Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c67559d-5543-4d0a-b17b-c1476e206181/d939845c-239f-3085-8cdc-cf9336136dec.roa
File:                     d939845c-239f-3085-8cdc-cf9336136dec.roa (raw, json)
Hash identifier:          U1TkBBsJNRW3mXqsY81m9qzESsceFw6VqqPBrtDVBZE=
Subject key identifier:   E7:41:EF:EC:55:A1:35:95:CD:5E:89:00:2E:7B:1C:4C:78:69:F4:61
Certificate issuer:       /CN=7c67559d-5543-4d0a-b17b-c1476e206181
Certificate serial:       010D0C9F4328584CC777419F66BC210C17311F00
Authority key identifier: A7:02:15:25:EB:D1:75:78:06:09:B8:0D:E8:2C:2F:F8:89:3B:AB:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c67559d-5543-4d0a-b17b-c1476e206181.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c67559d-5543-4d0a-b17b-c1476e206181/d939845c-239f-3085-8cdc-cf9336136dec.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     22611
IP address blocks:        172.82.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c67559d-5543-4d0a-b17b-c1476e206181/7c67559d-5543-4d0a-b17b-c1476e206181.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c67559d-5543-4d0a-b17b-c1476e206181/7c67559d-5543-4d0a-b17b-c1476e206181.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c67559d-5543-4d0a-b17b-c1476e206181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:41:9f:66:bc:21:0c:17:31:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c67559d-5543-4d0a-b17b-c1476e206181
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=c84db67f-3d6d-4da2-9499-f25daa8de749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:35:a0:3b:a9:c2:7e:e4:7b:83:8c:01:3b:0d:
                    85:ba:12:5e:71:63:1f:60:f8:5b:7e:7b:a1:d9:46:
                    98:a7:04:92:e2:e8:71:07:ad:d3:cb:79:84:3e:fe:
                    aa:c8:cd:23:3e:bc:67:0f:7e:60:3f:5c:62:a0:3d:
                    9b:21:65:9f:36:8d:d1:89:30:0a:5b:ba:d3:53:ca:
                    65:d3:0f:8e:a7:a0:5d:46:05:1b:2d:bd:83:eb:30:
                    58:f8:3e:e3:fa:c7:6f:8e:60:40:7a:dc:7f:59:55:
                    13:fc:03:e1:8e:2a:5a:84:6f:90:69:ae:a4:c3:29:
                    5f:05:de:01:71:9e:b8:09:6f:23:f2:9b:9c:36:cf:
                    12:9b:07:ab:7a:df:64:96:1f:9a:a5:e5:bc:50:cf:
                    98:59:7e:76:83:3f:0b:53:73:05:51:4b:82:4b:e2:
                    21:32:1b:c2:67:d0:31:ce:f8:db:35:ea:bd:f0:c6:
                    70:e7:4f:4f:9a:b7:87:28:d1:7c:79:83:17:36:6d:
                    fb:f3:ed:13:dd:e6:07:4e:7f:39:99:ae:fd:3a:46:
                    88:38:a5:06:c1:a0:c0:fd:34:34:e7:33:5d:dc:2b:
                    86:de:3b:88:2e:f0:db:7c:8e:cf:b8:18:6f:5a:07:
                    67:3f:b7:b0:35:10:e2:84:29:0d:f4:ae:e4:7e:20:
                    87:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:41:EF:EC:55:A1:35:95:CD:5E:89:00:2E:7B:1C:4C:78:69:F4:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c67559d-5543-4d0a-b17b-c1476e206181/d939845c-239f-3085-8cdc-cf9336136dec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c67559d-5543-4d0a-b17b-c1476e206181/7c67559d-5543-4d0a-b17b-c1476e206181.crl

