Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/f6404bf4-cfbe-301f-9707-5fcc0c9b808e.roa
File:                     f6404bf4-cfbe-301f-9707-5fcc0c9b808e.roa (raw, json)
Hash identifier:          Y6060dhYUwZ8eTST4868GQbPquoPBzEJLITpln7sRqo=
Subject key identifier:   25:E5:FE:A8:E7:CB:26:99:E2:04:E9:EA:36:A5:20:EE:36:36:FD:5C
Certificate issuer:       /CN=8eef875a-c9a4-45e0-9b80-3ea10becad9f
Certificate serial:       010D0C9F4328584EA4450F248EF4D7E2954B8B40
Authority key identifier: DA:17:75:BB:11:3E:F2:6B:F0:F9:5E:6E:89:5C:C3:0E:E0:A8:CA:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/f6404bf4-cfbe-301f-9707-5fcc0c9b808e.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     20259
IP address blocks:        208.82.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:0f:24:8e:f4:d7:e2:95:4b:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8eef875a-c9a4-45e0-9b80-3ea10becad9f
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=48dce284-099d-4461-b1c6-2f9e04e4a8ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:31:73:98:e2:f3:7d:c2:11:af:95:6f:7c:85:
                    ab:01:9b:bc:b8:90:56:5d:70:f1:69:88:95:c9:e3:
                    b4:51:75:ba:ae:2c:49:c4:82:c9:85:98:3d:8b:28:
                    dc:d2:aa:67:10:7f:a6:6a:f8:11:89:d0:05:3a:dd:
                    18:cb:79:8e:0e:2f:7b:ff:33:9c:d9:f9:52:20:33:
                    dd:3b:2d:bb:25:38:bd:e0:cb:49:0a:71:e4:8d:19:
                    c7:d8:98:6d:ed:39:ac:47:d8:2f:2e:c6:fa:26:88:
                    11:6d:ef:70:4c:32:fd:a6:4b:5c:59:f8:d2:ce:a3:
                    00:f3:7e:d0:1f:ec:00:ee:0d:0c:97:c7:72:36:0b:
                    5b:e2:80:cc:9c:d4:a6:ba:a0:29:4b:ba:af:16:2f:
                    97:63:c1:49:31:1f:eb:73:13:7f:6e:fe:05:2f:8c:
                    79:e9:d2:26:48:41:03:a3:fa:94:8f:7a:9f:0c:2f:
                    b2:0b:34:6b:60:8e:81:78:26:91:69:63:5d:6e:aa:
                    24:cb:88:05:3e:9d:0d:db:e4:d4:ba:1f:58:b1:82:
                    89:64:5e:5a:c4:ff:6d:9e:b9:c8:83:27:7c:f0:76:
                    1e:1c:12:5b:0e:09:7b:3d:e1:a6:cf:69:24:15:27:
                    3a:e4:30:8a:bd:46:ac:d5:1d:73:3e:78:e5:57:db:
                    7e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E5:FE:A8:E7:CB:26:99:E2:04:E9:EA:36:A5:20:EE:36:36:FD:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/f6404bf4-cfbe-301f-9707-5fcc0c9b808e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f/8eef875a-c9a4-45e0-9b80-3ea10becad9f.crl

            X509v3 Authority Key Identifier:
                keyid:DA:17:75:BB:11:3E:F2:6B:F0:F9:5E:6E:89:5C:C3:0E:E0:A8:CA:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8eef875a-c9a4-45e0-9b80-3ea10becad9f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.82.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:d1:6e:5e:03:07:f9:f0:a2:4e:b4:ac:1d:8b:61:94:45:47:
