Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b3419bc1-91bd-4274-9551-2ab252b1c64c/627bbcea-3a63-36af-8f19-2ade398472c9.roa
File:                     627bbcea-3a63-36af-8f19-2ade398472c9.roa (raw, json)
Hash identifier:          dRETBxVDYeWJE2Ij5F1ihU+nLbF1noI5YEuyRHc3X+c=
Subject key identifier:   C8:69:01:96:0A:BB:D5:1D:75:79:D6:4E:D8:75:CE:96:22:20:0A:7A
Certificate issuer:       /CN=b3419bc1-91bd-4274-9551-2ab252b1c64c
Certificate serial:       010D0C9F4328584EA78F6B4C3FCDF53DFB0DEDC0
Authority key identifier: D8:BB:6E:E1:4D:7C:AC:A9:FA:0E:74:0F:58:F2:1D:05:32:3E:19:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b3419bc1-91bd-4274-9551-2ab252b1c64c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b3419bc1-91bd-4274-9551-2ab252b1c64c/627bbcea-3a63-36af-8f19-2ade398472c9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     53730
IP address blocks:        184.94.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b3419bc1-91bd-4274-9551-2ab252b1c64c/b3419bc1-91bd-4274-9551-2ab252b1c64c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b3419bc1-91bd-4274-9551-2ab252b1c64c/b3419bc1-91bd-4274-9551-2ab252b1c64c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b3419bc1-91bd-4274-9551-2ab252b1c64c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:6b:4c:3f:cd:f5:3d:fb:0d:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3419bc1-91bd-4274-9551-2ab252b1c64c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=78f1d89e-b452-4fc8-a0c5-c1c80b8b529a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:24:3b:17:08:c7:17:bd:80:f0:23:02:af:8c:
                    fb:43:b0:70:ee:36:61:30:1f:46:ec:7c:44:72:e1:
                    fa:99:62:e5:b8:a1:20:b9:5d:a3:74:f6:6f:0e:11:
                    25:bc:dd:9c:54:69:b7:ae:15:f3:45:ad:27:50:10:
                    c1:49:f4:09:8d:62:fb:8c:3d:32:be:26:fb:7d:a3:
                    f7:ae:b2:23:da:59:ea:ed:c5:5b:21:62:e7:62:e3:
                    3b:a2:0a:eb:9a:eb:00:b8:f6:d1:2b:04:01:6b:29:
                    eb:f2:e6:0d:bf:45:cc:8b:e9:7d:78:25:24:06:d7:
                    27:80:f7:b5:f1:a7:47:31:f2:41:6c:a2:c0:18:9a:
                    c6:67:eb:48:08:21:cc:a0:70:ff:fd:72:50:98:54:
                    c5:d5:40:3a:39:e1:95:57:85:46:4e:0f:47:63:e0:
                    f1:37:f9:c8:ca:58:b1:a9:ff:4c:03:4e:ba:15:c8:
                    e6:bc:f5:93:1e:c8:fc:87:14:ff:7a:a9:41:ef:3e:
                    4d:a9:ca:9c:dd:2d:bc:d0:14:6c:9d:89:92:4b:ae:
                    3b:06:d6:cc:21:b8:75:f2:19:01:df:6e:9a:f0:fe:
                    29:73:ae:eb:ae:ed:d5:9e:57:12:38:fa:a2:0d:d8:
                    42:b3:20:a5:37:37:0d:fc:5c:9f:b2:1f:a4:29:a9:
                    75:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:69:01:96:0A:BB:D5:1D:75:79:D6:4E:D8:75:CE:96:22:20:0A:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b3419bc1-91bd-4274-9551-2ab252b1c64c/627bbcea-3a63-36af-8f19-2ade398472c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b3419bc1-91bd-4274-9551-2ab252b1c64c/b3419bc1-91bd-4274-9551-2ab252b1c64c.crl

