Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7/71407ec8-cc1c-33ee-ab9d-281ddaf032ae.roa
File:                     71407ec8-cc1c-33ee-ab9d-281ddaf032ae.roa (raw, json)
Hash identifier:          cNY++KQRstL6PiKO+iGzr7iWGR1tsPMLr6p64D7hvWk=
Subject key identifier:   AA:9D:B3:FC:FF:C1:33:B9:F5:F6:49:62:D1:0B:BC:74:0B:13:A2:D3
Certificate issuer:       /CN=596b4033-5941-4cf0-b653-ae8f2b41c5e7
Certificate serial:       010D0C9F4328584EA79C410BF081F6957D762FD0
Authority key identifier: 89:E4:82:64:7B:68:AE:88:72:7C:95:8A:20:9A:06:F5:9D:33:21:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7/71407ec8-cc1c-33ee-ab9d-281ddaf032ae.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     23097
IP address blocks:        74.80.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7/596b4033-5941-4cf0-b653-ae8f2b41c5e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7/596b4033-5941-4cf0-b653-ae8f2b41c5e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:41:0b:f0:81:f6:95:7d:76:2f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=596b4033-5941-4cf0-b653-ae8f2b41c5e7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b79a7d20-7b75-4224-8e3d-41bae903a5b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:bb:af:f9:8e:94:cb:3d:84:09:39:fd:71:bb:
                    75:6a:40:47:24:2c:8c:cb:ff:3d:21:99:63:f4:c2:
                    31:6f:4f:f4:fa:cc:83:7e:84:52:0f:10:e7:81:9b:
                    eb:0a:f3:7d:df:52:91:c4:46:99:2c:4f:bf:5f:2a:
                    2d:dd:47:49:65:b6:16:b4:98:e5:e5:ce:6d:f3:8a:
                    c5:a2:98:d9:91:34:37:79:26:21:cf:a0:17:8d:80:
                    f8:ad:cb:79:ca:64:f3:b8:1c:ce:ec:fd:8b:54:37:
                    81:a8:43:4d:21:40:6c:44:37:e5:2b:2d:13:2e:1a:
                    ec:3d:75:6f:77:06:75:41:29:fc:d7:ca:d6:59:a1:
                    bc:fb:89:47:74:c1:e8:a3:8b:fc:84:38:4d:08:2e:
                    17:79:f0:e9:c8:4b:16:11:b7:0b:04:fd:52:74:f3:
                    45:af:75:f1:27:4a:de:69:27:f3:99:16:01:fc:48:
                    d5:c2:1e:82:65:09:52:ea:45:32:74:53:94:e0:73:
                    7c:d7:b2:19:f9:6c:27:82:d4:b2:64:0d:08:d6:0f:
                    ab:ce:0a:fc:95:01:11:39:19:ec:3c:82:cb:b7:a1:
                    17:d1:c5:62:02:5a:9b:82:fd:1b:52:ca:e4:2d:4d:
                    d9:a8:7a:5d:49:1f:a1:59:16:47:ec:67:dd:f4:2f:
                    15:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9D:B3:FC:FF:C1:33:B9:F5:F6:49:62:D1:0B:BC:74:0B:13:A2:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7/71407ec8-cc1c-33ee-ab9d-281ddaf032ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7/596b4033-5941-4cf0-b653-ae8f2b41c5e7.crl

            X509v3 Authority Key Identifier:
