Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0040caba-c681-3d29-8d47-219f20cf46fc.roa
File:                     0040caba-c681-3d29-8d47-219f20cf46fc.roa (raw, json)
Hash identifier:          6vPuB4fqsTd7cdF/5pqlNMNFpLfl0U2ZsyLFKHYMV18=
Subject key identifier:   CB:B3:65:B8:B2:28:33:66:AD:7A:18:D2:F9:D2:9B:7E:CC:EA:52:18
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584EA793FD1E3C49F7400F947450
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0040caba-c681-3d29-8d47-219f20cf46fc.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     401827
IP address blocks:        172.254.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:fd:1e:3c:49:f7:40:0f:94:74:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=99d7309e-1a70-425b-a380-81a266853ab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cc:ca:dc:d7:05:15:3b:4e:29:29:88:08:fe:
                    bd:5d:ef:84:9b:18:ab:f8:2f:5d:fe:5f:87:da:11:
                    8e:86:c1:92:49:76:d9:fd:67:bd:d8:93:27:ef:fd:
                    2f:58:c2:0a:fa:8b:f9:6c:63:ca:39:c1:f3:0e:2c:
                    57:04:1e:4f:d9:7e:ee:d2:d3:ef:08:7c:e6:64:5f:
                    29:32:15:86:ee:b1:18:f2:5f:58:23:ca:2a:69:1b:
                    42:2f:39:f7:c2:d4:09:20:08:85:4e:f9:21:15:d1:
                    f8:27:f0:68:a1:49:52:1b:1f:12:2c:48:a8:b1:8d:
                    aa:0c:fe:6e:b4:45:72:0d:6a:04:b4:c6:f3:38:4d:
                    96:28:8c:07:51:e5:16:15:c7:8a:18:44:bc:d0:0d:
                    3a:9d:e0:73:e3:59:e1:85:86:49:db:7f:01:07:88:
                    3c:9a:f3:9a:34:0d:ba:3a:4a:57:2f:68:0b:1a:1e:
                    8c:d7:79:f1:dd:60:17:fb:63:20:6e:1e:10:71:7e:
                    89:89:56:2d:37:db:b1:06:be:94:a4:3f:d8:f4:df:
                    48:1e:3d:81:48:ff:84:16:b1:df:6e:fa:98:10:38:
                    95:d7:2f:3f:44:49:96:f8:10:0f:eb:36:e9:1c:fe:
                    aa:3a:42:47:f6:3a:04:46:2a:a3:a2:b9:ca:5e:b5:
                    7b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B3:65:B8:B2:28:33:66:AD:7A:18:D2:F9:D2:9B:7E:CC:EA:52:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/0040caba-c681-3d29-8d47-219f20cf46fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.254.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:67:e4:f9:79:37:e4:b5:5a:1b:cb:39:36:21:45:4a:eb:e6:
         aa:27:79:c1:5d:10:01:14:51:e0:f0:41:a4:d2:01:5c:ef:a5:
         d9:5e:41:79:91:2a:0b:bb:e2:f5:0e:2c:b5:d9:1b:92:81:8d:
         d3:f4:62:a1:56:bf:af:7b:71:d4:82:83:68:1d:87:91:2a:56:
         c6:f0:66:0e:d2:d2:41:c2:35:5e:a1:bc:37:e8:17:c4:e4:06:
         30:76:ed:59:6b:78:73:c0:b8:df:31:90:af:b5:a9:62:76:7c:
         ce:3e:62:d3:78:d0:36:00:ff:17:55:ec:b3:45:f2:f0:9d:0a:
         67:48:0e:c3:20:82:dd:07:87:e8:24:70:23:29:d4:0d:65:6c:
         4e:99:4d:70:b0:f8:fa:1e:9a:2f:46:1d:0d:1c:42:92:a8:6f:
         06:d0:59:96:4f:6d:40:47:d0:ad:0d:30:bd:1e:3a:28:c2:31:
         6b:1e:c8:75:b4:e8:c8:21:96:29:4f:f4:a4:d5:b9:8a:b7:83:
         6b:ae:c5:65:24:52:37:e1:28:07:b9:a8:ae:00:dd:4d:32:2b:
         c6:eb:65:d0:6c:b9:fe:51:b2:30:2b:6e:15:73:73:9b:b2:54:
         12:bc:b2:be:32:ef:4c:d2:c5:5a:38:60:1f:6f:db:ca:54:fd:
         92:51:95:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nk/0ePEn3QA+UdFAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OTlkNzMwOWUtMWE3MC00MjViLWEzODAtODFhMjY2ODUzYWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMzK3NcFFTtOKSmICP69Xe+Emxir+C9d/l+H
2hGOhsGSSXbZ/We92JMn7/0vWMIK+ov5bGPKOcHzDixXBB5P2X7u0tPvCHzmZF8p
MhWG7rEY8l9YI8oqaRtCLzn3wtQJIAiFTvkhFdH4J/BooUlSGx8SLEiosY2qDP5u
tEVyDWoEtMbzOE2WKIwHUeUWFceKGES80A06neBz41nhhYZJ238BB4g8mvOaNA26
OkpXL2gLGh6M13nx3WAX+2Mgbh4QcX6JiVYtN9uxBr6UpD/Y9N9IHj2BSP+EFrHf
bvqYEDiV1y8/REmW+BAP6zbpHP6qOkJH9joERiqjornKXrV7VQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMuzZbiyKDNmrXoY0vnSm37M6lIYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMDA0MGNhYmEtYzY4MS0z
ZDI5LThkNDctMjE5ZjIwY2Y0NmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP6FMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABln5Pl5N+S1WhvLOTYhRUrr5qonecFdEAEUUeDwQaTSAVzvpdleQXmR
Kgu74vUOLLXZG5KBjdP0YqFWv697cdSCg2gdh5EqVsbwZg7S0kHCNV6hvDfoF8Tk
BjB27VlreHPAuN8xkK+1qWJ2fM4+YtN40DYA/xdV7LNF8vCdCmdIDsMggt0Hh+gk
cCMp1A1lbE6ZTXCw+Poemi9GHQ0cQpKobwbQWZZPbUBH0K0NML0eOijCMWseyHW0
6MghlilP9KTVuYq3g2uuxWUkUjfhKAe5qK4A3U0yK8brZdBsuf5RsjArbhVzc5uy
VBK8sr4y70zSxVo4YB9v28pU/ZJRlRs=
-----END CERTIFICATE-----
Generated at Wed Jul 29 19:38:41 2026 by rpki-client