Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/16b29928-c0b3-3792-87d9-362f48fa19b2.roa
File:                     16b29928-c0b3-3792-87d9-362f48fa19b2.roa (raw, json)
Hash identifier:          GwDX+3cF5PYbWD3wxw9b6KYkIuTyoo/EWbLwL/hr5/Y=
Subject key identifier:   7B:C9:47:84:27:0C:54:AA:9E:BA:CB:EF:AE:C9:92:B4:74:4B:4E:3B
Certificate issuer:       /CN=492092dd-7457-4265-80ee-c447496a414c
Certificate serial:       010D0C9F4328584EA79A3E6925BD6C80CDC29980
Authority key identifier: E7:69:F7:DB:81:66:7D:9D:CB:93:E9:EC:D1:71:7D:EB:3A:C5:0C:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/16b29928-c0b3-3792-87d9-362f48fa19b2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     0
IP address blocks:        140.235.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/492092dd-7457-4265-80ee-c447496a414c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/492092dd-7457-4265-80ee-c447496a414c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:3e:69:25:bd:6c:80:cd:c2:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=492092dd-7457-4265-80ee-c447496a414c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3005aabd-7b47-4524-8d1b-3f70d35991bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:74:d1:a6:22:76:15:8e:86:b2:37:ae:fb:7f:
                    b8:03:fc:16:d6:9f:aa:06:6f:71:45:48:28:cc:ac:
                    b9:a2:d9:b1:eb:63:90:77:34:b6:00:3e:ee:5d:84:
                    ea:5b:a9:40:b8:dc:e0:e2:7a:c2:80:3e:a6:ef:c1:
                    7f:15:d5:70:fb:3b:86:a3:7b:4c:4f:83:ec:6c:8a:
                    60:6c:6f:ad:8d:cd:e5:b9:6c:de:a5:cd:29:62:de:
                    0b:c0:dc:88:20:fc:ee:e8:55:89:34:43:77:70:c8:
                    3f:38:e8:cc:2f:bb:74:0c:b1:3a:61:f0:d5:00:30:
                    a2:9c:d8:3f:ac:d3:37:53:dd:e1:98:9a:63:f0:8f:
                    81:93:e1:f8:27:3a:17:f9:2c:e9:7b:1f:55:34:ce:
                    7b:8b:49:88:c0:1f:70:cb:69:89:a2:72:88:f1:09:
                    5e:9d:97:b1:a8:12:11:c6:d4:93:2d:8d:70:4b:92:
                    6b:12:4e:cb:8f:3e:67:4d:c2:36:96:c2:46:bd:cf:
                    10:87:24:ae:cf:a5:59:f7:09:f3:f7:f6:93:1e:83:
                    16:57:76:64:da:03:24:8e:f5:87:e1:50:4c:37:e9:
                    2a:16:ee:78:82:8e:41:83:84:e9:e8:e3:2c:b6:02:
                    f9:22:23:48:84:f9:66:33:7c:39:26:21:54:a3:7e:
                    95:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C9:47:84:27:0C:54:AA:9E:BA:CB:EF:AE:C9:92:B4:74:4B:4E:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/16b29928-c0b3-3792-87d9-362f48fa19b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/492092dd-7457-4265-80ee-c447496a414c.crl

            X509v3 Authority Key Identifier:
                keyid:E7:69:F7:DB:81:66:7D:9D:CB:93:E9:EC:D1:71:7D:EB:3A:C5:0C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:af:ed:de:5a:1e:a7:ca:1b:4b:0d:c3:6e:73:3d:88:fb:0e:
         4f:0b:90:c7:48:b6:6f:ab:e0:0b:33:93:f2:36:f0:39:b2:e2:
         bc:1c:d9:09:ff:0e:01:48:5c:49:ca:b5:b8:08:a4:18:2f:87:
         9b:c8:7e:7d:80:62:aa:c9:73:af:53:db:63:b3:f0:a4:52:6e:
         4b:51:56:06:e0:f9:1f:ef:d5:12:bf:0f:bb:c7:f2:0f:10:6c:
         7c:24:db:23:f5:19:0d:f0:6f:80:91:41:1c:40:b9:1c:62:9f:
         8c:45:2f:b8:2a:9e:74:7a:c0:7b:66:7c:e9:bf:94:72:50:c7:
         22:a9:ff:e7:77:6d:6d:f8:e0:25:c1:97:f1:66:68:23:b6:37:
         a2:c8:3e:2a:d0:71:0d:12:92:45:fb:22:52:25:12:70:b1:1d:
         27:79:cb:2b:bf:a4:6d:a9:72:ea:60:94:6f:18:40:05:b4:96:
         5b:41:78:a6:e4:12:5e:63:e2:49:88:d2:e5:00:2f:63:06:66:
         18:9f:89:94:8f:9c:b4:04:a6:6f:8d:6b:8a:19:33:84:8f:17:
         cd:b6:7b:f0:b5:a1:30:a1:57:f5:2b:22:d8:0d:a6:4f:59:e6:
         e1:f0:37:a5:7b:65:3f:c2:42:7c:5b:18:c3:25:40:01:5b:3e:
         21:ae:d1:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmj5pJb1sgM3CmYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDkyMDkyZGQtNzQ1Ny00MjY1LTgwZWUtYzQ0NzQ5NmE0
MTRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MzAwNWFhYmQtN2I0Ny00NTI0LThkMWItM2Y3MGQzNTk5MWJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXTRpiJ2FY6Gsjeu+3+4A/wW1p+qBm9xRUgo
zKy5otmx62OQdzS2AD7uXYTqW6lAuNzg4nrCgD6m78F/FdVw+zuGo3tMT4PsbIpg
bG+tjc3luWzepc0pYt4LwNyIIPzu6FWJNEN3cMg/OOjML7t0DLE6YfDVADCinNg/
rNM3U93hmJpj8I+Bk+H4JzoX+Szpex9VNM57i0mIwB9wy2mJonKI8QlenZexqBIR
xtSTLY1wS5JrEk7Ljz5nTcI2lsJGvc8QhySuz6VZ9wnz9/aTHoMWV3Zk2gMkjvWH
4VBMN+kqFu54go5Bg4Tp6OMstgL5IiNIhPlmM3w5JiFUo36VEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHvJR4QnDFSqnrrL767JkrR0S047MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80OTIw
OTJkZC03NDU3LTQyNjUtODBlZS1jNDQ3NDk2YTQxNGMvMTZiMjk5MjgtYzBiMy0z
NzkyLTg3ZDktMzYyZjQ4ZmExOWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDkyMDkyZGQtNzQ1Ny00MjY1LTgw
ZWUtYzQ0NzQ5NmE0MTRjLzQ5MjA5MmRkLTc0NTctNDI2NS04MGVlLWM0NDc0OTZh
NDE0Yy5jcmwwHwYDVR0jBBgwFoAU52n324FmfZ3Lk+ns0XF96zrFDHAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80OTIwOTJkZC03NDU3LTQyNjUtODBlZS1jNDQ3
NDk2YTQxNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOtIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAECv7d5aHqfKG0sNw25zPYj7Dk8LkMdItm+r4Aszk/I28Dmy4rwc2Qn/
DgFIXEnKtbgIpBgvh5vIfn2AYqrJc69T22Oz8KRSbktRVgbg+R/v1RK/D7vH8g8Q
bHwk2yP1GQ3wb4CRQRxAuRxin4xFL7gqnnR6wHtmfOm/lHJQxyKp/+d3bW344CXB
l/FmaCO2N6LIPirQcQ0SkkX7IlIlEnCxHSd5yyu/pG2pcupglG8YQAW0lltBeKbk
El5j4kmI0uUAL2MGZhifiZSPnLQEpm+Na4oZM4SPF822e/C1oTChV/UrItgNpk9Z
5uHwN6V7ZT/CQnxbGMMlQAFbPiGu0VU=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:39:53 2026 by rpki-client