Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7e333bf4-10f5-4308-ab82-72e7972dad32/c828df95-f89e-3618-91e3-9b1a2a344161.roa
File:                     c828df95-f89e-3618-91e3-9b1a2a344161.roa (raw, json)
Hash identifier:          Sxz8Co0ZUx1AUkdBKDpg2BdkS6RzozOT6LJMbiQ/Yn8=
Subject key identifier:   E7:21:AA:9D:FF:56:EA:E7:DD:35:57:99:6F:AA:7D:E2:44:E8:56:12
Certificate issuer:       /CN=7e333bf4-10f5-4308-ab82-72e7972dad32
Certificate serial:       010D0C9F4328584E9D4AB94950F9C6CEDF806F80
Authority key identifier: B6:CE:09:0F:51:64:59:76:1F:1F:FA:75:61:02:25:5E:73:EF:3D:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7e333bf4-10f5-4308-ab82-72e7972dad32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7e333bf4-10f5-4308-ab82-72e7972dad32/c828df95-f89e-3618-91e3-9b1a2a344161.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     577
IP address blocks:        199.84.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7e333bf4-10f5-4308-ab82-72e7972dad32/7e333bf4-10f5-4308-ab82-72e7972dad32.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7e333bf4-10f5-4308-ab82-72e7972dad32/7e333bf4-10f5-4308-ab82-72e7972dad32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7e333bf4-10f5-4308-ab82-72e7972dad32.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:b9:49:50:f9:c6:ce:df:80:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e333bf4-10f5-4308-ab82-72e7972dad32
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=fc6d7924-27d9-43e2-927a-8a0d6692413c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:48:40:60:d1:09:57:ff:41:dd:8d:01:04:d9:
                    61:c6:1a:62:6c:27:f5:fb:5f:9d:e7:2f:5c:c7:00:
                    7a:5b:d4:69:01:57:a8:2c:12:65:2a:df:58:d7:07:
                    83:72:1e:93:4b:cc:4b:69:53:74:07:31:33:26:e6:
                    76:7b:cd:ca:78:ca:ca:d3:08:66:ea:4a:bc:46:be:
                    69:8f:79:f0:92:7b:d4:bc:ad:4a:39:ed:e8:6c:ee:
                    f3:6f:96:92:19:a6:ad:99:5c:34:b1:f1:0b:16:6d:
                    5a:7a:1f:5e:24:23:fd:98:f6:c6:e7:73:c1:14:f6:
                    76:9c:b5:ba:3d:47:00:56:a5:85:40:e3:7a:64:ee:
                    b0:c5:05:69:ba:64:50:01:2c:92:e2:a5:c3:e2:b5:
                    fc:30:8c:3a:e9:f4:bb:11:8d:87:ba:58:b8:72:40:
                    b3:84:96:60:3e:9d:28:ca:c7:e6:7a:a3:37:b5:11:
                    88:60:a2:f3:97:10:d3:49:54:10:d1:1f:fd:65:64:
                    8c:ae:18:67:23:3f:3e:8e:6f:a5:e7:08:74:85:57:
                    5c:61:4d:89:03:13:e7:9c:b6:f6:d0:9e:e0:6a:f3:
                    02:2c:98:80:22:7d:01:a0:88:45:f1:94:0d:d8:da:
                    71:61:0e:ea:15:c5:1e:86:8e:e1:63:69:9c:99:eb:
                    82:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:21:AA:9D:FF:56:EA:E7:DD:35:57:99:6F:AA:7D:E2:44:E8:56:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7e333bf4-10f5-4308-ab82-72e7972dad32/c828df95-f89e-3618-91e3-9b1a2a344161.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7e333bf4-10f5-4308-ab82-72e7972dad32/7e333bf4-10f5-4308-ab82-72e7972dad32.crl

