Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/6aca3f82-0d7b-34d2-b76d-a70916887f2f.roa
File:                     6aca3f82-0d7b-34d2-b76d-a70916887f2f.roa (raw, json)
Hash identifier:          awr8ETGyrAiWLthwwxPks2uKLPOJabfI5oPpgvoYSeY=
Subject key identifier:   8F:3D:5F:64:CF:F6:7E:EC:9F:D0:94:17:3D:74:C3:58:9B:FC:5B:0C
Certificate issuer:       /CN=30ed4af0-ad84-44f1-84da-cd9b1c667340
Certificate serial:       010D0C9F4328584EA7885C08D7FB07CF4175C900
Authority key identifier: 7C:37:81:36:D0:60:6A:2C:D8:E4:1D:C9:4F:E7:C0:DB:38:5D:76:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/6aca3f82-0d7b-34d2-b76d-a70916887f2f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     32707
IP address blocks:        216.8.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/30ed4af0-ad84-44f1-84da-cd9b1c667340.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/30ed4af0-ad84-44f1-84da-cd9b1c667340.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:5c:08:d7:fb:07:cf:41:75:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30ed4af0-ad84-44f1-84da-cd9b1c667340
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=99d13f08-6305-43f1-8c72-718474807d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:dd:02:81:39:1f:4b:35:f5:95:e7:84:32:a7:
                    42:07:95:06:5b:d0:6f:5e:8a:ac:01:fd:1e:8a:69:
                    cb:19:bd:41:59:ad:08:7b:3e:49:7b:2d:b2:a0:2b:
                    91:07:26:63:e3:98:fc:06:f1:80:3e:48:b6:f5:3e:
                    2e:27:9a:11:41:f6:b5:30:31:8b:87:36:7e:42:a5:
                    86:74:c5:b8:98:5b:d6:f3:3a:71:1f:7d:e7:17:61:
                    e7:47:a0:50:f7:28:11:da:48:69:e9:1d:2f:a2:25:
                    e6:9d:16:27:ef:21:92:e0:8b:b6:1b:36:6b:a5:ec:
                    28:c3:da:ef:52:41:2a:43:4a:e9:9d:57:ca:2d:4b:
                    02:11:75:54:2e:7f:ab:9b:b9:46:4e:9b:61:c6:ae:
                    de:ca:fc:1a:55:df:07:cb:b1:97:ef:6d:af:9a:1a:
                    bb:28:df:5f:05:63:eb:49:e4:5f:12:2c:cf:c4:73:
                    ac:21:4a:a0:0e:ff:7e:9a:76:0f:dd:6f:b9:cc:b5:
                    16:1f:0a:7a:9c:c2:3f:28:e2:ea:3e:a6:9b:71:ec:
                    2b:88:29:a9:f4:d7:16:f4:b8:15:b9:f2:24:33:58:
                    b0:e4:8d:e9:16:4f:33:b2:c7:67:d9:9e:97:51:fc:
                    55:7d:25:ef:33:d3:72:0b:34:06:71:fc:50:00:cd:
                    b0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3D:5F:64:CF:F6:7E:EC:9F:D0:94:17:3D:74:C3:58:9B:FC:5B:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/6aca3f82-0d7b-34d2-b76d-a70916887f2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340/30ed4af0-ad84-44f1-84da-cd9b1c667340.crl

            X509v3 Authority Key Identifier:
