Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b/ac4e901d-af76-3fa6-9f3b-49932711d6f5.roa
File:                     ac4e901d-af76-3fa6-9f3b-49932711d6f5.roa (raw, json)
Hash identifier:          8jdzVCUs626dhQi89gQ/yvufwxc2FENT8Ml9NbMQH2o=
Subject key identifier:   CC:67:1A:4A:11:FA:D3:57:74:F9:28:1F:7F:67:DD:20:45:85:51:64
Certificate issuer:       /CN=ad92f21a-d22e-4072-8a4c-fdc4c6483e4b
Certificate serial:       010D0C9F4328584EA786DD325E22A13D906E64B0
Authority key identifier: C2:D7:54:E2:08:4D:12:16:19:38:CB:B9:B1:2C:95:E6:93:41:1D:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b/ac4e901d-af76-3fa6-9f3b-49932711d6f5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     395743
IP address blocks:        208.95.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:dd:32:5e:22:a1:3d:90:6e:64:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad92f21a-d22e-4072-8a4c-fdc4c6483e4b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b1f3b70c-22dd-4eb5-bdf3-38bc8007ec49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:75:b1:a7:15:54:a6:3a:37:25:8e:c7:aa:
                    83:d1:a1:c9:eb:ca:ed:22:1a:75:7e:66:66:d3:54:
                    f3:5b:3a:e4:18:9a:a4:89:4c:d2:14:c9:85:18:72:
                    2c:f6:0c:38:57:ba:17:35:5c:05:24:73:4e:72:d9:
                    80:a8:52:c0:8c:6a:22:5d:d6:6f:ee:11:13:23:45:
                    fc:35:9a:5a:a3:00:0c:ee:10:71:60:44:ee:6f:70:
                    9d:f0:45:19:2b:e0:84:49:b3:d9:15:43:5b:8a:4b:
                    11:04:4d:89:a5:20:65:6d:ca:ef:6b:8f:c7:23:5b:
                    37:13:0c:fa:57:f8:c1:14:04:9e:24:62:7c:e1:91:
                    2a:12:0e:7d:74:01:a2:1f:17:e1:ad:ed:15:71:46:
                    14:5f:55:13:d2:a1:02:b4:0b:54:b2:e0:55:a9:7b:
                    0b:4a:70:99:2b:50:36:9d:e0:68:eb:0d:a8:14:bc:
                    2f:68:56:dc:dc:fa:cd:64:1c:b1:52:ab:ce:22:e7:
                    a9:05:96:31:62:d6:97:31:01:15:bb:cc:f9:83:1f:
                    87:91:2f:bc:55:36:d7:6b:c5:ae:87:73:23:0f:77:
                    2f:8e:bd:ed:93:f5:b8:ca:86:fa:b5:4b:52:65:6b:
                    09:01:07:d9:59:b0:3a:09:b7:68:21:27:c3:47:0a:
                    ee:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:67:1A:4A:11:FA:D3:57:74:F9:28:1F:7F:67:DD:20:45:85:51:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b/ac4e901d-af76-3fa6-9f3b-49932711d6f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b.crl

            X509v3 Authority Key Identifier:
                keyid:C2:D7:54:E2:08:4D:12:16:19:38:CB:B9:B1:2C:95:E6:93:41:1D:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad92f21a-d22e-4072-8a4c-fdc4c6483e4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.95.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:50:c7:7d:36:26:7c:f9:61:0e:82:94:7f:5d:1c:59:3e:7d:
