Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/0953ae45-1c67-3c98-894a-bc70bb78cbc1.roa
File:                     0953ae45-1c67-3c98-894a-bc70bb78cbc1.roa (raw, json)
Hash identifier:          KCMpi+2u/O1TqYANE4mLv5JwZrEYVW1g2BFtNDlFrvQ=
Subject key identifier:   F9:0A:AA:9E:8C:C3:AC:56:16:5A:AD:1D:AF:D0:6D:C0:9F:11:D1:DE
Certificate issuer:       /CN=48c974e9-82f6-4ede-812c-5b9302f0c7cc
Certificate serial:       010D0C9F4328584EA7977776D0A84E7FADE99B00
Authority key identifier: C4:16:34:F3:51:6F:6B:E6:30:BB:50:16:8D:70:1D:08:1A:18:28:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/0953ae45-1c67-3c98-894a-bc70bb78cbc1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54103
IP address blocks:        207.199.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:77:76:d0:a8:4e:7f:ad:e9:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48c974e9-82f6-4ede-812c-5b9302f0c7cc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=284ea3b9-c5cc-4f17-ac21-af5e5f062e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fb:dd:e3:16:bb:af:82:c8:47:41:db:06:df:
                    23:cf:41:25:a4:02:8d:d4:3d:eb:40:99:48:30:16:
                    49:2c:a1:3b:c0:a6:e7:8b:df:71:c7:39:bb:00:29:
                    27:bd:88:42:97:f1:c3:71:82:1d:95:ab:55:13:0f:
                    2c:03:ae:90:06:46:79:4b:36:4a:2b:ba:b8:72:9f:
                    9c:f7:d3:be:91:9f:96:9d:f9:af:ee:3f:73:07:af:
                    43:a3:e7:b7:16:e1:e0:16:c6:ba:58:29:30:50:8c:
                    70:eb:e3:4f:3c:cd:28:54:52:75:ee:5e:5a:44:79:
                    50:cf:7d:8a:f0:42:ce:5f:f7:bf:ca:5e:7e:e3:66:
                    16:50:80:90:1f:36:86:73:d7:6f:34:fe:6e:a0:01:
                    ad:cd:cd:4d:d3:75:0e:21:2c:0c:f7:55:f3:ec:6a:
                    62:18:6b:57:0d:fe:05:40:e5:b7:88:0f:8e:22:09:
                    47:ff:12:84:1d:f2:ec:b3:90:e7:a7:7d:b4:10:bd:
                    11:b0:70:01:23:0e:a9:b5:f9:4e:76:67:ce:e0:11:
                    28:e8:0a:b7:38:39:46:a2:ab:58:b3:e6:7d:98:2b:
                    30:4c:ac:74:33:b8:e6:14:66:21:3e:8f:37:80:5f:
                    2b:55:63:f7:df:17:74:8c:c8:4d:cc:02:ba:88:51:
                    f7:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:0A:AA:9E:8C:C3:AC:56:16:5A:AD:1D:AF:D0:6D:C0:9F:11:D1:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/0953ae45-1c67-3c98-894a-bc70bb78cbc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.crl

            X509v3 Authority Key Identifier:
                keyid:C4:16:34:F3:51:6F:6B:E6:30:BB:50:16:8D:70:1D:08:1A:18:28:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.199.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:fe:6e:b1:6c:7d:55:42:56:78:d2:d9:fa:fe:37:0e:40:96:
