Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/07aa8d50-5e38-328a-b741-022a373baf8e.roa
File:                     07aa8d50-5e38-328a-b741-022a373baf8e.roa (raw, json)
Hash identifier:          4MYw05P5lLz1SdTcJPP+4KdQpb22yzqHTOByRKWqzgg=
Subject key identifier:   F1:C2:3A:17:28:80:E9:87:7B:3C:C9:96:F1:D2:42:67:CA:85:C4:0E
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584EA7940C23EFF8207A2F8CDE00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/07aa8d50-5e38-328a-b741-022a373baf8e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     21723
IP address blocks:        207.34.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:0c:23:ef:f8:20:7a:2f:8c:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f74d3a88-1de8-405c-bafa-a29d9d96c6c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:1f:85:e1:9c:a0:64:33:2f:75:df:22:a3:5e:
                    e6:87:71:13:ae:a7:6d:ab:42:c8:5e:e9:d3:ab:39:
                    2f:1c:4a:74:83:80:ab:ef:b3:ec:f0:30:77:1f:ad:
                    ce:49:fe:d5:24:85:0a:2a:31:b4:02:da:57:58:6f:
                    68:03:9f:97:b0:9b:1e:68:ad:4a:b3:ce:d2:3e:12:
                    51:be:0b:70:e2:a5:b0:f9:1c:6f:f7:6e:11:eb:05:
                    88:af:33:ff:9b:8b:8b:cd:3a:df:a2:e8:a8:be:f7:
                    37:c7:e1:22:a9:ca:fb:5c:c0:12:dc:53:fc:82:d3:
                    81:0c:e0:31:91:f7:b0:7f:0b:25:3c:ff:aa:2c:ef:
                    2d:b1:5d:23:d2:7e:64:b5:44:b3:85:f7:69:d7:4a:
                    de:9c:cb:fd:18:ab:bd:f9:6c:33:19:8d:23:4d:b4:
                    3c:7e:1d:19:1a:5b:b2:43:83:7f:7e:c4:46:5e:be:
                    e0:5f:15:8c:4c:ac:e6:a1:43:15:50:dc:40:6a:00:
                    b9:1f:e7:3c:2e:36:41:ca:29:94:9e:19:96:f5:6b:
                    26:a7:3e:8c:a5:e5:48:fb:8c:01:75:d5:85:9c:2a:
                    b3:01:15:0a:cd:a8:43:11:37:45:38:ea:69:38:96:
                    64:43:56:fe:c5:8c:e5:9b:b8:92:61:f5:4f:04:dd:
                    57:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C2:3A:17:28:80:E9:87:7B:3C:C9:96:F1:D2:42:67:CA:85:C4:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/07aa8d50-5e38-328a-b741-022a373baf8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:ed:15:69:49:4a:7d:73:fd:14:b9:2f:0a:c5:05:d7:83:91:
         c1:db:1c:52:d2:a7:f0:af:34:ca:4b:14:69:83:78:c1:66:9a:
         9f:a7:1d:43:44:dd:ef:ff:20:df:bd:83:62:9a:bd:bc:46:e2:
         35:05:1e:b8:67:1c:60:12:c1:9a:79:20:d4:56:05:9a:c9:ef:
         e1:69:4d:e9:13:69:15:ec:1f:ed:de:7c:92:3d:59:ce:07:be:
         81:4b:96:d2:51:8d:01:9e:c9:f7:68:07:8b:4a:da:14:9a:bc:
         ae:b6:66:9a:ac:ff:a8:6a:1f:df:c9:3a:a8:e1:d3:dd:9a:96:
         bf:e0:05:a3:50:22:18:19:5c:a1:7c:38:ef:95:b1:35:bb:c0:
         4a:de:57:e2:59:19:fd:ee:4a:14:b7:b3:63:15:a7:ec:e5:b0:
         16:e1:1c:a7:bd:41:6f:31:84:52:16:85:3a:cb:c9:a6:66:1b:
         88:50:ee:d9:31:3c:f3:90:41:96:e5:36:35:77:b4:7d:6b:95:
         d4:78:7f:84:c5:23:fd:a8:86:ce:c2:d2:d5:1a:29:e4:90:33:
         5f:63:f4:59:c6:24:80:e6:2f:48:15:2e:cb:75:d1:64:5a:85:
         7a:02:43:b3:91:73:d9:d1:ea:21:20:53:05:03:71:a4:b0:ef:
         ce:e0:87:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlAwj7/ggei+M3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
Zjc0ZDNhODgtMWRlOC00MDVjLWJhZmEtYTI5ZDlkOTZjNmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8R+F4ZygZDMvdd8io17mh3ETrqdtq0LIXunT
qzkvHEp0g4Cr77Ps8DB3H63OSf7VJIUKKjG0AtpXWG9oA5+XsJseaK1Ks87SPhJR
vgtw4qWw+Rxv924R6wWIrzP/m4uLzTrfouiovvc3x+Eiqcr7XMAS3FP8gtOBDOAx
kfewfwslPP+qLO8tsV0j0n5ktUSzhfdp10renMv9GKu9+WwzGY0jTbQ8fh0ZGluy
Q4N/fsRGXr7gXxWMTKzmoUMVUNxAagC5H+c8LjZByimUnhmW9Wsmpz6MpeVI+4wB
ddWFnCqzARUKzahDETdFOOppOJZkQ1b+xYzlm7iSYfVPBN1XxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPHCOhcogOmHezzJlvHSQmfKhcQOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMDdhYThkNTAtNWUzOC0z
MjhhLWI3NDEtMDIyYTM3M2JhZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzyJ/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIXtFWlJSn1z/RS5LwrFBdeDkcHbHFLSp/CvNMpLFGmDeMFmmp+nHUNE
3e//IN+9g2KavbxG4jUFHrhnHGASwZp5INRWBZrJ7+FpTekTaRXsH+3efJI9Wc4H
voFLltJRjQGeyfdoB4tK2hSavK62Zpqs/6hqH9/JOqjh092alr/gBaNQIhgZXKF8
OO+VsTW7wEreV+JZGf3uShS3s2MVp+zlsBbhHKe9QW8xhFIWhTrLyaZmG4hQ7tkx
PPOQQZblNjV3tH1rldR4f4TFI/2ohs7C0tUaKeSQM19j9FnGJIDmL0gVLst10WRa
hXoCQ7ORc9nR6iEgUwUDcaSw787gh6g=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:30:00 2026 by rpki-client