                keyid:89:E4:82:64:7B:68:AE:88:72:7C:95:8A:20:9A:06:F5:9D:33:21:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/596b4033-5941-4cf0-b653-ae8f2b41c5e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:24:19:d4:4a:2a:88:8c:03:d9:1c:74:03:ef:5b:ef:c6:ab:
         62:81:32:65:31:4a:03:89:7e:26:db:54:e4:4a:ce:50:92:73:
         ac:80:6f:9c:07:30:e6:2b:a8:45:b3:f2:95:0f:d5:bf:97:f1:
         ea:4c:06:68:42:68:d6:6f:6e:0c:08:61:6b:8d:14:8a:16:d7:
         ff:3a:2f:0e:74:0e:ad:50:65:2d:e1:3d:a0:d4:de:8b:3e:f6:
         79:27:f5:3f:47:68:f8:74:09:9f:23:c4:d3:00:6f:26:c2:a6:
         ee:76:6d:17:02:8c:d7:43:c1:e7:1b:2b:2a:ed:be:a6:8d:59:
         bf:65:01:30:db:20:5f:d2:bf:3a:4e:e1:72:15:91:3e:d2:c8:
         eb:15:45:ac:0e:16:7a:1e:45:25:bb:66:09:03:7b:fb:16:ba:
         3a:05:a5:a0:c4:26:5f:3f:65:62:64:b9:00:5f:c0:2a:99:6b:
         83:2f:3c:f6:57:4d:94:bb:81:2c:a2:19:0a:90:4a:86:6b:cc:
         37:c4:f5:10:c3:02:af:f7:1f:44:ad:4c:ba:2a:ec:3d:31:9c:
         47:7a:ff:2a:6f:27:53:44:8c:32:b6:a0:14:e8:e0:04:45:3b:
         bb:4d:a0:8c:14:c2:af:14:38:53:50:c6:ca:9f:03:10:e5:03:
         a6:eb:52:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnEEL8IH2lX12L9AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTk2YjQwMzMtNTk0MS00Y2YwLWI2NTMtYWU4ZjJiNDFj
NWU3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
Yjc5YTdkMjAtN2I3NS00MjI0LThlM2QtNDFiYWU5MDNhNWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbuv+Y6Uyz2ECTn9cbt1akBHJCyMy/89IZlj
9MIxb0/0+syDfoRSDxDngZvrCvN931KRxEaZLE+/Xyot3UdJZbYWtJjl5c5t84rF
opjZkTQ3eSYhz6AXjYD4rct5ymTzuBzO7P2LVDeBqENNIUBsRDflKy0TLhrsPXVv
dwZ1QSn818rWWaG8+4lHdMHoo4v8hDhNCC4XefDpyEsWEbcLBP1SdPNFr3XxJ0re
aSfzmRYB/EjVwh6CZQlS6kUydFOU4HN817IZ+WwngtSyZA0I1g+rzgr8lQERORns
PILLt6EX0cViAlqbgv0bUsrkLU3ZqHpdSR+hWRZH7Gfd9C8VOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKqds/z/wTO59fZJYtELvHQLE6LTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81OTZi
NDAzMy01OTQxLTRjZjAtYjY1My1hZThmMmI0MWM1ZTcvNzE0MDdlYzgtY2MxYy0z
M2VlLWFiOWQtMjgxZGRhZjAzMmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTk2YjQwMzMtNTk0MS00Y2YwLWI2
NTMtYWU4ZjJiNDFjNWU3LzU5NmI0MDMzLTU5NDEtNGNmMC1iNjUzLWFlOGYyYjQx
YzVlNy5jcmwwHwYDVR0jBBgwFoAUieSCZHtorohyfJWKIJoG9Z0zIZYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC81OTZiNDAzMy01OTQxLTRjZjAtYjY1My1hZThm
MmI0MWM1ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlDMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABIkGdRKKoiMA9kcdAPvW+/Gq2KBMmUxSgOJfibbVORKzlCSc6yAb5wH
MOYrqEWz8pUP1b+X8epMBmhCaNZvbgwIYWuNFIoW1/86Lw50Dq1QZS3hPaDU3os+
9nkn9T9HaPh0CZ8jxNMAbybCpu52bRcCjNdDwecbKyrtvqaNWb9lATDbIF/SvzpO
4XIVkT7SyOsVRawOFnoeRSW7ZgkDe/sWujoFpaDEJl8/ZWJkuQBfwCqZa4MvPPZX
TZS7gSyiGQqQSoZrzDfE9RDDAq/3H0StTLoq7D0xnEd6/ypvJ1NEjDK2oBTo4ARF
O7tNoIwUwq8UOFNQxsqfAxDlA6brUrU=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:28:45 2026 by rpki-client