IP address blocks:        207.61.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:1c:c9:a4:66:e9:b0:6c:84:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=938d392b-2e83-41e7-8308-98665e397b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:99:a6:77:a2:c1:43:eb:be:77:3e:a6:e7:fd:
                    7f:9e:f4:1f:ca:0e:24:9c:ae:63:27:2d:7b:55:86:
                    84:18:5a:95:71:96:3d:85:c7:63:db:c1:25:b8:60:
                    d2:20:2b:48:30:c0:5b:31:e7:76:9d:d1:e3:4f:6a:
                    12:1a:69:2c:0b:3d:db:da:38:9d:2f:aa:4d:96:cc:
                    85:f8:2e:a9:7c:83:6c:13:59:e0:cc:0c:f8:a3:9b:
                    be:d4:bb:49:d2:84:e7:a6:a9:ac:7d:97:ca:9b:2b:
                    1e:42:83:1f:7d:a0:54:34:db:68:7a:46:83:21:e3:
                    9a:14:3b:e7:9a:9e:35:b6:54:dd:09:54:d5:c6:7f:
                    d3:e7:4f:4c:9a:b3:19:cb:fc:ad:d9:a3:57:39:15:
                    ee:36:4c:10:2a:90:9f:97:1f:fa:f0:35:52:f6:87:
                    7e:0e:7a:2a:b3:5d:d8:b3:fa:55:d1:c8:16:a2:72:
                    c1:ac:b4:15:85:b4:0a:2a:eb:c4:1f:64:da:e1:de:
                    1f:1e:7a:9a:dc:a7:cc:3e:a4:04:7b:0d:3e:df:4a:
                    a6:d3:62:9d:04:57:76:0b:f9:10:0d:f4:96:d7:c9:
                    b5:84:90:9d:5c:34:42:87:ab:fe:17:04:a1:13:9c:
                    5c:1c:76:01:2d:dd:04:a1:d1:37:fa:14:91:cb:68:
                    d6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D6:54:5E:DD:AB:5B:9A:6E:76:F7:A8:29:F2:CB:71:18:A2:11:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/400a67da-27e0-347b-9533-557441601d84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.61.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:60:07:ec:f6:92:11:7c:cf:8b:18:6f:36:66:ca:c9:30:83:
         d6:3d:34:13:b9:dd:38:7a:84:1c:e8:76:6c:64:85:ad:5e:74:
         2f:7c:97:04:96:2f:42:9d:af:b0:3d:0c:dc:d8:9e:ae:90:69:
         49:33:52:29:35:f7:4b:0e:d3:0c:b7:8f:95:92:a2:66:16:70:
         b0:5a:fa:e1:b2:88:01:3c:1f:67:85:74:ba:6e:73:c7:b6:9e:
         43:6d:04:be:77:31:75:02:aa:57:75:fe:8a:d0:da:c0:7d:c4:
         a3:c4:94:8a:de:0e:1e:38:d3:2a:c4:db:2f:03:9c:a6:f4:28:
         bf:51:f0:b1:ed:78:3d:84:70:50:42:c2:05:e3:1a:0e:0a:70:
         73:f1:15:79:4a:0f:2f:f1:48:05:e5:ed:68:d2:4c:50:8c:40:
         03:4c:08:fe:e5:52:b6:90:37:d0:1a:ff:6d:7f:92:de:bd:4d:
         56:7e:c1:0b:4b:63:f7:b7:64:3d:52:50:1e:51:30:43:00:88:
         02:ab:fd:e0:f4:93:4b:8d:51:f4:f2:b1:80:9b:30:23:04:3b:
         f6:1e:9a:d6:f3:e6:b6:bb:6c:a0:80:e6:68:73:dc:e2:10:20:
         fc:2e:00:21:e9:9d:b4:ec:6b:bf:7d:ed:46:eb:c0:f8:f1:d0:
         3a:2c:b9:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GchzJpGbpsGyE34AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk
OTM4ZDM5MmItMmU4My00MWU3LTgzMDgtOTg2NjVlMzk3YjJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25mmd6LBQ+u+dz6m5/1/nvQfyg4knK5jJy17
VYaEGFqVcZY9hcdj28EluGDSICtIMMBbMed2ndHjT2oSGmksCz3b2jidL6pNlsyF
+C6pfINsE1ngzAz4o5u+1LtJ0oTnpqmsfZfKmyseQoMffaBUNNtoekaDIeOaFDvn
mp41tlTdCVTVxn/T509MmrMZy/yt2aNXORXuNkwQKpCflx/68DVS9od+Dnoqs13Y
s/pV0cgWonLBrLQVhbQKKuvEH2Ta4d4fHnqa3KfMPqQEew0+30qm02KdBFd2C/kQ
DfSW18m1hJCdXDRCh6v+FwShE5xcHHYBLd0EodE3+hSRy2jWxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOPWVF7dq1uabnb3qCnyy3EYohFLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNDAwYTY3ZGEtMjdlMC0z
NDdiLTk1MzMtNTU3NDQxNjAxZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzz1YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFNgB+z2khF8z4sYbzZmyskwg9Y9NBO53Th6hBzodmxkha1edC98lwSW
L0Kdr7A9DNzYnq6QaUkzUik190sO0wy3j5WSomYWcLBa+uGyiAE8H2eFdLpuc8e2
nkNtBL53MXUCqld1/orQ2sB9xKPElIreDh440yrE2y8DnKb0KL9R8LHteD2EcFBC
wgXjGg4KcHPxFXlKDy/xSAXl7WjSTFCMQANMCP7lUraQN9Aa/21/kt69TVZ+wQtL
Y/e3ZD1SUB5RMEMAiAKr/eD0k0uNUfTysYCbMCMEO/Yemtbz5ra7bKCA5mhz3OIQ
IPwuACHpnbTsa7997UbrwPjx0DosufQ=
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:07:21 2026 by rpki-client