Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/0ae7e89e-c4c8-3282-98a9-7f46af805675.roa
File:                     0ae7e89e-c4c8-3282-98a9-7f46af805675.roa (raw, json)
Hash identifier:          SfFEN23j0ka1rk/MZORb1XcoAsbNL1FSR1rSUbK9lUo=
Subject key identifier:   A0:2A:C0:E6:C1:0A:06:7C:B8:EE:5C:82:7A:34:E2:5C:B7:E2:3C:D8
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584EA799CD498FAC00A8E18A5C80
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/0ae7e89e-c4c8-3282-98a9-7f46af805675.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20454
IP address blocks:        192.240.202.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:cd:49:8f:ac:00:a8:e1:8a:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c76839a9-80dd-4000-be57-677e37945352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:90:2e:f4:03:bc:9a:66:be:a2:23:67:3d:2d:
                    77:3d:83:49:90:59:82:e0:e1:71:24:c7:73:b9:a1:
                    f6:ec:3d:3a:d4:4b:d5:c0:0c:33:4d:31:87:aa:36:
                    89:12:8e:df:39:70:0f:23:db:7d:02:95:1b:1b:9a:
                    37:75:4f:bb:8a:77:d7:1b:41:fe:58:5c:a4:36:35:
                    9f:45:f9:1e:8d:d4:bb:dc:c2:43:e1:da:43:39:c2:
                    86:37:2d:e7:c2:43:89:fa:ef:db:f8:24:f3:53:b8:
                    a4:db:3b:16:36:97:2d:36:59:3f:f8:22:8c:68:18:
                    e7:47:9b:e2:bf:86:06:af:0e:72:ac:4b:f4:0d:da:
                    c6:66:57:6e:17:4c:1e:03:26:f3:2b:ca:2c:de:4a:
                    71:37:89:10:b9:24:22:5d:80:69:41:c3:8d:9d:7a:
                    1d:77:3c:22:42:90:cd:e6:88:f5:1f:80:c8:65:ba:
                    e4:fc:72:f3:39:af:83:23:c5:ad:d1:2c:ab:fc:6b:
                    f0:7e:47:ff:49:a8:7e:61:a1:ac:eb:96:c6:c3:6f:
                    08:88:91:05:80:32:4a:9c:63:40:75:2e:54:5a:ae:
                    85:58:1c:d9:68:5e:0d:e7:f0:03:69:02:fc:fe:a9:
                    8e:9c:68:32:13:03:99:6c:41:51:89:01:dd:71:a3:
                    b7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2A:C0:E6:C1:0A:06:7C:B8:EE:5C:82:7A:34:E2:5C:B7:E2:3C:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/0ae7e89e-c4c8-3282-98a9-7f46af805675.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.240.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:97:c8:c3:66:bc:1f:79:91:6b:7a:28:c1:1d:67:16:6e:c2:
         59:ec:f6:b7:4d:1f:3c:f6:e4:e1:09:e4:83:4e:18:0e:44:ac:
         00:b1:c5:3c:85:dc:40:4b:ac:21:31:7f:55:23:68:2b:d0:9f:
         ad:64:52:e7:b4:fa:f9:a7:03:a3:e7:63:92:cd:e3:34:06:14:
         72:51:c6:5b:c6:0d:54:d2:d6:57:27:2a:e5:94:55:c2:3a:49:
         c1:70:2d:2a:64:15:c3:36:8a:fb:60:aa:6e:46:c7:35:8d:b2:
         c4:66:8b:8c:8f:85:bc:e9:f2:19:28:5a:0c:0e:7b:a2:29:e0:
         ab:90:8b:49:fa:82:f6:de:15:8c:59:22:21:b9:5a:32:1d:ea:
         45:d6:70:4e:f6:71:2c:b5:3b:04:32:38:d5:77:7b:29:1c:63:
         60:0e:88:b3:19:73:d0:c3:71:de:f4:f1:5d:0a:02:96:68:46:
         7e:49:bf:5a:03:6f:4b:fc:05:1d:a4:f9:5f:5f:49:47:04:fb:
         f4:7f:fe:a6:6b:9b:21:df:0c:a5:50:cc:92:af:05:fb:8c:a7:
         11:f9:76:23:3f:4b:bf:43:e5:38:dc:a7:03:a4:8a:4e:53:4b:
         4a:2e:c2:75:a5:a7:16:d7:7e:60:e8:c9:fb:a7:36:ba:5f:aa:
         53:46:b9:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmc1Jj6wAqOGKXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWI1ZTA0MWUtOThiMy00ZGZmLTgyN2ItMDNlMTM4NzM5
M2NmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
Yzc2ODM5YTktODBkZC00MDAwLWJlNTctNjc3ZTM3OTQ1MzUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pAu9AO8mma+oiNnPS13PYNJkFmC4OFxJMdz
uaH27D061EvVwAwzTTGHqjaJEo7fOXAPI9t9ApUbG5o3dU+7infXG0H+WFykNjWf
RfkejdS73MJD4dpDOcKGNy3nwkOJ+u/b+CTzU7ik2zsWNpctNlk/+CKMaBjnR5vi
v4YGrw5yrEv0DdrGZlduF0weAybzK8os3kpxN4kQuSQiXYBpQcONnXoddzwiQpDN
5oj1H4DIZbrk/HLzOa+DI8Wt0Syr/Gvwfkf/Sah+YaGs65bGw28IiJEFgDJKnGNA
dS5UWq6FWBzZaF4N5/ADaQL8/qmOnGgyEwOZbEFRiQHdcaO3bQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKAqwObBCgZ8uO5cgno04ly34jzYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVl
MDQxZS05OGIzLTRkZmYtODI3Yi0wM2UxMzg3MzkzY2YvMGFlN2U4OWUtYzRjOC0z
MjgyLTk4YTktN2Y0NmFmODA1Njc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZWI1ZTA0MWUtOThiMy00ZGZmLTgy
N2ItMDNlMTM4NzM5M2NmL2ViNWUwNDFlLTk4YjMtNGRmZi04MjdiLTAzZTEzODcz
OTNjZi5jcmwwHwYDVR0jBBgwFoAU2+LolNpQKt3AF0M2x/1QnHoMEb4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9lYjVlMDQxZS05OGIzLTRkZmYtODI3Yi0wM2Ux
Mzg3MzkzY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPDKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKCXyMNmvB95kWt6KMEdZxZuwlns9rdNHzz25OEJ5INOGA5ErACxxTyF
3EBLrCExf1UjaCvQn61kUue0+vmnA6PnY5LN4zQGFHJRxlvGDVTS1lcnKuWUVcI6
ScFwLSpkFcM2ivtgqm5GxzWNssRmi4yPhbzp8hkoWgwOe6Ip4KuQi0n6gvbeFYxZ
IiG5WjId6kXWcE72cSy1OwQyONV3eykcY2AOiLMZc9DDcd708V0KApZoRn5Jv1oD
b0v8BR2k+V9fSUcE+/R//qZrmyHfDKVQzJKvBfuMpxH5diM/S79D5TjcpwOkik5T
S0ouwnWlpxbXfmDoyfunNrpfqlNGuUQ=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:47:37 2026 by rpki-client