Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cec6e1c0-3ab0-3c72-a89c-35e3a2a08afa.roa
File:                     cec6e1c0-3ab0-3c72-a89c-35e3a2a08afa.roa (raw, json)
Hash identifier:          mLExrwZfQCJZYJFPVBe17jUPt6AhqVkMKYoe10AKvvY=
Subject key identifier:   65:86:3E:6A:7C:5A:87:3F:A3:8B:2B:D1:65:19:29:12:08:47:37:25
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A77E0DF1F34BEE3B79A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cec6e1c0-3ab0-3c72-a89c-35e3a2a08afa.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     701
IP address blocks:        208.36.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:77:e0:df:1f:34:be:e3:b7:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=91a25ef0-286a-4a9e-86b7-65c37cd71223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:57:5e:b6:c8:6b:02:2d:76:5d:fe:cc:9d:01:
                    27:e0:52:cd:6f:23:28:89:ba:fd:54:14:f3:ac:44:
                    36:26:9c:37:a5:8a:76:03:26:f1:04:95:da:35:22:
                    0b:d2:f2:09:a6:fc:0a:6b:fc:bd:f8:56:4f:80:f6:
                    f1:01:5a:82:52:0f:4f:db:8e:a1:e9:06:b9:b2:9c:
                    8f:d0:74:2e:2e:0d:a8:26:67:f9:b2:f9:5f:29:84:
                    51:f5:bc:7f:bf:b7:cc:13:b1:08:bf:1c:15:da:cf:
                    d7:c2:27:bf:fe:ac:70:50:3c:89:74:2e:3c:22:2f:
                    22:55:5c:1c:aa:ed:49:65:f1:2d:84:8e:56:ff:ca:
                    a9:ab:f1:2c:4a:f9:55:78:22:b9:64:97:49:94:42:
                    57:db:e0:54:24:28:f0:21:e7:58:a6:4f:e8:3e:d0:
                    21:9d:d3:31:49:93:7c:ac:27:6d:ea:43:fd:18:be:
                    c9:6a:ee:ff:91:94:a1:55:d4:0e:80:8b:1a:57:ae:
                    5d:62:39:80:38:e7:ba:90:a9:54:22:62:d9:b8:41:
                    df:b1:f8:1e:8c:96:3a:0a:69:72:67:b2:2b:85:29:
                    9d:7b:87:b9:17:93:39:1d:13:30:bf:53:87:86:17:
                    39:f7:e6:f6:90:55:5b:cf:d8:9e:9f:b6:e9:ae:f6:
                    e2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:86:3E:6A:7C:5A:87:3F:A3:8B:2B:D1:65:19:29:12:08:47:37:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cec6e1c0-3ab0-3c72-a89c-35e3a2a08afa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.36.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:63:c5:a3:63:5d:b5:be:cf:a1:10:0b:4e:1c:21:6c:ac:7f:
         3f:66:58:f0:53:d1:44:a6:c8:19:e2:5c:f5:65:f8:28:8f:03:
         a8:fa:77:a1:05:80:12:9a:29:ae:86:85:99:d0:c6:f3:f8:7c:
         63:d2:0e:12:78:1c:9a:0d:33:95:36:eb:68:cd:9a:a7:63:ea:
         52:9e:b2:26:a8:e5:8a:07:68:fe:49:a9:e9:7d:99:82:7c:a9:
         92:61:e6:96:7a:e2:de:b9:cc:01:e8:4b:af:74:22:5a:dc:6a:
         2a:c0:5e:6d:41:b8:7f:1e:df:41:ee:a5:e8:7e:4d:ca:ed:23:
         ae:ff:44:ec:31:80:07:c7:89:be:2e:72:bd:53:6c:85:d2:11:
         5d:f5:27:a3:34:dd:63:68:48:f4:26:4d:5e:cb:eb:87:23:bd:
         b0:8d:25:80:ad:e4:ce:40:72:01:a2:12:99:00:76:60:22:4c:
         22:65:b0:9d:e7:da:ef:3f:ee:4d:7a:c9:57:4c:11:63:46:cd:
         e4:b6:ce:2d:93:fc:0a:18:2f:e1:d7:ad:f6:80:f7:07:2e:1a:
         f9:c5:cb:d5:db:ec:a5:a4:79:15:68:db:54:05:86:28:a1:44:
         c8:2a:ce:ed:7a:12:c0:e2:2d:ed:d9:52:3b:f3:5a:57:fa:42:
         81:32:3b:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSnfg3x80vuO3moAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk
OTFhMjVlZjAtMjg2YS00YTllLTg2YjctNjVjMzdjZDcxMjIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxldetshrAi12Xf7MnQEn4FLNbyMoibr9VBTz
rEQ2Jpw3pYp2AybxBJXaNSIL0vIJpvwKa/y9+FZPgPbxAVqCUg9P246h6Qa5spyP
0HQuLg2oJmf5svlfKYRR9bx/v7fME7EIvxwV2s/Xwie//qxwUDyJdC48Ii8iVVwc
qu1JZfEthI5W/8qpq/EsSvlVeCK5ZJdJlEJX2+BUJCjwIedYpk/oPtAhndMxSZN8
rCdt6kP9GL7Jau7/kZShVdQOgIsaV65dYjmAOOe6kKlUImLZuEHfsfgejJY6Cmly
Z7IrhSmde4e5F5M5HRMwv1OHhhc59+b2kFVbz9ien7bprvbiPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGWGPmp8Woc/o4sr0WUZKRIIRzclMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2VjNmUxYzAtM2FiMC0z
YzcyLWE4OWMtMzVlM2EyYTA4YWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0CTgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG1jxaNjXbW+z6EQC04cIWysfz9mWPBT0USmyBniXPVl+CiPA6j6d6EF
gBKaKa6GhZnQxvP4fGPSDhJ4HJoNM5U262jNmqdj6lKesiao5YoHaP5Jqel9mYJ8
qZJh5pZ64t65zAHoS690IlrcairAXm1BuH8e30Hupeh+TcrtI67/ROwxgAfHib4u
cr1TbIXSEV31J6M03WNoSPQmTV7L64cjvbCNJYCt5M5AcgGiEpkAdmAiTCJlsJ3n
2u8/7k16yVdMEWNGzeS2zi2T/AoYL+HXrfaA9wcuGvnFy9Xb7KWkeRVo21QFhiih
RMgqzu16EsDiLe3ZUjvzWlf6QoEyO9o=
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:45:51 2026 by rpki-client