Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1df4ab6b-60bd-30a4-9978-6b8a20d5490b.roa
File:                     1df4ab6b-60bd-30a4-9978-6b8a20d5490b.roa (raw, json)
Hash identifier:          o5qOjFFfh7TF4+569Y7lzJdPx3NLud1BCU2gCJzkP9k=
Subject key identifier:   B3:31:71:C1:4F:0E:DF:AA:96:8D:E7:E1:DD:7B:AD:5D:8C:34:24:FD
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584E9BE51E0DE392A389DEA63AA0
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1df4ab6b-60bd-30a4-9978-6b8a20d5490b.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     22652
IP address blocks:        64.187.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:1e:0d:e3:92:a3:89:de:a6:3a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=cb33af66-b021-4d27-bbdd-2b8393e68c39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:58:89:66:ce:66:d4:ba:60:3b:05:0b:a0:df:
                    be:5e:43:76:fb:09:cc:49:c2:17:2c:47:e1:28:f6:
                    34:ca:3a:2c:c4:3c:ff:c9:a7:aa:32:f2:f7:4d:51:
                    78:f9:a7:2a:d7:6a:43:c2:ed:c0:16:b8:bf:70:b6:
                    e6:9b:3f:52:e9:36:16:77:fe:a8:a7:d5:13:86:45:
                    81:a6:d9:86:4a:9a:9a:f1:c3:f9:47:00:54:15:41:
                    59:a1:5a:56:02:bb:6a:c6:4e:16:25:c8:4d:58:63:
                    a5:aa:8a:9a:46:72:43:f9:a4:ff:2d:a7:15:de:12:
                    f0:e3:c1:5c:c2:5b:2c:68:05:7b:47:21:cc:e2:11:
                    81:ba:da:d0:fa:d1:b2:a3:3a:8a:8f:f6:1f:7e:bb:
                    4c:26:b7:b1:1e:2d:3c:4e:b6:d3:81:b8:2b:b2:d8:
                    90:f8:39:a7:e2:79:06:1d:08:14:7d:e3:92:1d:30:
                    c9:4c:96:c9:be:ac:6e:9a:40:71:19:73:69:b7:7b:
                    ee:f4:d5:47:c7:a1:da:d2:4b:00:81:f7:e2:da:e6:
                    16:30:1c:0c:fe:90:ea:d0:e4:7e:bb:1a:81:1a:47:
                    74:6d:8f:11:5d:d6:70:02:6c:87:65:63:ed:de:7f:
                    de:6f:cd:11:b8:a4:b7:f9:e4:24:b0:17:55:1d:7a:
                    e4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:31:71:C1:4F:0E:DF:AA:96:8D:E7:E1:DD:7B:AD:5D:8C:34:24:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1df4ab6b-60bd-30a4-9978-6b8a20d5490b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.187.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:2e:dd:ea:28:76:09:2c:90:b7:d5:ae:58:89:ca:55:20:ca:
         c8:39:0a:50:5f:a2:35:62:63:e3:fe:3d:f4:76:47:c9:06:3d:
         1e:dd:32:a8:5c:78:8e:7d:78:43:b2:12:09:8f:4c:37:24:32:
         3c:62:c4:9d:d9:05:96:6d:99:66:80:41:23:7f:d3:a3:57:35:
         4a:0b:25:7b:b7:0b:c0:31:85:4c:8e:4c:54:72:3c:b2:59:92:
         a2:d0:b9:89:ad:03:2f:63:c2:9e:64:f3:fd:34:83:09:76:d9:
         37:bc:72:10:02:34:25:1c:e4:c6:4f:eb:1b:e2:b7:00:2e:05:
         a9:27:62:e0:28:ca:e3:7d:7c:0f:62:e7:ca:4a:58:65:23:d9:
         1a:ed:ee:e3:66:35:d8:41:0c:7b:6e:28:d1:56:9f:1f:a3:da:
         0c:0d:75:bf:c2:53:61:52:9d:16:ad:59:92:13:1e:21:c8:e3:
         e7:8c:9c:5c:a4:d2:70:b0:a8:d1:57:9c:a8:e9:7e:03:7d:c4:
         f9:82:58:90:5b:38:8d:68:4b:15:95:19:ef:66:fd:c4:b1:71:
         2b:00:21:73:38:0b:ab:56:42:56:88:3d:e5:ec:e1:0f:64:ce:
         4e:06:fb:cf:9d:01:85:f4:9e:99:ff:e3:3f:4d:81:cb:ef:43:
         fe:71:e9:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5R4N45Kjid6mOqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk
Y2IzM2FmNjYtYjAyMS00ZDI3LWJiZGQtMmI4MzkzZTY4YzM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiViJZs5m1LpgOwULoN++XkN2+wnMScIXLEfh
KPY0yjosxDz/yaeqMvL3TVF4+acq12pDwu3AFri/cLbmmz9S6TYWd/6op9UThkWB
ptmGSpqa8cP5RwBUFUFZoVpWArtqxk4WJchNWGOlqoqaRnJD+aT/LacV3hLw48Fc
wlssaAV7RyHM4hGButrQ+tGyozqKj/YffrtMJrexHi08TrbTgbgrstiQ+Dmn4nkG
HQgUfeOSHTDJTJbJvqxumkBxGXNpt3vu9NVHx6Ha0ksAgffi2uYWMBwM/pDq0OR+
uxqBGkd0bY8RXdZwAmyHZWPt3n/eb80RuKS3+eQksBdVHXrk1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLMxccFPDt+qlo3n4d17rV2MNCT9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMWRmNGFiNmItNjBiZC0z
MGE0LTk5NzgtNmI4YTIwZDU0OTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQLu4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADku3eoodgkskLfVrliJylUgysg5ClBfojViY+P+PfR2R8kGPR7dMqhc
eI59eEOyEgmPTDckMjxixJ3ZBZZtmWaAQSN/06NXNUoLJXu3C8AxhUyOTFRyPLJZ
kqLQuYmtAy9jwp5k8/00gwl22Te8chACNCUc5MZP6xvitwAuBaknYuAoyuN9fA9i
58pKWGUj2Rrt7uNmNdhBDHtuKNFWnx+j2gwNdb/CU2FSnRatWZITHiHI4+eMnFyk
0nCwqNFXnKjpfgN9xPmCWJBbOI1oSxWVGe9m/cSxcSsAIXM4C6tWQlaIPeXs4Q9k
zk4G+8+dAYX0npn/4z9NgcvvQ/5x6aQ=
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:47:06 2026 by rpki-client