         a0:17:44:f4:ed:4e:63:4e:44:38:d6:db:4c:86:e0:17:f0:94:
         bd:61:7d:9f:68:5f:fa:2f:f5:14:82:bb:03:98:30:ed:e7:9c:
         ec:c5:cf:f7:b2:49:2a:79:26:03:cc:a6:41:8a:a0:70:a6:cf:
         f8:09:b7:d4:90:f7:e3:e0:c2:35:3f:b4:20:e1:e2:9f:d4:0c:
         8d:2a:3f:71:df:c6:62:0d:3d:11:97:48:57:ab:95:d2:f4:37:
         bb:87:d3:ba:0a:73:21:03:e3:d6:ef:30:ef:d3:64:3a:70:d3:
         50:63:d3:a1:a9:07:4e:14:66:a1:ef:9b:81:1a:60:1b:2e:6d:
         5d:f5:22:5c:93:4d:56:7a:02:c4:60:25:67:45:b0:dd:9c:c5:
         7e:54:c8:bf:12:2e:49:41:d9:a0:8f:45:74:b3:5c:4d:3e:d2:
         ac:04:61:f1:f3:40:cf:39:fe:ae:db:78:4e:fe:d3:fc:72:b6:
         d2:e7:43:62:02:38:f3:f5:6f:df:b0:15:67:5a:84:a7:e9:1c:
         32:2d:83:31:d5:d1:c7:cb:64:eb:71:19:92:d9:48:65:ee:27:
         63:23:e6:9d:fa:86:e7:1c:45:d5:ce:81:99:dd:1e:ad:9d:0d:
         4b:de:4a:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nl3d20KhOf63pmwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDhjOTc0ZTktODJmNi00ZWRlLTgxMmMtNWI5MzAyZjBj
N2NjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
Mjg0ZWEzYjktYzVjYy00ZjE3LWFjMjEtYWY1ZTVmMDYyZTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvvd4xa7r4LIR0HbBt8jz0ElpAKN1D3rQJlI
MBZJLKE7wKbni99xxzm7ACknvYhCl/HDcYIdlatVEw8sA66QBkZ5SzZKK7q4cp+c
99O+kZ+Wnfmv7j9zB69Do+e3FuHgFsa6WCkwUIxw6+NPPM0oVFJ17l5aRHlQz32K
8ELOX/e/yl5+42YWUICQHzaGc9dvNP5uoAGtzc1N03UOISwM91Xz7GpiGGtXDf4F
QOW3iA+OIglH/xKEHfLss5Dnp320EL0RsHABIw6ptflOdmfO4BEo6Aq3ODlGoqtY
s+Z9mCswTKx0M7jmFGYhPo83gF8rVWP33xd0jMhNzAK6iFH3EwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPkKqp6Mw6xWFlqtHa/QbcCfEdHeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80OGM5
NzRlOS04MmY2LTRlZGUtODEyYy01YjkzMDJmMGM3Y2MvMDk1M2FlNDUtMWM2Ny0z
Yzk4LTg5NGEtYmM3MGJiNzhjYmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDhjOTc0ZTktODJmNi00ZWRlLTgx
MmMtNWI5MzAyZjBjN2NjLzQ4Yzk3NGU5LTgyZjYtNGVkZS04MTJjLTViOTMwMmYw
YzdjYy5jcmwwHwYDVR0jBBgwFoAUxBY081Fva+Ywu1AWjXAdCBoYKDMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80OGM5NzRlOS04MmY2LTRlZGUtODEyYy01Yjkz
MDJmMGM3Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8etMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHz+brFsfVVCVnjS2fr+Nw5AlqAXRPTtTmNORDjW20yG4BfwlL1hfZ9o
X/ov9RSCuwOYMO3nnOzFz/eySSp5JgPMpkGKoHCmz/gJt9SQ9+PgwjU/tCDh4p/U
DI0qP3HfxmINPRGXSFerldL0N7uH07oKcyED49bvMO/TZDpw01Bj06GpB04UZqHv
m4EaYBsubV31IlyTTVZ6AsRgJWdFsN2cxX5UyL8SLklB2aCPRXSzXE0+0qwEYfHz
QM85/q7beE7+0/xyttLnQ2ICOPP1b9+wFWdahKfpHDItgzHV0cfLZOtxGZLZSGXu
J2Mj5p36huccRdXOgZndHq2dDUveShY=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:11:00 2026 by rpki-client