Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/8260418f-0a04-3d77-a711-ae67a5fdb9d7.roa
File:                     8260418f-0a04-3d77-a711-ae67a5fdb9d7.roa (raw, json)
Hash identifier:          ze0WfeJkXMCaH9pCz54XrK0tEvAoFjEEGP4fFlm98rE=
Subject key identifier:   18:53:57:66:69:7B:29:81:21:4C:B0:EB:A7:A1:50:A8:68:08:41:FE
Certificate issuer:       /CN=95437874-24a3-4971-a87b-95b645e257bb
Certificate serial:       010D0C9F4328584F497364EC185A883A3C220B40
Authority key identifier: 0D:9A:58:69:BC:33:C0:D1:95:9C:3D:00:B9:00:3B:B9:43:8A:4E:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/8260418f-0a04-3d77-a711-ae67a5fdb9d7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36556
IP address blocks:        207.22.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:64:ec:18:5a:88:3a:3c:22:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95437874-24a3-4971-a87b-95b645e257bb
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ee91a40c-c98b-4195-954b-dd8174a0c0cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fe:bd:cf:35:6b:4a:c7:0d:a8:b5:1e:61:b5:
                    3d:0f:88:9c:97:b6:c6:3e:3e:26:3f:19:d3:bf:0c:
                    f6:bd:f3:dc:f8:29:f8:13:9d:3c:ef:83:e9:67:a2:
                    6d:2e:bb:03:d4:dd:b4:e2:e8:88:69:18:37:0a:5f:
                    9c:1f:54:ca:63:da:4c:ec:02:70:39:e8:eb:15:9e:
                    4f:16:d4:1b:d8:f7:60:d4:15:19:30:85:5b:6f:14:
                    35:c7:05:af:51:88:30:88:c8:75:3e:ff:df:67:06:
                    44:d6:ec:b5:d8:71:9b:2b:61:7d:9e:78:07:18:58:
                    a8:ed:99:a5:81:da:cb:1e:75:e3:cc:cb:83:c2:a5:
                    55:4d:ba:8e:74:50:f4:79:8b:d9:ad:60:61:a4:20:
                    26:8a:37:1e:57:18:82:f6:19:be:ae:4f:0d:5f:5f:
                    53:00:e6:d8:88:5b:ff:08:80:e7:b9:e7:f2:d5:64:
                    b0:39:cc:25:4c:43:c3:14:8c:9f:ef:43:3a:7d:0e:
                    6d:22:c5:83:da:d0:84:0c:b2:8c:75:9e:1c:66:ab:
                    ce:2f:31:0c:63:80:95:d0:88:7c:c8:62:f2:61:98:
                    9f:5a:8a:cb:98:a3:f8:0c:5f:44:4d:75:ea:6e:29:
                    f2:28:35:26:0d:64:a9:db:68:d7:54:5d:95:9a:55:
                    c7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:53:57:66:69:7B:29:81:21:4C:B0:EB:A7:A1:50:A8:68:08:41:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/8260418f-0a04-3d77-a711-ae67a5fdb9d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.crl

            X509v3 Authority Key Identifier:
                keyid:0D:9A:58:69:BC:33:C0:D1:95:9C:3D:00:B9:00:3B:B9:43:8A:4E:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.22.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:50:f4:7d:94:b5:7a:53:8a:6c:cd:0c:48:3b:04:73:83:f4:
