Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6433d98a-990d-3117-b44a-348a50fcb4ce.roa
File:                     6433d98a-990d-3117-b44a-348a50fcb4ce.roa (raw, json)
Hash identifier:          gnf6BYEhKBo7SFJTZGP9kpbIHYcjiagBK0YT2jmd5FE=
Subject key identifier:   04:DB:93:8F:92:B3:03:EB:5D:B3:A7:BA:7A:B1:37:28:5F:88:1A:36
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A9D7B853F6E141764C180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6433d98a-990d-3117-b44a-348a50fcb4ce.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     701
IP address blocks:        207.68.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:9d:7b:85:3f:6e:14:17:64:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=64cf636e-971c-4331-9ae5-e743d8d49ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:22:a6:b1:19:ff:6c:bb:4a:85:d1:0b:4e:79:
                    84:9b:d1:5e:e0:3d:cc:34:87:e5:7a:48:35:c6:87:
                    18:fa:a7:65:a8:9b:67:bd:f0:76:d8:be:80:03:af:
                    8f:18:70:5b:d7:11:b4:47:db:e6:22:d2:95:dc:5f:
                    a7:ba:36:89:4d:3e:99:db:8e:cf:b8:29:d0:63:42:
                    52:ed:26:ac:c1:9e:2d:18:a3:35:cc:ae:1f:e5:2f:
                    89:e6:f2:c2:d7:17:66:bf:90:a7:28:fb:3e:a6:dc:
                    c8:54:75:11:b8:36:27:cd:9f:1c:aa:e8:45:4d:91:
                    7a:26:78:19:6d:ce:d6:44:d4:91:9d:01:a3:de:f1:
                    f8:9e:5a:40:af:72:86:ca:75:0a:47:7b:14:1a:1d:
                    9e:4b:97:05:27:f6:9c:7d:a2:54:e0:10:b3:56:47:
                    40:33:a0:ab:3d:56:f8:89:bd:76:f7:26:39:fc:e0:
                    cf:18:d1:d7:15:80:a6:31:47:ae:cd:a6:19:92:fe:
                    2c:34:6c:ef:6e:87:fb:3d:33:f2:5c:55:ab:cd:b4:
                    12:f9:e8:ca:3b:de:fb:fe:2d:aa:a7:14:40:f8:0f:
                    f3:46:30:0f:43:3c:cd:e8:1d:2e:4a:94:cc:46:de:
                    c4:7e:65:5b:d5:9d:39:ab:ff:75:e8:01:fd:c9:6e:
                    97:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DB:93:8F:92:B3:03:EB:5D:B3:A7:BA:7A:B1:37:28:5F:88:1A:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6433d98a-990d-3117-b44a-348a50fcb4ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.68.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:b0:75:b9:d1:a1:5f:d6:c2:43:e0:72:88:4a:0b:97:58:03:
         d7:d0:22:8b:01:4f:bb:fc:a8:02:18:be:84:ee:48:20:d2:18:
         98:64:6c:2b:7f:85:6a:32:1f:5f:8c:13:1f:12:fc:77:2c:a8:
         28:b3:85:c4:35:15:35:bc:89:65:ec:39:46:49:bf:0c:10:22:
         aa:ee:52:95:69:05:7d:6c:92:ff:15:d0:8d:02:d5:35:7e:48:
         9d:75:1a:fa:3f:16:75:af:3a:92:df:f0:65:1e:0f:f3:e8:44:
         00:15:fd:83:78:df:7e:99:a4:7a:55:cd:39:8f:16:76:71:09:
         d8:e9:d6:27:6b:71:de:ad:17:52:36:4d:77:b0:68:d7:f4:1a:
         da:79:18:b3:b9:56:ed:8c:7a:0f:f7:cd:82:61:bf:c6:9c:92:
         5b:1c:b3:e1:7b:9f:19:af:04:04:e0:7f:b1:fe:58:5e:bc:bb:
         da:3c:a6:c4:78:7f:07:5d:46:4c:59:d4:d2:c9:19:0b:94:7c:
         8c:7b:ae:8f:92:20:85:88:9a:95:87:7d:ca:4f:fc:fe:33:d9:
         b4:bb:93:5f:ff:6d:2e:97:68:db:64:b1:e4:22:8d:51:f3:10:
         bc:f3:4e:b2:16:ab:e3:74:38:a1:23:1b:a5:86:ae:0e:0a:7f:
         67:b3:cf:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSp17hT9uFBdkwYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk
NjRjZjYzNmUtOTcxYy00MzMxLTlhZTUtZTc0M2Q4ZDQ5Y2EzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCKmsRn/bLtKhdELTnmEm9Fe4D3MNIflekg1
xocY+qdlqJtnvfB22L6AA6+PGHBb1xG0R9vmItKV3F+nujaJTT6Z247PuCnQY0JS
7SaswZ4tGKM1zK4f5S+J5vLC1xdmv5CnKPs+ptzIVHURuDYnzZ8cquhFTZF6JngZ
bc7WRNSRnQGj3vH4nlpAr3KGynUKR3sUGh2eS5cFJ/acfaJU4BCzVkdAM6CrPVb4
ib129yY5/ODPGNHXFYCmMUeuzaYZkv4sNGzvbof7PTPyXFWrzbQS+ejKO977/i2q
pxRA+A/zRjAPQzzN6B0uSpTMRt7EfmVb1Z05q/916AH9yW6XQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFATbk4+SswPrXbOnunqxNyhfiBo2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNjQzM2Q5OGEtOTkwZC0z
MTE3LWI0NGEtMzQ4YTUwZmNiNGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFz0QgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKmwdbnRoV/WwkPgcohKC5dYA9fQIosBT7v8qAIYvoTuSCDSGJhkbCt/
hWoyH1+MEx8S/HcsqCizhcQ1FTW8iWXsOUZJvwwQIqruUpVpBX1skv8V0I0C1TV+
SJ11Gvo/FnWvOpLf8GUeD/PoRAAV/YN4336ZpHpVzTmPFnZxCdjp1idrcd6tF1I2
TXewaNf0Gtp5GLO5Vu2Meg/3zYJhv8acklscs+F7nxmvBATgf7H+WF68u9o8psR4
fwddRkxZ1NLJGQuUfIx7ro+SIIWImpWHfcpP/P4z2bS7k1//bS6XaNtkseQijVHz
ELzzTrIWq+N0OKEjG6WGrg4Kf2ezz0E=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:03:40 2026 by rpki-client