Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/d07cf8ed-f713-3a77-aa1b-9eccc304b002.roa
File:                     d07cf8ed-f713-3a77-aa1b-9eccc304b002.roa (raw, json)
Hash identifier:          88qk8s9XHU0VuW2qAnhsYvqCKoxO68d4KWmCRannd7Y=
Subject key identifier:   84:FB:F4:53:F6:9B:B3:77:82:7B:76:F0:75:9F:B7:D4:EB:80:49:0D
Certificate issuer:       /CN=7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2
Certificate serial:       010D0C9F4328584EA787CEEB3556BE2AEB5C5120
Authority key identifier: AF:09:CB:D5:4A:3D:20:4D:15:7E:53:05:10:20:7F:21:48:BF:94:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/d07cf8ed-f713-3a77-aa1b-9eccc304b002.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     5650
IP address blocks:        167.253.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:ce:eb:35:56:be:2a:eb:5c:51:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8ab68efa-0fa0-47fc-938b-4978be66a69a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5e:04:e7:3e:fc:9d:78:e8:18:f8:19:b1:2c:
                    b4:9d:1e:dd:69:b2:1c:48:98:5f:00:b6:96:66:b9:
                    6b:5d:36:f4:54:2f:c9:99:20:cd:5e:4f:ee:da:50:
                    c2:e4:97:35:a8:27:33:de:6f:24:71:73:17:1a:33:
                    06:22:5d:d4:0e:93:ec:ab:6a:a2:3d:c9:7d:ba:fb:
                    fe:e3:a7:3c:bf:a1:82:ab:25:5a:a6:6a:8d:77:83:
                    be:bf:bd:ab:01:a8:a9:e2:41:cd:cf:8d:e6:97:18:
                    de:ab:a1:e0:82:43:b2:66:87:ab:c6:e6:cb:b0:05:
                    68:03:c5:18:52:0e:0a:9f:37:df:e1:93:48:ac:96:
                    87:91:5d:ff:b9:f6:66:06:01:40:f1:41:24:ee:63:
                    eb:93:ed:54:1e:6f:71:06:ae:c7:9f:9b:16:92:26:
                    30:ff:2d:5c:74:1e:bb:15:61:41:10:93:99:53:2f:
                    3f:83:c5:41:b9:93:1e:be:6d:bf:42:4c:cf:d6:f7:
                    af:d5:b5:33:e0:20:4c:8a:3f:07:5e:05:f1:39:a6:
                    b5:ad:16:e0:58:8a:2e:41:41:44:61:74:88:7d:89:
                    e3:b5:82:2b:44:5d:86:0d:62:29:0b:13:3a:85:f4:
                    63:d9:c5:a7:aa:97:8c:a4:73:a4:6b:28:33:f7:36:
                    bd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:FB:F4:53:F6:9B:B3:77:82:7B:76:F0:75:9F:B7:D4:EB:80:49:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/d07cf8ed-f713-3a77-aa1b-9eccc304b002.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.crl

            X509v3 Authority Key Identifier:
                keyid:AF:09:CB:D5:4A:3D:20:4D:15:7E:53:05:10:20:7F:21:48:BF:94:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ee670f3-84d6-4a77-86c2-8c6bc6baa3b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:24:ec:c4:ed:e9:88:38:de:31:f9:24:1a:93:5d:8c:87:9f:
         dc:0a:8e:29:e5:b6:69:34:d3:fe:9c:73:e1:07:9f:49:c6:ac:
         0c:ec:fd:11:2e:4d:ab:58:28:fa:29:3d:71:70:60:af:05:be:
         09:2a:b0:ba:25:39:13:11:f8:7f:24:39:1e:46:31:b9:46:d6:
         26:82:91:54:65:03:8e:bd:65:05:d5:9e:ca:df:1c:17:e7:2e:
         c5:a7:49:11:da:e6:ce:98:57:f8:d2:88:00:a0:1c:ad:9c:c6:
         0b:89:c8:4b:4f:1d:18:c4:0b:84:84:10:a7:79:fa:ef:99:8f:
         24:b2:7f:e6:5b:e0:1a:93:56:4d:86:09:0a:5c:71:ff:1b:ad:
         a3:fb:a7:55:c1:be:cf:f8:69:99:94:17:9d:ff:49:95:49:59:
         fb:27:5a:70:1a:78:67:00:4c:d0:10:94:d9:41:53:72:86:e2:
         aa:23:d9:60:23:5d:26:2e:a9:d1:5d:4d:4a:3f:60:bf:0b:de:
         9f:03:f9:c6:19:c1:a6:ae:7d:b5:36:80:7c:a7:24:09:98:6b:
         db:61:54:a1:1a:d7:8d:98:65:c4:47:a5:d3:01:ad:a7:58:4a:
         22:0c:74:96:38:03:00:ca:3b:c5:98:b4:dd:45:dd:42:65:0d:
         f9:c5:78:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh87rNVa+KutcUSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2VlNjcwZjMtODRkNi00YTc3LTg2YzItOGM2YmM2YmFh
M2IyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OGFiNjhlZmEtMGZhMC00N2ZjLTkzOGItNDk3OGJlNjZhNjlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl14E5z78nXjoGPgZsSy0nR7dabIcSJhfALaW
ZrlrXTb0VC/JmSDNXk/u2lDC5Jc1qCcz3m8kcXMXGjMGIl3UDpPsq2qiPcl9uvv+
46c8v6GCqyVapmqNd4O+v72rAaip4kHNz43mlxjeq6HggkOyZoerxubLsAVoA8UY
Ug4Knzff4ZNIrJaHkV3/ufZmBgFA8UEk7mPrk+1UHm9xBq7Hn5sWkiYw/y1cdB67
FWFBEJOZUy8/g8VBuZMevm2/QkzP1vev1bUz4CBMij8HXgXxOaa1rRbgWIouQUFE
YXSIfYnjtYIrRF2GDWIpCxM6hfRj2cWnqpeMpHOkaygz9za9KwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIT79FP2m7N3gnt28HWft9TrgEkNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83ZWU2
NzBmMy04NGQ2LTRhNzctODZjMi04YzZiYzZiYWEzYjIvZDA3Y2Y4ZWQtZjcxMy0z
YTc3LWFhMWItOWVjY2MzMDRiMDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvN2VlNjcwZjMtODRkNi00YTc3LTg2
YzItOGM2YmM2YmFhM2IyLzdlZTY3MGYzLTg0ZDYtNGE3Ny04NmMyLThjNmJjNmJh
YTNiMi5jcmwwHwYDVR0jBBgwFoAUrwnL1Uo9IE0VflMFECB/IUi/lFowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi83ZWU2NzBmMy04NGQ2LTRhNzctODZjMi04YzZi
YzZiYWEzYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/10MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKIk7MTt6Yg43jH5JBqTXYyHn9wKjinltmk00/6cc+EHn0nGrAzs/REu
TatYKPopPXFwYK8FvgkqsLolORMR+H8kOR5GMblG1iaCkVRlA469ZQXVnsrfHBfn
LsWnSRHa5s6YV/jSiACgHK2cxguJyEtPHRjEC4SEEKd5+u+ZjySyf+Zb4BqTVk2G
CQpccf8braP7p1XBvs/4aZmUF53/SZVJWfsnWnAaeGcATNAQlNlBU3KG4qoj2WAj
XSYuqdFdTUo/YL8L3p8D+cYZwaaufbU2gHynJAmYa9thVKEa142YZcRHpdMBradY
SiIMdJY4AwDKO8WYtN1F3UJlDfnFeBQ=
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:42:14 2026 by rpki-client