                keyid:7C:37:81:36:D0:60:6A:2C:D8:E4:1D:C9:4F:E7:C0:DB:38:5D:76:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/30ed4af0-ad84-44f1-84da-cd9b1c667340.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.8.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:25:61:84:e9:4a:5d:7d:8c:2c:3c:03:48:f4:d0:d1:2e:13:
         23:75:18:69:4a:7d:a8:30:fd:5e:8f:6f:59:3f:b3:28:e8:37:
         a4:35:f8:54:94:06:75:00:a8:4d:09:5c:78:e0:ad:83:53:fa:
         a1:9a:07:e5:58:71:77:5e:de:8f:c9:26:0f:79:80:31:90:0c:
         5d:0b:aa:54:fe:a0:14:c9:d6:68:ed:f7:9d:ba:18:e7:77:d3:
         29:27:e7:a8:0b:5a:8e:e4:17:7a:dd:07:70:6b:e0:90:9e:2d:
         95:4c:d3:93:05:c9:7d:27:7a:da:dc:4d:51:e0:21:61:ae:57:
         a1:4e:cf:b8:aa:55:59:d7:92:15:6c:1c:45:a5:c7:f9:01:d1:
         7b:79:b6:9b:dd:b5:21:3c:43:8b:ee:6b:06:f6:81:00:37:7c:
         82:fd:a6:c3:10:a5:17:fc:53:0e:5c:76:48:17:4a:94:b9:c1:
         93:27:27:e5:49:f1:8f:34:fa:47:0f:f3:0c:5a:4e:2e:93:16:
         df:85:e9:82:15:87:2a:64:4f:47:e2:fb:ba:8e:87:5b:9f:d7:
         bd:b7:eb:ab:d5:60:a4:20:59:df:58:90:c2:22:7d:c6:e0:c9:
         81:26:98:f2:48:ed:7b:a2:12:8c:6b:5c:77:4c:72:5e:9d:1a:
         69:16:68:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niFwI1/sHz0F1yQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzBlZDRhZjAtYWQ4NC00NGYxLTg0ZGEtY2Q5YjFjNjY3
MzQwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OTlkMTNmMDgtNjMwNS00M2YxLThjNzItNzE4NDc0ODA3ZDI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk90CgTkfSzX1leeEMqdCB5UGW9BvXoqsAf0e
imnLGb1BWa0Iez5Jey2yoCuRByZj45j8BvGAPki29T4uJ5oRQfa1MDGLhzZ+QqWG
dMW4mFvW8zpxH33nF2HnR6BQ9ygR2khp6R0voiXmnRYn7yGS4Iu2GzZrpewow9rv
UkEqQ0rpnVfKLUsCEXVULn+rm7lGTpthxq7eyvwaVd8Hy7GX722vmhq7KN9fBWPr
SeRfEizPxHOsIUqgDv9+mnYP3W+5zLUWHwp6nMI/KOLqPqabcewriCmp9NcW9LgV
ufIkM1iw5I3pFk8zssdn2Z6XUfxVfSXvM9NyCzQGcfxQAM2wXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI89X2TP9n7sn9CUFz10w1ib/FsMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zMGVk
NGFmMC1hZDg0LTQ0ZjEtODRkYS1jZDliMWM2NjczNDAvNmFjYTNmODItMGQ3Yi0z
NGQyLWI3NmQtYTcwOTE2ODg3ZjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMzBlZDRhZjAtYWQ4NC00NGYxLTg0
ZGEtY2Q5YjFjNjY3MzQwLzMwZWQ0YWYwLWFkODQtNDRmMS04NGRhLWNkOWIxYzY2
NzM0MC5jcmwwHwYDVR0jBBgwFoAUfDeBNtBgaizY5B3JT+fA2zhddi0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8zMGVkNGFmMC1hZDg0LTQ0ZjEtODRkYS1jZDli
MWM2NjczNDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Ah3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF0lYYTpSl19jCw8A0j00NEuEyN1GGlKfagw/V6Pb1k/syjoN6Q1+FSU
BnUAqE0JXHjgrYNT+qGaB+VYcXde3o/JJg95gDGQDF0LqlT+oBTJ1mjt9526GOd3
0ykn56gLWo7kF3rdB3Br4JCeLZVM05MFyX0netrcTVHgIWGuV6FOz7iqVVnXkhVs
HEWlx/kB0Xt5tpvdtSE8Q4vuawb2gQA3fIL9psMQpRf8Uw5cdkgXSpS5wZMnJ+VJ
8Y80+kcP8wxaTi6TFt+F6YIVhypkT0fi+7qOh1uf172366vVYKQgWd9YkMIifcbg
yYEmmPJI7XuiEoxrXHdMcl6dGmkWaBs=
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:03:34 2026 by rpki-client