Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/5e7201fa-0fc9-3bfb-b150-cb3db51ac63f.roa
File:                     5e7201fa-0fc9-3bfb-b150-cb3db51ac63f.roa (raw, json)
Hash identifier:          YJPmJsah6vBqTn7018wr7YusxGDQjsOqx3bz8OFQDzM=
Subject key identifier:   E9:39:D1:07:AF:FB:6E:8C:F8:4B:CB:FA:9E:7C:B4:F6:AF:1F:58:42
Certificate issuer:       /CN=b94accf0-8067-4a9a-ba69-832d3d95402d
Certificate serial:       010D0C9F4328584E640F70B945F320D094B14580
Authority key identifier: AE:8E:16:C6:CD:47:F7:01:8F:62:8D:0C:33:24:C4:A9:A4:5E:6E:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/5e7201fa-0fc9-3bfb-b150-cb3db51ac63f.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     8075
IP address blocks:        170.62.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/b94accf0-8067-4a9a-ba69-832d3d95402d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/b94accf0-8067-4a9a-ba69-832d3d95402d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:70:b9:45:f3:20:d0:94:b1:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b94accf0-8067-4a9a-ba69-832d3d95402d
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=73fa7e20-2fa9-476a-a94c-fdd7556efdf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:77:67:9b:9c:b6:6f:ff:19:8d:68:2c:9d:16:
                    8c:27:c6:9b:87:23:f1:e4:29:70:c6:b8:32:4d:1b:
                    d4:99:5a:68:ef:b3:44:ed:7d:e4:b7:74:5a:fb:80:
                    eb:aa:17:c3:58:ec:68:4d:3e:0b:b3:fd:45:3c:cd:
                    1d:1a:7e:c0:df:27:fd:1b:77:78:24:f7:94:21:3a:
                    32:fb:d0:e0:35:09:e8:a9:13:3e:3b:17:89:8f:aa:
                    6b:e6:b3:60:a8:9f:09:ff:2a:5e:40:99:20:03:8e:
                    d7:2a:3d:47:70:64:a6:b0:b6:82:ab:e4:50:67:d8:
                    a7:ea:15:90:fa:4b:2e:65:5f:c9:5e:ab:82:73:0d:
                    45:ef:e0:cc:87:f2:44:0c:b6:0b:bf:a5:d4:fd:20:
                    eb:f5:cc:5f:82:c9:6e:b4:91:42:e1:63:37:49:a1:
                    51:5c:d2:71:0c:43:4b:0b:30:df:79:47:da:bd:c1:
                    0d:e5:6e:59:cd:f0:a8:ab:bd:42:98:5f:9f:64:8a:
                    bf:9a:b2:a2:f1:51:4b:19:73:15:fb:42:ab:da:33:
                    82:5d:8d:5a:67:52:7e:22:e0:d6:6a:bb:85:dc:08:
                    f4:62:5c:7a:f2:08:d8:e9:a7:41:a8:fa:7c:5f:f5:
                    86:dc:81:3d:ce:2f:f3:6f:db:49:05:d3:6a:c4:c4:
                    ad:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:39:D1:07:AF:FB:6E:8C:F8:4B:CB:FA:9E:7C:B4:F6:AF:1F:58:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/5e7201fa-0fc9-3bfb-b150-cb3db51ac63f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/b94accf0-8067-4a9a-ba69-832d3d95402d.crl

            X509v3 Authority Key Identifier:
                keyid:AE:8E:16:C6:CD:47:F7:01:8F:62:8D:0C:33:24:C4:A9:A4:5E:6E:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.62.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:2a:76:d7:a5:17:f4:9a:31:6f:4e:c7:90:29:37:f5:6b:36:
         06:37:14:99:9f:36:a4:11:8a:96:8a:bd:58:14:07:68:e6:06:
         44:bb:29:fa:77:30:6d:f3:cf:81:50:73:8c:a0:0a:02:ba:1e:
         2d:05:ce:e3:f5:b4:e6:95:19:54:73:90:be:2d:28:39:f8:e8:
         dc:2a:aa:e2:81:bc:ae:f5:64:03:ba:7a:83:cc:fc:c6:4a:75:
         77:81:10:41:ae:2d:e6:a3:a1:e4:c9:aa:da:3d:9b:c2:97:c3:
         75:bf:06:20:5d:ee:df:1e:2e:79:ff:2b:39:3c:88:0b:a8:43:
         80:1b:cf:3e:3e:5c:0e:10:a7:78:83:75:9e:ec:f9:12:20:22:
         74:85:0c:0f:ae:bf:59:7d:01:7d:ba:7e:93:17:a4:d4:99:61:
         77:eb:73:ca:07:e8:ac:dc:bb:5f:fc:4a:99:43:53:25:0e:58:
         25:ec:bb:ca:6f:21:02:45:28:27:0b:74:ef:1b:be:f8:3e:0a:
         83:a4:22:48:86:ca:b8:26:f7:8c:1b:a7:2d:37:57:68:55:c7:
         19:5d:e8:6e:1a:9e:a4:1b:87:c8:be:a9:31:d2:db:60:11:19:
         07:bf:50:e0:da:70:34:b0:08:25:ef:81:51:18:44:8d:e3:27:
         64:36:20:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5kD3C5RfMg0JSxRYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk0YWNjZjAtODA2Ny00YTlhLWJhNjktODMyZDNkOTU0
MDJkMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk
NzNmYTdlMjAtMmZhOS00NzZhLWE5NGMtZmRkNzU1NmVmZGY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHdnm5y2b/8ZjWgsnRaMJ8abhyPx5Clwxrgy
TRvUmVpo77NE7X3kt3Ra+4DrqhfDWOxoTT4Ls/1FPM0dGn7A3yf9G3d4JPeUIToy
+9DgNQnoqRM+OxeJj6pr5rNgqJ8J/ypeQJkgA47XKj1HcGSmsLaCq+RQZ9in6hWQ
+ksuZV/JXquCcw1F7+DMh/JEDLYLv6XU/SDr9cxfgslutJFC4WM3SaFRXNJxDENL
CzDfeUfavcEN5W5ZzfCoq71CmF+fZIq/mrKi8VFLGXMV+0Kr2jOCXY1aZ1J+IuDW
aruF3Aj0Ylx68gjY6adBqPp8X/WG3IE9zi/zb9tJBdNqxMStmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOk50Qev+26M+EvL+p58tPavH1hCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iOTRh
Y2NmMC04MDY3LTRhOWEtYmE2OS04MzJkM2Q5NTQwMmQvNWU3MjAxZmEtMGZjOS0z
YmZiLWIxNTAtY2IzZGI1MWFjNjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjk0YWNjZjAtODA2Ny00YTlhLWJh
NjktODMyZDNkOTU0MDJkL2I5NGFjY2YwLTgwNjctNGE5YS1iYTY5LTgzMmQzZDk1
NDAyZC5jcmwwHwYDVR0jBBgwFoAUro4Wxs1H9wGPYo0MMyTEqaRebi4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iOTRhY2NmMC04MDY3LTRhOWEtYmE2OS04MzJk
M2Q5NTQwMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqj4lMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEoqdtelF/SaMW9Ox5ApN/VrNgY3FJmfNqQRipaKvVgUB2jmBkS7Kfp3
MG3zz4FQc4ygCgK6Hi0FzuP1tOaVGVRzkL4tKDn46NwqquKBvK71ZAO6eoPM/MZK
dXeBEEGuLeajoeTJqto9m8KXw3W/BiBd7t8eLnn/Kzk8iAuoQ4Abzz4+XA4Qp3iD
dZ7s+RIgInSFDA+uv1l9AX26fpMXpNSZYXfrc8oH6Kzcu1/8SplDUyUOWCXsu8pv
IQJFKCcLdO8bvvg+CoOkIkiGyrgm94wbpy03V2hVxxld6G4anqQbh8i+qTHS22AR
GQe/UODacDSwCCXvgVEYRI3jJ2Q2IMs=
-----END CERTIFICATE-----
Generated at Tue Jul 21 04:53:25 2026 by rpki-client