Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/47647622-c2d0-3c20-ad37-2bd158b6bdfb.roa
File:                     47647622-c2d0-3c20-ad37-2bd158b6bdfb.roa (raw, json)
Hash identifier:          00UdknBR4Ojxg3nZWy2lK9hViHIds/VwDi1aB8v5OJM=
Subject key identifier:   17:FB:24:6A:E4:05:6F:56:02:F5:90:75:58:2C:54:A0:B9:B4:69:B7
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584E9A7FDAD29556927D8235AAD8
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/47647622-c2d0-3c20-ad37-2bd158b6bdfb.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     11232
IP address blocks:        137.22.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:da:d2:95:56:92:7d:82:35:aa:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=03d7e18a-868b-4638-acb4-93d9bef4eb7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ae:76:89:01:14:21:61:84:23:9f:fc:97:38:
                    fc:50:91:b6:41:a1:2d:ff:e6:de:ca:e4:c0:8a:c0:
                    f2:f2:90:ca:dd:59:8a:40:09:b2:64:08:74:b8:c6:
                    10:d7:e5:09:0e:b6:56:61:86:4c:61:bc:25:3e:29:
                    83:c0:33:ff:4a:51:00:bf:05:e6:d9:76:a5:dc:59:
                    9e:ee:82:b0:93:3d:6f:f4:07:f5:62:53:54:fd:57:
                    c0:c4:ee:ac:b9:8a:76:be:9a:02:b8:62:55:04:ad:
                    29:e4:66:eb:3c:68:d4:8b:7d:56:91:5e:ca:a8:ca:
                    3d:06:ca:7d:58:ec:e8:68:58:73:0f:ab:2b:5f:02:
                    ac:d9:7e:8a:e6:41:29:cd:6e:77:9b:09:07:b7:79:
                    37:0d:14:67:66:1b:8a:74:05:21:44:0f:b3:e4:fb:
                    5d:6a:f7:0d:95:b8:5a:fe:f3:85:93:85:4d:37:82:
                    3f:67:f4:3b:a3:15:96:c7:20:74:3d:af:a1:28:b1:
                    f1:0e:00:b1:77:64:f5:23:2f:4c:ce:20:6e:c1:8d:
                    9a:f6:de:48:c2:f8:f3:e2:9b:ab:6a:dd:74:3a:6b:
                    9c:a4:3e:b1:7b:01:94:d2:34:1b:c6:a1:eb:9d:0d:
                    d0:30:ee:6a:91:57:41:e9:df:bd:17:5f:ef:e3:97:
                    94:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FB:24:6A:E4:05:6F:56:02:F5:90:75:58:2C:54:A0:B9:B4:69:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/47647622-c2d0-3c20-ad37-2bd158b6bdfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.22.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:31:e2:fe:af:c6:b0:7e:2a:db:02:ba:7f:d5:13:27:7d:67:
         c3:97:82:8a:0f:04:77:4e:2c:85:b9:21:4c:5a:f9:79:0d:d2:
         e2:30:a1:a4:c2:09:c9:60:92:7a:2f:94:61:e8:c9:7d:ae:43:
         70:0a:02:c7:ba:51:dc:04:11:62:98:78:7c:f7:5e:34:41:e8:
         37:3c:22:b4:6a:a1:9b:43:c9:d2:64:f4:38:2e:c5:1c:93:ee:
         d1:af:c1:4d:a6:20:5c:61:a7:d3:07:9f:fd:33:02:49:21:55:
         1f:a6:64:21:c0:70:a4:08:cb:e3:b2:39:84:3a:6c:13:fe:ac:
         4c:e0:02:e5:b1:09:18:16:05:2d:e7:c6:27:9e:50:da:07:4a:
         a6:90:aa:28:e1:c9:cb:3b:46:d0:27:59:cd:6d:46:e5:46:f9:
         1a:a3:bb:f5:e1:99:45:b4:f1:c9:00:a6:12:2e:3f:2b:d5:79:
         47:44:92:fa:13:47:98:e5:40:b8:c8:01:d2:32:d3:84:30:10:
         8d:d0:3a:7d:a2:dd:71:bb:6e:34:52:02:54:0f:79:b0:c0:af:
         55:c0:89:a1:13:23:d0:e1:03:7b:10:2c:8a:dc:28:33:c1:57:
         c7:74:01:77:14:5f:82:61:3f:58:a7:1e:8f:1b:12:30:1f:cb:
         5c:42:80:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af9rSlVaSfYI1qtgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk
MDNkN2UxOGEtODY4Yi00NjM4LWFjYjQtOTNkOWJlZjRlYjdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja52iQEUIWGEI5/8lzj8UJG2QaEt/+beyuTA
isDy8pDK3VmKQAmyZAh0uMYQ1+UJDrZWYYZMYbwlPimDwDP/SlEAvwXm2Xal3Fme
7oKwkz1v9Af1YlNU/VfAxO6suYp2vpoCuGJVBK0p5GbrPGjUi31WkV7KqMo9Bsp9
WOzoaFhzD6srXwKs2X6K5kEpzW53mwkHt3k3DRRnZhuKdAUhRA+z5PtdavcNlbha
/vOFk4VNN4I/Z/Q7oxWWxyB0Pa+hKLHxDgCxd2T1Iy9MziBuwY2a9t5Iwvjz4pur
at10OmucpD6xewGU0jQbxqHrnQ3QMO5qkVdB6d+9F1/v45eUBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBf7JGrkBW9WAvWQdVgsVKC5tGm3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvNDc2NDc2MjItYzJkMC0z
YzIwLWFkMzctMmJkMTU4YjZiZGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFiRZgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJQx4v6vxrB+KtsCun/VEyd9Z8OXgooPBHdOLIW5IUxa+XkN0uIwoaTC
CclgknovlGHoyX2uQ3AKAse6UdwEEWKYeHz3XjRB6Dc8IrRqoZtDydJk9DguxRyT
7tGvwU2mIFxhp9MHn/0zAkkhVR+mZCHAcKQIy+OyOYQ6bBP+rEzgAuWxCRgWBS3n
xieeUNoHSqaQqijhycs7RtAnWc1tRuVG+Rqju/XhmUW08ckAphIuPyvVeUdEkvoT
R5jlQLjIAdIy04QwEI3QOn2i3XG7bjRSAlQPebDAr1XAiaETI9DhA3sQLIrcKDPB
V8d0AXcUX4JhP1inHo8bEjAfy1xCgCo=
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:37:59 2026 by rpki-client