            X509v3 Authority Key Identifier:
                keyid:D8:BB:6E:E1:4D:7C:AC:A9:FA:0E:74:0F:58:F2:1D:05:32:3E:19:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b3419bc1-91bd-4274-9551-2ab252b1c64c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.94.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:0c:6d:3d:de:ad:93:75:47:bc:4b:d6:c7:77:7d:71:b2:6d:
         14:aa:40:25:16:9b:eb:32:f8:b1:a0:17:cf:97:3a:16:d6:0f:
         85:b6:a9:65:ce:82:3c:3d:ba:62:d0:ab:34:ba:df:2a:d5:b9:
         91:6e:a0:93:59:16:01:ab:dc:db:8d:b3:00:26:db:33:1c:63:
         37:b9:1a:d0:da:03:6b:63:21:bc:8a:37:fd:6f:a3:22:08:9f:
         dd:b5:94:6e:34:63:65:e6:43:69:81:34:c8:3e:d0:0d:5f:1c:
         1d:2a:9b:79:a6:e0:6b:e3:e8:98:d1:f1:be:6b:ce:de:5d:95:
         ac:23:9b:ce:62:b5:ea:8d:79:f3:04:56:1f:b8:a4:b0:92:88:
         c3:b8:57:04:4a:85:b7:92:9d:f4:49:f4:d5:6d:6f:81:34:da:
         de:cd:e8:9f:1b:5c:65:d8:db:45:17:9b:96:91:68:4b:17:01:
         93:e7:9b:78:44:59:ad:d7:3e:8e:30:64:54:89:b9:05:b7:0b:
         2d:8b:13:50:2e:c4:4c:66:29:a6:b9:6a:76:06:9f:96:db:c4:
         a2:c7:20:08:9e:f6:b9:f3:b5:99:f6:20:80:70:30:dc:a1:32:
         6c:f5:37:82:5b:0f:bc:f2:36:7f:ed:c3:5e:62:a1:8b:8e:d4:
         c3:b6:6b:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj2tMP831PfsN7cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjM0MTliYzEtOTFiZC00Mjc0LTk1NTEtMmFiMjUyYjFj
NjRjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NzhmMWQ4OWUtYjQ1Mi00ZmM4LWEwYzUtYzFjODBiOGI1MjlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSQ7FwjHF72A8CMCr4z7Q7Bw7jZhMB9G7HxE
cuH6mWLluKEguV2jdPZvDhElvN2cVGm3rhXzRa0nUBDBSfQJjWL7jD0yvib7faP3
rrIj2lnq7cVbIWLnYuM7ogrrmusAuPbRKwQBaynr8uYNv0XMi+l9eCUkBtcngPe1
8adHMfJBbKLAGJrGZ+tICCHMoHD//XJQmFTF1UA6OeGVV4VGTg9HY+DxN/nIylix
qf9MA066FcjmvPWTHsj8hxT/eqlB7z5Nqcqc3S280BRsnYmSS647BtbMIbh18hkB
326a8P4pc67rru3VnlcSOPqiDdhCsyClNzcN/Fyfsh+kKal1iQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMhpAZYKu9UddXnWTth1zpYiIAp6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iMzQx
OWJjMS05MWJkLTQyNzQtOTU1MS0yYWIyNTJiMWM2NGMvNjI3YmJjZWEtM2E2My0z
NmFmLThmMTktMmFkZTM5ODQ3MmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjM0MTliYzEtOTFiZC00Mjc0LTk1
NTEtMmFiMjUyYjFjNjRjL2IzNDE5YmMxLTkxYmQtNDI3NC05NTUxLTJhYjI1MmIx
YzY0Yy5jcmwwHwYDVR0jBBgwFoAU2Ltu4U18rKn6DnQPWPIdBTI+GTcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iMzQxOWJjMS05MWJkLTQyNzQtOTU1MS0yYWIy
NTJiMWM2NGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDuF7YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG0MbT3erZN1R7xL1sd3fXGybRSqQCUWm+sy+LGgF8+XOhbWD4W2qWXO
gjw9umLQqzS63yrVuZFuoJNZFgGr3NuNswAm2zMcYze5GtDaA2tjIbyKN/1voyII
n921lG40Y2XmQ2mBNMg+0A1fHB0qm3mm4Gvj6JjR8b5rzt5dlawjm85iteqNefME
Vh+4pLCSiMO4VwRKhbeSnfRJ9NVtb4E02t7N6J8bXGXY20UXm5aRaEsXAZPnm3hE
Wa3XPo4wZFSJuQW3Cy2LE1AuxExmKaa5anYGn5bbxKLHIAie9rnztZn2IIBwMNyh
Mmz1N4JbD7zyNn/tw15ioYuO1MO2a8c=
-----END CERTIFICATE-----
Generated at Thu Jul 30 00:35:19 2026 by rpki-client