Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/87d6315b-8b3b-3ba8-9be4-a5b7433e605a.roa
File:                     87d6315b-8b3b-3ba8-9be4-a5b7433e605a.roa (raw, json)
Hash identifier:          W9u6oLcuPt8HCBEPc1sWq+f32HCLzYV9kHIVEEnXJS0=
Subject key identifier:   AB:5B:8B:2D:DD:D4:9C:86:53:19:B1:E4:2C:22:8B:BA:13:F4:A0:8B
Certificate issuer:       /CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a
Certificate serial:       010D0C9F4328584E9A7FD00E971DBBDD3A34B280
Authority key identifier: 11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/87d6315b-8b3b-3ba8-9be4-a5b7433e605a.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     1299
IP address blocks:        72.251.128.0/19 maxlen: 24
                          158.62.224.0/19 maxlen: 24
                          167.254.96.0/20 maxlen: 24
                          209.25.224.0/21 maxlen: 24
                          2605:d2c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:d0:0e:97:1d:bb:dd:3a:34:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=7e559b7f-c5fc-47d7-91e1-bdc788663df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:82:03:97:43:20:29:c2:cb:a2:4e:a7:72:63:
                    c8:64:38:40:f9:a9:c1:bb:60:d6:c4:d5:5f:9c:3b:
                    10:da:6d:55:08:cf:f5:65:07:1c:32:11:36:d1:11:
                    4d:b4:3d:13:3a:c1:38:d6:af:ef:e0:d4:ed:2d:1d:
                    1b:f4:18:66:4e:50:50:48:30:dd:7f:5f:5b:c7:c3:
                    df:ad:07:57:b0:e6:b1:ca:df:1c:96:80:15:ea:01:
                    f5:e2:61:60:50:f7:e7:5f:97:8c:49:e5:b7:89:89:
                    4a:98:b6:12:6d:c9:67:b6:7c:2e:b9:2e:d8:56:32:
                    88:52:09:9a:2f:ad:28:27:f0:2c:0f:af:db:a5:f2:
                    ac:6a:06:9e:96:ce:6e:80:d4:75:44:11:a6:26:fb:
                    d3:7f:25:40:9a:81:ef:d4:d3:cd:cd:69:f8:5d:27:
                    43:17:d8:31:b0:14:45:6f:c3:f3:fa:74:5d:e7:64:
                    7e:48:45:a2:18:e1:7b:da:14:40:cc:e8:10:c0:47:
                    85:47:87:83:88:c3:6e:f4:5f:34:63:cf:a2:07:18:
                    3f:ce:ec:30:f3:bc:8d:1e:8b:5e:32:3f:b7:c4:d7:
                    0a:c8:52:4d:31:92:4c:bc:c2:02:b6:5e:73:ba:00:
                    1d:8e:21:15:8c:1f:60:3a:b0:be:2e:81:4b:2b:31:
                    e0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5B:8B:2D:DD:D4:9C:86:53:19:B1:E4:2C:22:8B:BA:13:F4:A0:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/87d6315b-8b3b-3ba8-9be4-a5b7433e605a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl

            X509v3 Authority Key Identifier:
                keyid:11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.251.128.0/19
                  158.62.224.0/19
                  167.254.96.0/20
                  209.25.224.0/21
                IPv6:
                  2605:d2c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:24:82:79:98:7d:fa:fe:45:68:da:7a:d3:c2:8f:4a:32:2f:
         3a:94:51:41:23:e2:32:bb:8d:30:98:7e:ee:55:5a:ed:e0:62:
         97:b3:50:04:45:0e:be:4e:ee:28:a6:10:f8:5e:d3:96:53:18:
         1a:a2:36:d6:5c:6e:ab:47:0c:6c:a7:cd:83:0b:7c:97:29:0c:
         f2:80:d7:e0:d8:6d:de:78:6e:05:32:a9:67:c0:ef:d4:c5:1e:
         06:22:7d:54:aa:25:cc:1f:80:90:0d:ed:0a:97:ed:e3:d5:d0:
         b4:d9:0e:64:10:0f:b6:ee:49:e3:5d:b0:b4:97:8e:6a:9c:28:
         56:cc:ab:00:ab:6c:2c:fd:af:3b:44:f9:7e:13:2a:59:45:8d:
         88:16:38:1a:06:33:03:b5:81:ae:c0:e7:00:a5:56:d0:4b:d9:
         26:0f:7e:aa:20:31:bc:de:88:b1:47:11:23:1a:5b:2b:78:15:
         ab:5b:c4:a0:7f:3b:22:a8:ce:63:78:20:9d:e8:ed:b5:83:96:
         ab:e2:c2:5b:24:be:d1:f8:e7:b8:7d:84:24:eb:e7:b9:1a:c7:
         b3:cd:b0:4b:8c:f8:ec:41:93:aa:d0:da:6f:86:e8:53:87:8f:
         b1:bd:9a:9e:4a:ca:c7:25:65:a9:0a:fe:c4:13:2c:44:1b:e2:
         8b:5c:74:4c
-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgIUAQ0Mn0MoWE6af9AOlx273To0soAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjVkZGVmY2QtNmUwZS00OGFjLTg3MjgtYTFkODJlOTEx
MjlhMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk
N2U1NTliN2YtYzVmYy00N2Q3LTkxZTEtYmRjNzg4NjYzZGY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4IDl0MgKcLLok6ncmPIZDhA+anBu2DWxNVf
nDsQ2m1VCM/1ZQccMhE20RFNtD0TOsE41q/v4NTtLR0b9BhmTlBQSDDdf19bx8Pf
rQdXsOaxyt8cloAV6gH14mFgUPfnX5eMSeW3iYlKmLYSbclntnwuuS7YVjKIUgma
L60oJ/AsD6/bpfKsagaels5ugNR1RBGmJvvTfyVAmoHv1NPNzWn4XSdDF9gxsBRF
b8Pz+nRd52R+SEWiGOF72hRAzOgQwEeFR4eDiMNu9F80Y8+iBxg/zuww87yNHote
Mj+3xNcKyFJNMZJMvMICtl5zugAdjiEVjB9gOrC+LoFLKzHgeQIDAQABo4IDdjCC
A3IwHQYDVR0OBBYEFKtbiy3d1JyGUxmx5Cwii7oT9KCLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yNWRk
ZWZjZC02ZTBlLTQ4YWMtODcyOC1hMWQ4MmU5MTEyOWEvODdkNjMxNWItOGIzYi0z
YmE4LTliZTQtYTViNzQzM2U2MDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjVkZGVmY2QtNmUwZS00OGFjLTg3
MjgtYTFkODJlOTExMjlhLzI1ZGRlZmNkLTZlMGUtNDhhYy04NzI4LWExZDgyZTkx
MTI5YS5jcmwwHwYDVR0jBBgwFoAUERE64R4SQWKGBHYPg+Iv7Tr5tgowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yNWRkZWZjZC02ZTBlLTQ4YWMtODcyOC1hMWQ4
MmU5MTEyOWEuY2VyMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFSPuAAwQF
nj7gAwQEp/5gAwQD0RngMA0EAgACMAcDBQAmBdLAMFQGA1UdIAEB/wRKMEgwRgYI
KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz
b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFUkgnmYffr+
RWjaetPCj0oyLzqUUUEj4jK7jTCYfu5VWu3gYpezUARFDr5O7iimEPhe05ZTGBqi
NtZcbqtHDGynzYMLfJcpDPKA1+DYbd54bgUyqWfA79TFHgYifVSqJcwfgJAN7QqX
7ePV0LTZDmQQD7buSeNdsLSXjmqcKFbMqwCrbCz9rztE+X4TKllFjYgWOBoGMwO1
ga7A5wClVtBL2SYPfqogMbzeiLFHESMaWyt4FatbxKB/OyKozmN4IJ3o7bWDlqvi
wlskvtH457h9hCTr57kax7PNsEuM+OxBk6rQ2m+G6FOHj7G9mp5KysclZakK/sQT
LEQb4otcdEw=
-----END CERTIFICATE-----
Generated at Tue Jul 28 14:48:39 2026 by rpki-client