Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/f7b3e1e4-f7e6-365d-b936-0927d756844d.roa
File:                     f7b3e1e4-f7e6-365d-b936-0927d756844d.roa (raw, json)
Hash identifier:          qgGDcqvVpyhwi9/Q7OMCLL2G6TyQlccvNfVwYeJ8fIQ=
Subject key identifier:   11:56:9C:3E:B9:0C:A8:00:41:F8:F6:F4:B7:03:44:FC:27:96:9B:0C
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F4328584EA79439BB5EAE08BB47DBA880
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/f7b3e1e4-f7e6-365d-b936-0927d756844d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13768
IP address blocks:        192.154.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:39:bb:5e:ae:08:bb:47:db:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=06b23be0-6f57-43a9-a9b8-8817a5bf548d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5c:e7:e0:2f:ae:15:4b:1e:c0:f5:bc:a0:1f:
                    fb:48:66:f5:9b:a0:fa:b0:4b:fa:39:4f:2f:0f:d1:
                    be:4d:e9:2f:97:5d:b6:ad:d7:2f:56:15:3d:10:f3:
                    7d:65:16:63:de:1b:00:10:6c:fd:03:97:25:af:d5:
                    17:ac:22:55:fe:bc:cd:d2:10:ad:1a:11:c2:7b:99:
                    b8:3f:b6:c8:5c:48:cd:34:14:2f:40:a7:0e:70:7e:
                    e2:a6:89:13:71:72:25:0c:2c:53:d3:ae:4f:f1:68:
                    57:d4:62:5d:f2:07:d1:2d:ba:4d:fe:78:d1:f5:47:
                    8f:52:73:28:3b:c6:1e:9a:5f:ef:ff:cc:ec:68:c3:
                    fb:00:22:e3:0a:fd:a6:dc:7e:73:7b:1c:d3:6f:7b:
                    4d:ec:cc:f3:7c:a3:18:4a:8f:0c:dd:ce:1c:13:61:
                    1b:81:5e:91:e1:07:84:2c:66:5e:7a:48:b4:92:80:
                    6d:4c:a7:3b:e6:17:99:f5:f8:43:ca:cb:90:cd:d4:
                    32:4b:0c:5d:c3:ed:54:ee:8b:26:f3:27:2d:8a:f6:
                    e3:49:79:e2:51:35:75:e7:b9:2f:e3:48:9c:51:3e:
                    3c:2e:60:10:23:6a:6b:22:4f:9c:44:cc:6b:5a:34:
                    3b:75:db:96:66:22:4b:bf:12:25:e6:ad:5b:83:22:
                    ec:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:56:9C:3E:B9:0C:A8:00:41:F8:F6:F4:B7:03:44:FC:27:96:9B:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/f7b3e1e4-f7e6-365d-b936-0927d756844d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:66:89:fc:fa:47:8c:68:a4:26:8c:4c:a0:4b:12:2e:ec:99:
         8c:9f:8d:bb:08:ab:c2:79:bc:97:c2:f2:f5:31:74:37:37:c6:
         dc:ea:03:fd:58:81:0f:2b:16:98:35:75:6a:61:dc:7f:79:47:
         f3:a8:b2:15:7e:8a:b7:ef:b1:fb:ac:23:7c:c8:eb:68:33:90:
         72:0e:5c:2c:1d:cc:a2:ab:30:a2:06:24:8d:27:00:ea:04:fb:
         27:59:e7:c3:9e:16:b5:92:ef:71:ec:53:b3:a3:f1:57:56:4b:
         5b:47:b2:74:0d:fb:57:f7:fc:3f:a2:a6:1f:8a:78:59:eb:70:
         99:ea:f0:48:dd:c4:61:d5:78:72:db:7c:a3:ce:76:ce:13:62:
         dc:85:1d:8f:3d:a7:ac:f0:6d:b0:6f:61:d6:19:fe:bb:83:ee:
         1b:9b:44:b7:a2:36:09:cc:3f:3b:73:ad:75:98:c7:64:a1:61:
         b4:36:2f:ea:2e:3f:99:ab:9b:17:99:eb:06:be:56:6d:25:38:
         9a:a1:3f:6f:0c:36:dc:6d:c7:0a:72:65:1e:ea:29:d8:ea:9e:
         d3:fa:bd:e8:e9:0b:af:ce:64:fb:13:42:3b:41:38:55:c6:35:
         c2:97:8d:15:2b:cc:56:3e:15:42:ee:7f:fc:f8:8d:e8:24:75:
         7a:fd:3f:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlDm7Xq4Iu0fbqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDRiYzJiODctMjIzYy00MjgwLWE5YjMtNjM0ZTY2MTEx
ZWViMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MDZiMjNiZTAtNmY1Ny00M2E5LWE5YjgtODgxN2E1YmY1NDhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplzn4C+uFUsewPW8oB/7SGb1m6D6sEv6OU8v
D9G+Tekvl122rdcvVhU9EPN9ZRZj3hsAEGz9A5clr9UXrCJV/rzN0hCtGhHCe5m4
P7bIXEjNNBQvQKcOcH7ipokTcXIlDCxT065P8WhX1GJd8gfRLbpN/njR9UePUnMo
O8Yeml/v/8zsaMP7ACLjCv2m3H5zexzTb3tN7MzzfKMYSo8M3c4cE2EbgV6R4QeE
LGZeeki0koBtTKc75heZ9fhDysuQzdQySwxdw+1U7osm8yctivbjSXniUTV157kv
40icUT48LmAQI2prIk+cRMxrWjQ7dduWZiJLvxIl5q1bgyLsuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBFWnD65DKgAQfj29LcDRPwnlpsMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NGJj
MmI4Ny0yMjNjLTQyODAtYTliMy02MzRlNjYxMTFlZWIvZjdiM2UxZTQtZjdlNi0z
NjVkLWI5MzYtMDkyN2Q3NTY4NDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDRiYzJiODctMjIzYy00MjgwLWE5
YjMtNjM0ZTY2MTExZWViLzQ0YmMyYjg3LTIyM2MtNDI4MC1hOWIzLTYzNGU2NjEx
MWVlYi5jcmwwHwYDVR0jBBgwFoAUPxjW1UuMY2iuDtn3fpgQlOXg7XowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80NGJjMmI4Ny0yMjNjLTQyODAtYTliMy02MzRl
NjYxMTFlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJrMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC1mifz6R4xopCaMTKBLEi7smYyfjbsIq8J5vJfC8vUxdDc3xtzqA/1Y
gQ8rFpg1dWph3H95R/OoshV+irfvsfusI3zI62gzkHIOXCwdzKKrMKIGJI0nAOoE
+ydZ58OeFrWS73HsU7Oj8VdWS1tHsnQN+1f3/D+iph+KeFnrcJnq8EjdxGHVeHLb
fKPOds4TYtyFHY89p6zwbbBvYdYZ/ruD7hubRLeiNgnMPztzrXWYx2ShYbQ2L+ou
P5mrmxeZ6wa+Vm0lOJqhP28MNtxtxwpyZR7qKdjqntP6vejpC6/OZPsTQjtBOFXG
NcKXjRUrzFY+FULuf/z4jegkdXr9P/Y=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:40:39 2026 by rpki-client