            X509v3 Authority Key Identifier:
                keyid:B6:CE:09:0F:51:64:59:76:1F:1F:FA:75:61:02:25:5E:73:EF:3D:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7e333bf4-10f5-4308-ab82-72e7972dad32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.84.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:a3:23:cc:28:81:5a:81:76:55:6c:a5:b2:93:09:be:44:04:
         16:35:d9:36:f9:a5:8d:8a:ab:ff:68:4f:26:d1:22:2f:23:bb:
         02:e8:76:4a:12:8a:ca:37:31:ca:d3:8b:2f:c1:5e:1e:e0:c3:
         20:a0:f2:c4:52:35:bf:84:1f:6f:0e:d4:38:70:9a:94:db:e2:
         a5:7a:d8:7b:13:45:29:f2:26:5f:9f:6e:84:df:45:a6:f5:3a:
         ea:08:e7:d0:d0:d4:b0:82:7b:04:a6:a0:67:92:49:1c:ad:eb:
         d8:c8:90:36:a0:9c:30:a4:f2:42:2c:45:0d:2f:e3:8f:f0:9c:
         ea:0b:4b:56:a9:e0:77:b1:5b:31:19:ac:f3:cd:8e:8c:25:75:
         49:c8:23:75:1d:35:27:3c:ca:39:bb:2c:d5:ed:a0:94:ef:b7:
         74:cb:90:cf:53:3b:1a:ee:07:06:15:5b:8d:c3:34:b0:15:f2:
         a8:e3:a4:f1:77:f2:78:b7:be:7c:d9:08:47:fa:ce:0f:a3:f8:
         d0:0a:20:2a:cc:87:da:d5:d4:a2:66:f7:a8:f3:ff:18:b7:35:
         d6:d7:2a:5d:fd:67:90:97:2e:57:7d:36:67:96:a1:cd:00:a6:
         f9:28:50:37:b6:a5:8e:e2:3b:3b:ca:48:19:45:fb:b8:0e:a6:
         36:c6:15:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSrlJUPnGzt+Ab4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2UzMzNiZjQtMTBmNS00MzA4LWFiODItNzJlNzk3MmRh
ZDMyMB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk
ZmM2ZDc5MjQtMjdkOS00M2UyLTkyN2EtOGEwZDY2OTI0MTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0hAYNEJV/9B3Y0BBNlhxhpibCf1+1+d5y9c
xwB6W9RpAVeoLBJlKt9Y1weDch6TS8xLaVN0BzEzJuZ2e83KeMrK0whm6kq8Rr5p
j3nwknvUvK1KOe3obO7zb5aSGaatmVw0sfELFm1aeh9eJCP9mPbG53PBFPZ2nLW6
PUcAVqWFQON6ZO6wxQVpumRQASyS4qXD4rX8MIw66fS7EY2Huli4ckCzhJZgPp0o
ysfmeqM3tRGIYKLzlxDTSVQQ0R/9ZWSMrhhnIz8+jm+l5wh0hVdcYU2JAxPnnLb2
0J7gavMCLJiAIn0BoIhF8ZQN2NpxYQ7qFcUeho7hY2mcmeuCTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOchqp3/Vurn3TVXmW+qfeJE6FYSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83ZTMz
M2JmNC0xMGY1LTQzMDgtYWI4Mi03MmU3OTcyZGFkMzIvYzgyOGRmOTUtZjg5ZS0z
NjE4LTkxZTMtOWIxYTJhMzQ0MTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvN2UzMzNiZjQtMTBmNS00MzA4LWFi
ODItNzJlNzk3MmRhZDMyLzdlMzMzYmY0LTEwZjUtNDMwOC1hYjgyLTcyZTc5NzJk
YWQzMi5jcmwwHwYDVR0jBBgwFoAUts4JD1FkWXYfH/p1YQIlXnPvPXUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi83ZTMzM2JmNC0xMGY1LTQzMDgtYWI4Mi03MmU3
OTcyZGFkMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1SNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALSjI8wogVqBdlVspbKTCb5EBBY12Tb5pY2Kq/9oTybRIi8juwLodkoS
iso3McrTiy/BXh7gwyCg8sRSNb+EH28O1DhwmpTb4qV62HsTRSnyJl+fboTfRab1
OuoI59DQ1LCCewSmoGeSSRyt69jIkDagnDCk8kIsRQ0v44/wnOoLS1ap4HexWzEZ
rPPNjowldUnII3UdNSc8yjm7LNXtoJTvt3TLkM9TOxruBwYVW43DNLAV8qjjpPF3
8ni3vnzZCEf6zg+j+NAKICrMh9rV1KJm96jz/xi3NdbXKl39Z5CXLld9NmeWoc0A
pvkoUDe2pY7iOzvKSBlF+7gOpjbGFeY=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:51:11 2026 by rpki-client