            X509v3 Authority Key Identifier:
                keyid:A7:02:15:25:EB:D1:75:78:06:09:B8:0D:E8:2C:2F:F8:89:3B:AB:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c67559d-5543-4d0a-b17b-c1476e206181.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:d4:ab:9d:29:c7:ca:61:5a:95:1e:36:c0:f2:e4:fa:d8:51:
         4f:d8:f5:6e:62:af:6a:45:c1:80:67:37:9b:6c:2d:45:37:1e:
         7b:ed:92:fe:75:5f:86:30:73:a4:5f:43:8a:ab:52:e8:1e:88:
         66:27:7e:6a:46:36:9b:fc:f3:d3:4f:0b:3c:93:c5:cb:3a:9e:
         61:cd:65:50:d2:85:60:00:67:99:4b:e3:ce:09:5b:e5:aa:9b:
         99:83:d8:e2:af:33:22:b8:70:4b:1a:d7:78:f4:b3:67:16:03:
         8c:76:e6:c1:cf:76:a1:e6:8b:4f:87:41:72:ef:68:27:57:43:
         6f:92:8e:ca:c1:4f:32:4f:ca:af:96:0c:99:aa:08:74:9e:3f:
         39:da:40:c3:d0:53:c9:1e:cf:5d:75:7c:e1:df:55:5a:8e:70:
         d4:54:93:40:44:f5:af:e0:9a:f3:16:7a:a3:2f:0a:6e:fb:72:
         8a:09:32:66:b7:7e:53:1a:b9:bd:32:7b:13:e2:dd:3a:c9:0b:
         14:c2:97:fa:51:1c:df:ac:bb:a2:51:d7:e5:94:61:17:e7:99:
         50:7f:bc:f0:a1:09:6e:a5:70:21:4b:ae:24:31:4b:f9:84:48:
         71:64:90:60:ff:74:eb:bf:87:ab:1f:76:7a:bc:a6:d9:23:d8:
         da:54:a3:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzHd0GfZrwhDBcxHwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2M2NzU1OWQtNTU0My00ZDBhLWIxN2ItYzE0NzZlMjA2
MTgxMB4XDTI2MDIwNzAyMDAzMVoXDTI2MDUwODAxMDAzMVowLzEtMCsGA1UEAxMk
Yzg0ZGI2N2YtM2Q2ZC00ZGEyLTk0OTktZjI1ZGFhOGRlNzQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTWgO6nCfuR7g4wBOw2FuhJecWMfYPhbfnuh
2UaYpwSS4uhxB63Ty3mEPv6qyM0jPrxnD35gP1xioD2bIWWfNo3RiTAKW7rTU8pl
0w+Op6BdRgUbLb2D6zBY+D7j+sdvjmBAetx/WVUT/APhjipahG+Qaa6kwylfBd4B
cZ64CW8j8pucNs8Smweret9klh+apeW8UM+YWX52gz8LU3MFUUuCS+IhMhvCZ9Ax
zvjbNeq98MZw509PmreHKNF8eYMXNm378+0T3eYHTn85ma79OkaIOKUGwaDA/TQ0
5zNd3CuG3juILvDbfI7PuBhvWgdnP7ewNRDihCkN9K7kfiCHbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOdB7+xVoTWVzV6JAC57HEx4afRhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83YzY3
NTU5ZC01NTQzLTRkMGEtYjE3Yi1jMTQ3NmUyMDYxODEvZDkzOTg0NWMtMjM5Zi0z
MDg1LThjZGMtY2Y5MzM2MTM2ZGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvN2M2NzU1OWQtNTU0My00ZDBhLWIx
N2ItYzE0NzZlMjA2MTgxLzdjNjc1NTlkLTU1NDMtNGQwYS1iMTdiLWMxNDc2ZTIw
NjE4MS5jcmwwHwYDVR0jBBgwFoAUpwIVJevRdXgGCbgN6Cwv+Ik7qz8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS83YzY3NTU5ZC01NTQzLTRkMGEtYjE3Yi1jMTQ3
NmUyMDYxODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFJlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKLUq50px8phWpUeNsDy5PrYUU/Y9W5ir2pFwYBnN5tsLUU3Hnvtkv51
X4Ywc6RfQ4qrUugeiGYnfmpGNpv889NPCzyTxcs6nmHNZVDShWAAZ5lL484JW+Wq
m5mD2OKvMyK4cEsa13j0s2cWA4x25sHPdqHmi0+HQXLvaCdXQ2+SjsrBTzJPyq+W
DJmqCHSePznaQMPQU8kez111fOHfVVqOcNRUk0BE9a/gmvMWeqMvCm77cooJMma3
flMaub0yexPi3TrJCxTCl/pRHN+su6JR1+WUYRfnmVB/vPChCW6lcCFLriQxS/mE
SHFkkGD/dOu/h6sfdnq8ptkj2NpUo74=
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:55:53 2026 by rpki-client