         1c:fb:49:18:61:3d:dd:61:4d:44:8b:cf:cd:03:a7:23:e9:34:
         42:e9:65:e3:17:db:86:f1:6f:14:e7:9e:aa:ac:3d:2f:96:1e:
         fc:d7:2d:fa:24:93:38:a0:ef:c3:db:c5:3a:bd:06:e6:ff:7e:
         dc:f1:04:55:b4:a2:a1:dc:9e:9d:9e:c1:38:fc:72:64:90:a7:
         92:a1:65:c9:e4:10:86:6a:08:d8:72:0b:35:ba:95:f5:34:34:
         b8:33:ae:e0:e3:3c:79:e7:81:06:7b:71:b8:45:ac:5b:42:74:
         8c:8d:7b:1e:1a:7f:46:5b:c1:93:79:ed:24:bf:e4:e3:48:d0:
         9e:17:b0:63:30:7a:8f:9f:13:4f:da:26:b0:ef:11:44:7f:59:
         ea:59:30:3e:6f:dd:48:e7:37:48:b0:39:18:90:44:34:67:6a:
         67:2f:f4:90:6a:d4:3f:f0:47:57:f8:5c:ac:a1:17:a5:55:b5:
         3b:4e:58:90:67:45:96:8c:87:67:3e:f7:a3:d1:ec:74:03:1b:
         3c:24:c6:1d:15:ee:fb:dd:32:3a:5e:71:e1:f2:45:c8:9d:65:
         7d:6c:53:77:3c:9b:15:52:4e:fb:c3:6e:b1:42:1e:9d:b9:f1:
         d7:42:d5:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc2TsGFqIOjwiC0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTU0Mzc4NzQtMjRhMy00OTcxLWE4N2ItOTViNjQ1ZTI1
N2JiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZWU5MWE0MGMtYzk4Yi00MTk1LTk1NGItZGQ4MTc0YTBjMGNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAif69zzVrSscNqLUeYbU9D4icl7bGPj4mPxnT
vwz2vfPc+Cn4E50874PpZ6JtLrsD1N204uiIaRg3Cl+cH1TKY9pM7AJwOejrFZ5P
FtQb2Pdg1BUZMIVbbxQ1xwWvUYgwiMh1Pv/fZwZE1uy12HGbK2F9nngHGFio7Zml
gdrLHnXjzMuDwqVVTbqOdFD0eYvZrWBhpCAmijceVxiC9hm+rk8NX19TAObYiFv/
CIDnuefy1WSwOcwlTEPDFIyf70M6fQ5tIsWD2tCEDLKMdZ4cZqvOLzEMY4CV0Ih8
yGLyYZifWorLmKP4DF9ETXXqbinyKDUmDWSp22jXVF2VmlXHqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBhTV2ZpeymBIUyw66ehUKhoCEH+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85NTQz
Nzg3NC0yNGEzLTQ5NzEtYTg3Yi05NWI2NDVlMjU3YmIvODI2MDQxOGYtMGEwNC0z
ZDc3LWE3MTEtYWU2N2E1ZmRiOWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTU0Mzc4NzQtMjRhMy00OTcxLWE4
N2ItOTViNjQ1ZTI1N2JiLzk1NDM3ODc0LTI0YTMtNDk3MS1hODdiLTk1YjY0NWUy
NTdiYi5jcmwwHwYDVR0jBBgwFoAUDZpYabwzwNGVnD0AuQA7uUOKTmkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85NTQzNzg3NC0yNGEzLTQ5NzEtYTg3Yi05NWI2
NDVlMjU3YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzxYoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFxQ9H2UtXpTimzNDEg7BHOD9Bz7SRhhPd1hTUSLz80DpyPpNELpZeMX
24bxbxTnnqqsPS+WHvzXLfokkzig78PbxTq9Bub/ftzxBFW0oqHcnp2ewTj8cmSQ
p5KhZcnkEIZqCNhyCzW6lfU0NLgzruDjPHnngQZ7cbhFrFtCdIyNex4af0ZbwZN5
7SS/5ONI0J4XsGMweo+fE0/aJrDvEUR/WepZMD5v3UjnN0iwORiQRDRnamcv9JBq
1D/wR1f4XKyhF6VVtTtOWJBnRZaMh2c+96PR7HQDGzwkxh0V7vvdMjpeceHyRcid
ZX1sU3c8mxVSTvvDbrFCHp258ddC1YU=
-----END CERTIFICATE-----
Generated at Sat Sep 26 08:54:35 2026 by rpki-client