Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21b78bd0-4c0e-37a1-a89d-7ccc4775475a.roa
File:                     21b78bd0-4c0e-37a1-a89d-7ccc4775475a.roa (raw, json)
Hash identifier:          /6tWnNaKt2H2PN//7Ka41x31cGUL3PqIWgRLY29vTk8=
Subject key identifier:   3F:4F:2F:9A:D0:CE:31:58:07:4F:C5:04:17:49:34:08:22:57:9E:B2
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA5AA88552C3C3992200DE800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21b78bd0-4c0e-37a1-a89d-7ccc4775475a.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        75.205.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:88:55:2c:3c:39:92:20:0d:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=f3f34190-e78f-4f37-a168-ec4be3855f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:81:66:2e:df:a4:fd:90:3c:96:6c:31:f7:9c:
                    19:54:a3:a5:a1:d3:a2:4f:72:55:ae:86:02:af:1c:
                    af:9e:d1:0f:9d:4d:02:58:e3:3b:71:b9:06:ca:93:
                    e1:7a:3f:b1:a4:d6:7e:00:bc:aa:4d:0c:72:b1:55:
                    13:ac:7b:52:cb:b0:b5:56:fb:27:e0:0e:9c:3d:6c:
                    a7:ab:60:75:98:27:60:12:4b:f7:6f:f5:b8:48:4d:
                    11:6a:ca:1c:85:42:7c:08:d2:f2:52:c1:99:c5:82:
                    21:9e:c7:22:b9:65:3c:aa:38:0d:05:0d:6f:73:9d:
                    94:ec:45:29:5b:a8:1f:86:af:36:80:6c:62:59:f1:
                    6f:1d:da:9e:b0:a5:5e:32:88:49:28:6b:bf:15:7c:
                    5e:8e:1a:6c:9b:a7:f1:b0:95:8d:be:8d:c6:30:c7:
                    35:22:d7:90:a5:74:2c:0b:67:c4:12:c0:73:aa:62:
                    d4:ed:71:02:7e:e9:f6:e2:68:0d:45:15:49:60:6d:
                    cd:bf:d7:5c:fc:7f:b6:d1:3b:e3:58:b1:9b:c9:66:
                    8d:a8:45:8f:1d:be:50:1e:6c:b5:64:05:5e:6d:43:
                    5d:ea:e6:b1:9d:b1:e9:7a:b2:fd:81:7f:d6:08:7d:
                    13:f6:de:31:7f:8a:08:dd:28:77:3f:01:26:87:09:
                    7e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4F:2F:9A:D0:CE:31:58:07:4F:C5:04:17:49:34:08:22:57:9E:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/21b78bd0-4c0e-37a1-a89d-7ccc4775475a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.205.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:80:ba:e9:ef:31:25:de:07:7a:ce:e4:ab:92:58:3d:f4:41:
         95:b5:92:20:25:03:04:16:62:74:71:eb:ca:46:6b:d6:5e:1f:
         a7:c9:00:0f:18:8b:46:de:2c:7d:32:29:4f:06:c8:e8:f3:62:
         ee:6d:55:93:69:96:f2:bd:82:70:98:88:70:27:be:f4:88:ae:
         db:24:a8:e3:dc:b8:6d:d3:a5:dd:6a:9b:f6:75:c5:a3:11:d2:
         67:2b:36:22:f9:f8:aa:86:35:dd:c4:0e:f0:b0:a1:b0:42:8c:
         a5:af:25:90:33:7b:10:d2:a0:90:56:2a:a0:82:10:9a:f1:df:
         95:71:bb:44:7f:52:fd:ad:2a:87:51:90:1d:61:16:69:fe:fc:
         c8:d4:da:e2:7d:ec:9f:b6:23:e7:2e:4f:04:9d:d6:62:af:75:
         11:bb:47:56:1e:3b:99:82:a1:ae:ef:1f:ca:23:5e:8b:e9:f7:
         4f:8d:73:09:cf:18:31:1e:ce:08:e2:72:5e:e0:b6:81:8e:cf:
         af:a9:f0:b0:3b:7d:5e:c2:5f:e4:0e:e0:0f:34:c1:ab:0a:e8:
         97:d9:a3:a9:2c:07:aa:68:49:78:a7:d3:1a:e1:78:c1:96:74:
         06:80:92:78:a2:38:33:c1:f5:06:2b:ca:7d:b8:6c:01:01:36:
         4b:a2:d2:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqohVLDw5kiAN6AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk
ZjNmMzQxOTAtZTc4Zi00ZjM3LWExNjgtZWM0YmUzODU1ZjdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4FmLt+k/ZA8lmwx95wZVKOlodOiT3JVroYC
rxyvntEPnU0CWOM7cbkGypPhej+xpNZ+ALyqTQxysVUTrHtSy7C1Vvsn4A6cPWyn
q2B1mCdgEkv3b/W4SE0RasochUJ8CNLyUsGZxYIhnsciuWU8qjgNBQ1vc52U7EUp
W6gfhq82gGxiWfFvHdqesKVeMohJKGu/FXxejhpsm6fxsJWNvo3GMMc1IteQpXQs
C2fEEsBzqmLU7XECfun24mgNRRVJYG3Nv9dc/H+20TvjWLGbyWaNqEWPHb5QHmy1
ZAVebUNd6uaxnbHperL9gX/WCH0T9t4xf4oI3Sh3PwEmhwl+WQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD9PL5rQzjFYB0/FBBdJNAgiV56yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMjFiNzhiZDAtNGMwZS0z
N2ExLWE4OWQtN2NjYzQ3NzU0NzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES80gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEGAuunvMSXeB3rO5KuSWD30QZW1kiAlAwQWYnRx68pGa9ZeH6fJAA8Y
i0beLH0yKU8GyOjzYu5tVZNplvK9gnCYiHAnvvSIrtskqOPcuG3Tpd1qm/Z1xaMR
0mcrNiL5+KqGNd3EDvCwobBCjKWvJZAzexDSoJBWKqCCEJrx35Vxu0R/Uv2tKodR
kB1hFmn+/MjU2uJ97J+2I+cuTwSd1mKvdRG7R1YeO5mCoa7vH8ojXovp90+NcwnP
GDEezgjicl7gtoGOz6+p8LA7fV7CX+QO4A80wasK6JfZo6ksB6poSXin0xrheMGW
dAaAkniiODPB9QYryn24bAEBNkui0t4=
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:17:50 2026 by rpki-client