Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/07555136-43a0-32c2-8d8d-174d3f42dfab.roa
File:                     07555136-43a0-32c2-8d8d-174d3f42dfab.roa (raw, json)
Hash identifier:          nkZUudRWpCOSDYIOIAwUDBZIzXLG/hPFvZbjN5y9WKc=
Subject key identifier:   7E:04:F3:3E:2E:3A:0E:8A:74:4F:8E:D6:53:D2:B8:49:88:2A:AB:5A
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584EFA8C362C25C666C488EF7B40
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/07555136-43a0-32c2-8d8d-174d3f42dfab.roa
Signing time:             Thu 27 Aug 2026 18:43:07 +0000
ROA not before:           Thu 27 Aug 2026 18:43:07 +0000
ROA not after:            Wed 25 Nov 2026 19:43:07 +0000
asID:                     22652
IP address blocks:        173.224.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fa:8c:36:2c:25:c6:66:c4:88:ef:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Aug 27 18:43:07 2026 GMT
            Not After : Nov 25 19:43:07 2026 GMT
        Subject: CN=4632c461-f89a-40a3-83cc-6560b51dc5c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:46:90:ac:3c:b9:29:90:92:dc:c6:8b:e0:1d:
                    5f:00:51:94:9f:e4:5a:89:71:c6:c9:95:de:1f:30:
                    c7:b0:e6:97:69:a0:d9:24:a1:2e:5a:50:d5:af:48:
                    e2:e5:cd:c2:6b:6d:2e:58:d7:b6:c0:70:9d:1d:d1:
                    45:40:f0:bf:30:ba:b4:97:04:8d:60:ab:ca:1b:59:
                    dc:c5:4b:64:62:d2:84:2d:0c:76:ce:39:ff:e5:c7:
                    9e:d1:e7:51:d9:a9:39:a4:ce:5e:82:cc:50:15:7e:
                    99:25:e7:05:58:ce:e9:78:58:74:8f:87:6a:02:1d:
                    b6:92:5c:e8:4e:f0:3c:7c:3f:2d:bf:18:ea:40:03:
                    ab:56:c6:f0:1e:d9:0e:0e:09:19:3c:88:34:7c:8d:
                    51:8e:6e:03:ca:9c:05:53:97:8a:49:1e:c2:4c:17:
                    be:b3:ef:3d:8b:56:96:1a:d5:a3:81:60:f7:9d:f2:
                    ae:dd:38:cb:cc:a6:c7:9a:e5:76:aa:ea:93:54:e8:
                    bc:dc:3b:c9:f2:64:c6:45:4d:cb:3a:ab:a3:4e:6c:
                    43:06:7d:e8:d0:0c:e9:e6:47:f7:83:14:2c:c1:ae:
                    93:be:e2:8d:87:9d:93:b9:69:94:f2:07:e9:8d:49:
                    0b:57:c6:35:dc:a1:b0:39:07:33:67:fe:41:8f:4a:
                    3e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:04:F3:3E:2E:3A:0E:8A:74:4F:8E:D6:53:D2:B8:49:88:2A:AB:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/07555136-43a0-32c2-8d8d-174d3f42dfab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.224.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:36:8d:8e:3d:04:91:00:a8:c1:3b:f1:fc:e0:17:9e:ae:f3:
         92:9f:31:ce:4e:b4:bd:74:d7:e3:82:0c:20:5a:40:db:9a:c0:
         19:51:8d:04:f9:79:a2:25:d5:c4:2e:ab:6d:0b:1c:4a:75:a4:
         02:fd:01:91:d2:bc:a0:15:ab:34:05:91:5a:c0:c3:c2:6d:4e:
         ca:46:d2:f7:9d:1a:8b:b5:f2:40:7e:36:0c:74:74:a3:ac:de:
         93:cb:da:ed:cb:6f:fd:52:92:ec:b1:37:fa:9d:01:58:32:e5:
         b8:12:ed:5b:98:6d:ef:b8:9f:bd:64:b0:68:7d:76:0a:67:46:
         93:40:59:84:d7:ff:95:e8:ba:33:34:d4:0d:d3:38:6a:50:85:
         fe:94:0d:81:2a:98:4c:23:3d:a1:9c:41:61:86:35:ac:b5:bc:
         26:50:0e:04:fe:30:41:76:03:76:6e:1e:9d:24:a7:f2:c1:54:
         d9:14:b0:fa:a0:5e:ff:f1:e3:5c:4e:af:31:f1:46:1d:45:9f:
         e0:dd:7c:6d:ce:27:8c:6d:31:86:dd:d9:75:4e:76:7d:06:76:
         6c:2a:89:56:e1:8d:0e:5a:ef:75:72:d7:88:73:53:d5:62:aa:
         9f:23:c0:59:2b:37:55:00:e7:5e:a1:93:08:fe:0c:46:04:1a:
         23:f9:51:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE76jDYsJcZmxIjve0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI2MDgyNzE4NDMwN1oXDTI2MTEyNTE5NDMwN1owLzEtMCsGA1UEAxMk
NDYzMmM0NjEtZjg5YS00MGEzLTgzY2MtNjU2MGI1MWRjNWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0aQrDy5KZCS3MaL4B1fAFGUn+RaiXHGyZXe
HzDHsOaXaaDZJKEuWlDVr0ji5c3Ca20uWNe2wHCdHdFFQPC/MLq0lwSNYKvKG1nc
xUtkYtKELQx2zjn/5cee0edR2ak5pM5egsxQFX6ZJecFWM7peFh0j4dqAh22klzo
TvA8fD8tvxjqQAOrVsbwHtkODgkZPIg0fI1Rjm4DypwFU5eKSR7CTBe+s+89i1aW
GtWjgWD3nfKu3TjLzKbHmuV2quqTVOi83DvJ8mTGRU3LOqujTmxDBn3o0Azp5kf3
gxQswa6TvuKNh52TuWmU8gfpjUkLV8Y13KGwOQczZ/5Bj0o+OQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH4E8z4uOg6KdE+O1lPSuEmIKqtaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMDc1NTUxMzYtNDNhMC0z
MmMyLThkOGQtMTc0ZDNmNDJkZmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEreCAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEU2jY49BJEAqME78fzgF56u85KfMc5OtL101+OCDCBaQNuawBlRjQT5
eaIl1cQuq20LHEp1pAL9AZHSvKAVqzQFkVrAw8JtTspG0vedGou18kB+Ngx0dKOs
3pPL2u3Lb/1SkuyxN/qdAVgy5bgS7VuYbe+4n71ksGh9dgpnRpNAWYTX/5XoujM0
1A3TOGpQhf6UDYEqmEwjPaGcQWGGNay1vCZQDgT+MEF2A3ZuHp0kp/LBVNkUsPqg
Xv/x41xOrzHxRh1Fn+DdfG3OJ4xtMYbd2XVOdn0GdmwqiVbhjQ5a73Vy14hzU9Vi
qp8jwFkrN1UA516hkwj+DEYEGiP5UeU=
-----END CERTIFICATE-----
Generated at Wed Sep 23 15:16:11 2026 by rpki-client