         32:29:85:bb:f1:09:11:ff:ed:bc:76:a2:22:2a:a5:1f:55:90:
         17:91:75:9b:4d:89:f7:36:30:e7:1e:b0:f9:11:14:33:79:b8:
         2f:2d:48:b7:fd:cb:48:53:3a:86:2d:2a:af:2c:c8:24:9f:e4:
         58:54:c5:9f:46:64:64:45:b8:d2:e9:fd:82:6e:6a:58:10:c4:
         00:b9:3f:99:7b:6e:98:a1:dd:73:f3:df:7b:bd:a2:e7:9d:42:
         7c:78:f8:ff:31:6f:35:2a:3a:d0:61:6c:59:23:09:b6:fa:c4:
         9e:e8:46:9f:96:30:6f:71:20:3a:0b:97:0a:42:cd:60:ac:d5:
         82:e5:7b:a1:4a:e7:6f:e9:96:9d:c1:84:18:22:81:21:15:c1:
         af:d4:21:fb:99:7b:15:62:d3:0b:b6:dc:17:1b:2a:6a:59:fa:
         33:2c:0b:57:dd:c5:7e:cc:53:0e:77:3c:42:65:c7:2a:3b:e2:
         2e:78:b3:f1:42:c4:a8:c3:a8:84:a8:00:6f:4e:65:bd:7a:d0:
         d1:a9:af:be:d6:27:a1:0c:b0:f1:78:28:d2:0b:69:bc:35:f3:
         7f:81:a6:22:a6:1a:3e:6d:10:9a:3d:71:44:48:2d:81:5d:75:
         6e:04:79:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nht0yXiKhPZBuZLAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWQ5MmYyMWEtZDIyZS00MDcyLThhNGMtZmRjNGM2NDgz
ZTRiMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YjFmM2I3MGMtMjJkZC00ZWI1LWJkZjMtMzhiYzgwMDdlYzQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb51sacVVKY6NyWOx6qD0aHJ68rtIhp1fmZm
01TzWzrkGJqkiUzSFMmFGHIs9gw4V7oXNVwFJHNOctmAqFLAjGoiXdZv7hETI0X8
NZpaowAM7hBxYETub3Cd8EUZK+CESbPZFUNbiksRBE2JpSBlbcrva4/HI1s3Ewz6
V/jBFASeJGJ84ZEqEg59dAGiHxfhre0VcUYUX1UT0qECtAtUsuBVqXsLSnCZK1A2
neBo6w2oFLwvaFbc3PrNZByxUqvOIuepBZYxYtaXMQEVu8z5gx+HkS+8VTbXa8Wu
h3MjD3cvjr3tk/W4yob6tUtSZWsJAQfZWbA6CbdoISfDRwru0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMxnGkoR+tNXdPkoH39n3SBFhVFkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZDky
ZjIxYS1kMjJlLTQwNzItOGE0Yy1mZGM0YzY0ODNlNGIvYWM0ZTkwMWQtYWY3Ni0z
ZmE2LTlmM2ItNDk5MzI3MTFkNmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWQ5MmYyMWEtZDIyZS00MDcyLThh
NGMtZmRjNGM2NDgzZTRiL2FkOTJmMjFhLWQyMmUtNDA3Mi04YTRjLWZkYzRjNjQ4
M2U0Yi5jcmwwHwYDVR0jBBgwFoAUwtdU4ghNEhYZOMu5sSyV5pNBHT0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZDkyZjIxYS1kMjJlLTQwNzItOGE0Yy1mZGM0
YzY0ODNlNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F9VMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE1Qx302Jnz5YQ6ClH9dHFk+fTIphbvxCRH/7bx2oiIqpR9VkBeRdZtN
ifc2MOcesPkRFDN5uC8tSLf9y0hTOoYtKq8syCSf5FhUxZ9GZGRFuNLp/YJualgQ
xAC5P5l7bpih3XPz33u9ouedQnx4+P8xbzUqOtBhbFkjCbb6xJ7oRp+WMG9xIDoL
lwpCzWCs1YLle6FK52/plp3BhBgigSEVwa/UIfuZexVi0wu23BcbKmpZ+jMsC1fd
xX7MUw53PEJlxyo74i54s/FCxKjDqISoAG9OZb160NGpr77WJ6EMsPF4KNILabw1
83+BpiKmGj5tEJo9cURILYFddW4EeTE=
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:49:55 2026 by rpki-client