         0b:37:5d:5f:59:67:07:de:eb:eb:45:fa:af:14:0a:6e:06:f5:
         29:18:ab:7b:f8:9d:58:c1:69:98:64:69:41:f0:99:53:fe:23:
         f4:7b:17:37:d5:95:54:13:a4:b4:74:b2:fb:3e:4d:66:8d:57:
         b3:09:09:28:74:05:90:8d:b8:e6:8c:5e:f9:67:c6:9d:87:8f:
         90:c4:26:bf:69:7c:4c:5d:98:5b:32:e1:56:10:04:2c:c8:75:
         00:c2:1b:92:67:7e:61:bd:56:4e:28:72:32:f9:11:a5:28:d6:
         8f:fc:b9:c5:4f:09:23:41:97:f6:45:37:c2:8b:5e:e4:05:c8:
         22:9d:43:fb:58:0a:dc:7e:b1:a4:56:b8:64:ca:51:e1:a2:00:
         a7:7b:77:48:be:80:7d:af:c1:11:fc:8a:a4:2a:2f:f5:b5:be:
         23:5a:79:45:78:df:c4:0f:9c:45:a4:ee:18:52:ed:cd:de:5e:
         58:87:79:cd:3f:c1:f7:47:7c:ae:f9:0d:db:9c:6c:4f:b4:07:
         87:43:48:86:c9:b9:8f:8c:6f:ae:7c:bc:5b:78:91:f8:46:cf:
         07:8e:86:0f:3f:8b:95:f1:54:4f:26:cd:8d:08:a9:6d:a9:60:
         e1:7d:4d:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6kRQ8kjvTX4pVLi0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGVlZjg3NWEtYzlhNC00NWUwLTliODAtM2VhMTBiZWNh
ZDlmMB4XDTI2MDcyNzIxMDAxMVoXDTI2MTAyNTIxMDAxMVowLzEtMCsGA1UEAxMk
NDhkY2UyODQtMDk5ZC00NDYxLWIxYzYtMmY5ZTA0ZTRhOGNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTFzmOLzfcIRr5VvfIWrAZu8uJBWXXDxaYiV
yeO0UXW6rixJxILJhZg9iyjc0qpnEH+mavgRidAFOt0Yy3mODi97/zOc2flSIDPd
Oy27JTi94MtJCnHkjRnH2Jht7TmsR9gvLsb6JogRbe9wTDL9pktcWfjSzqMA837Q
H+wA7g0Ml8dyNgtb4oDMnNSmuqApS7qvFi+XY8FJMR/rcxN/bv4FL4x56dImSEED
o/qUj3qfDC+yCzRrYI6BeCaRaWNdbqoky4gFPp0N2+TUuh9YsYKJZF5axP9tnrnI
gyd88HYeHBJbDgl7PeGmz2kkFSc65DCKvUas1R1zPnjlV9t+DQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCXl/qjnyyaZ4gTp6jalIO42Nv1cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZWVm
ODc1YS1jOWE0LTQ1ZTAtOWI4MC0zZWExMGJlY2FkOWYvZjY0MDRiZjQtY2ZiZS0z
MDFmLTk3MDctNWZjYzBjOWI4MDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGVlZjg3NWEtYzlhNC00NWUwLTli
ODAtM2VhMTBiZWNhZDlmLzhlZWY4NzVhLWM5YTQtNDVlMC05YjgwLTNlYTEwYmVj
YWQ5Zi5jcmwwHwYDVR0jBBgwFoAU2hd1uxE+8mvw+V5uiVzDDuCoynIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC84ZWVmODc1YS1jOWE0LTQ1ZTAtOWI4MC0zZWEx
MGJlY2FkOWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FJEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHbRbl4DB/nwok60rB2LYZRFRws3XV9ZZwfe6+tF+q8UCm4G9SkYq3v4
nVjBaZhkaUHwmVP+I/R7FzfVlVQTpLR0svs+TWaNV7MJCSh0BZCNuOaMXvlnxp2H
j5DEJr9pfExdmFsy4VYQBCzIdQDCG5JnfmG9Vk4ocjL5EaUo1o/8ucVPCSNBl/ZF
N8KLXuQFyCKdQ/tYCtx+saRWuGTKUeGiAKd7d0i+gH2vwRH8iqQqL/W1viNaeUV4
38QPnEWk7hhS7c3eXliHec0/wfdHfK75DducbE+0B4dDSIbJuY+Mb658vFt4kfhG
zweOhg8/i5XxVE8mzY0IqW2pYOF9TVo=
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:12:35 2026 by rpki-client