Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/c122ac19-167e-34ec-85a1-ee2d04f3f53d.roa
File:                     c122ac19-167e-34ec-85a1-ee2d04f3f53d.roa (raw, json)
Hash identifier:          8mwybsHWbg2/OP3IaNPQWmPpLq7J1GlX2NzESr5be9c=
Subject key identifier:   24:45:A5:B8:8F:D1:A7:55:92:66:63:4C:37:A8:C2:C9:09:4B:20:BF
Certificate issuer:       /CN=614c4e09-0317-4410-a7a2-52c308a201b1
Certificate serial:       010D0C9F4328584EA7901E41CA5759382FCFAA00
Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/c122ac19-167e-34ec-85a1-ee2d04f3f53d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     5650
IP address blocks:        168.91.76.0/23 maxlen: 23
                          168.91.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:1e:41:ca:57:59:38:2f:cf:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5b0b9899-2667-427f-ae9e-d688b6c278e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9f:18:b4:28:4b:ca:61:d4:e2:12:b6:a1:11:
                    14:e5:a5:71:b6:ca:f3:c4:a5:e4:19:49:b8:65:c9:
                    9c:b3:34:90:16:fc:b0:40:4e:35:56:1a:0d:b3:5e:
                    73:14:49:68:df:3d:0b:30:26:8d:d6:06:3f:74:d4:
                    23:74:3f:7e:ab:28:d1:46:ed:f7:5a:4f:0c:68:3d:
                    ed:88:de:73:cb:29:fb:60:d9:1c:e9:57:82:0a:e5:
                    3d:dc:22:4a:d6:78:27:7e:1e:aa:e6:2d:6f:b7:66:
                    7f:2d:36:14:8a:39:fb:d9:58:f4:96:42:59:36:a4:
                    9a:9c:8c:69:71:35:fa:15:8c:41:99:dd:06:96:f8:
                    08:cd:4d:b8:bc:b8:3b:53:f9:b9:69:60:a5:d4:7a:
                    3e:be:a1:70:79:0a:1f:d7:2d:4c:bd:6f:4f:90:35:
                    d0:6d:e5:13:3e:20:28:88:2b:0d:51:3e:5e:af:af:
                    fa:4b:12:72:32:bd:cd:c4:5a:b3:67:87:f1:d4:c0:
                    7e:a6:ef:a5:76:49:70:32:62:d5:97:84:20:82:26:
                    30:e1:8b:2c:c0:79:b9:65:3c:4b:9e:0e:3a:42:dd:
                    e1:05:5f:af:3a:61:ee:78:a0:8c:1f:2e:72:a2:99:
                    d0:65:73:e5:c5:35:c7:5f:02:da:e5:00:8b:7b:8f:
                    03:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:45:A5:B8:8F:D1:A7:55:92:66:63:4C:37:A8:C2:C9:09:4B:20:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/c122ac19-167e-34ec-85a1-ee2d04f3f53d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl

            X509v3 Authority Key Identifier:
                keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:ab:fe:e7:af:79:d9:d3:c3:69:3b:e6:1a:6a:93:49:8c:b9:
         63:cf:79:22:e0:8c:a0:8f:0d:48:5a:93:70:53:f6:9f:64:36:
         43:e7:1e:51:cb:bb:cd:b9:2e:d0:ff:95:5d:c7:90:25:df:54:
         70:47:8c:3b:ce:fb:4c:42:97:0c:0b:9e:ea:05:bd:24:4d:19:
         fc:05:de:63:1b:c5:a9:e6:b0:c9:42:c5:c3:f4:13:9b:30:7e:
         f1:52:c4:cc:c5:77:62:29:c6:c5:40:35:27:1c:d2:3e:3c:46:
         1c:19:7a:0a:99:b3:dc:6f:49:55:16:9f:cb:83:f5:68:b5:0d:
         33:66:67:4e:64:f4:7a:2c:05:67:ef:93:bd:c7:41:bc:72:0a:
         53:3b:4d:86:2d:b6:44:f7:e8:94:fa:20:6d:8a:a9:11:68:a5:
         e8:01:db:55:de:93:4b:72:48:5d:a3:a0:b0:e5:89:13:c2:8a:
         17:42:8d:69:33:3f:f7:f5:cd:5d:62:6d:2a:27:91:d0:d5:9e:
         e7:34:60:e4:7e:9a:c9:1f:65:4e:b3:48:71:4e:6c:f2:92:8e:
         e3:1a:fd:87:6a:bf:05:26:d5:b9:50:14:a2:c2:76:f1:dd:3d:
         41:b9:15:c8:2b:dd:ee:9a:47:9a:77:a6:53:a2:d2:f6:9c:55:
         f1:cb:c3:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkB5ByldZOC/PqgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE0YzRlMDktMDMxNy00NDEwLWE3YTItNTJjMzA4YTIw
MWIxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NWIwYjk4OTktMjY2Ny00MjdmLWFlOWUtZDY4OGI2YzI3OGUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ8YtChLymHU4hK2oREU5aVxtsrzxKXkGUm4
ZcmcszSQFvywQE41VhoNs15zFElo3z0LMCaN1gY/dNQjdD9+qyjRRu33Wk8MaD3t
iN5zyyn7YNkc6VeCCuU93CJK1ngnfh6q5i1vt2Z/LTYUijn72Vj0lkJZNqSanIxp
cTX6FYxBmd0GlvgIzU24vLg7U/m5aWCl1Ho+vqFweQof1y1MvW9PkDXQbeUTPiAo
iCsNUT5er6/6SxJyMr3NxFqzZ4fx1MB+pu+ldklwMmLVl4QggiYw4YsswHm5ZTxL
ng46Qt3hBV+vOmHueKCMHy5yopnQZXPlxTXHXwLa5QCLe48DMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCRFpbiP0adVkmZjTDeowskJSyC/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTRj
NGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMzMDhhMjAxYjEvYzEyMmFjMTktMTY3ZS0z
NGVjLTg1YTEtZWUyZDA0ZjNmNTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE0YzRlMDktMDMxNy00NDEwLWE3
YTItNTJjMzA4YTIwMWIxLzYxNGM0ZTA5LTAzMTctNDQxMC1hN2EyLTUyYzMwOGEy
MDFiMS5jcmwwHwYDVR0jBBgwFoAUerl1BZsNosXu9uPcz/py8leX7d4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82MTRjNGUwOS0wMzE3LTQ0MTAtYTdhMi01MmMz
MDhhMjAxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqFtMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFWr/uevednTw2k75hpqk0mMuWPPeSLgjKCPDUhak3BT9p9kNkPnHlHL
u825LtD/lV3HkCXfVHBHjDvO+0xClwwLnuoFvSRNGfwF3mMbxanmsMlCxcP0E5sw
fvFSxMzFd2IpxsVANScc0j48RhwZegqZs9xvSVUWn8uD9Wi1DTNmZ05k9HosBWfv
k73HQbxyClM7TYYttkT36JT6IG2KqRFopegB21Xek0tySF2joLDliRPCihdCjWkz
P/f1zV1ibSonkdDVnuc0YOR+mskfZU6zSHFObPKSjuMa/YdqvwUm1blQFKLCdvHd
PUG5Fcgr3e6aR5p3plOi0vacVfHLw6o=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:08:29 2026 by rpki-client