Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/b8089062-6103-343a-b379-ab3675be6b7f.roa
File:                     b8089062-6103-343a-b379-ab3675be6b7f.roa (raw, json)
Hash identifier:          29xApGce3JKLDGLrow+CdkqVEq1/dgVq0T40DDF8EFo=
Subject key identifier:   EB:87:1C:D7:E5:07:62:69:15:CE:95:2C:DC:BD:09:D8:5A:84:F8:0B
Certificate issuer:       /CN=00fb6efe-dbc1-45a8-b266-ca72f7e079c2
Certificate serial:       010D0C9F4328584E2F045FF1630E658AC80ADC80
Authority key identifier: D7:85:1F:AA:F6:15:70:21:20:57:58:8B:1C:D1:C3:BE:BA:D2:F4:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/b8089062-6103-343a-b379-ab3675be6b7f.roa
Signing time:             Mon 15 Jun 2026 21:00:12 +0000
ROA not before:           Mon 15 Jun 2026 21:00:12 +0000
ROA not after:            Sun 13 Sep 2026 21:00:12 +0000
asID:                     8075
IP address blocks:        98.142.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2f:04:5f:f1:63:0e:65:8a:c8:0a:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00fb6efe-dbc1-45a8-b266-ca72f7e079c2
        Validity
            Not Before: Jun 15 21:00:12 2026 GMT
            Not After : Sep 13 21:00:12 2026 GMT
        Subject: CN=9b3cba08-8673-419e-aa3a-c815aa58a810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a6:d6:55:72:24:47:2a:5c:ae:ec:39:10:79:
                    e2:37:f8:8c:33:e2:f3:a1:ef:07:c4:5f:7d:22:ed:
                    2c:3a:35:97:71:46:63:6b:cc:f3:e5:54:37:44:67:
                    21:a1:8d:87:c3:56:95:f9:e9:1e:02:36:ef:be:3e:
                    76:db:76:4c:7e:29:e8:24:b3:ee:fd:87:26:72:d5:
                    39:68:60:2d:a5:a1:8c:d2:c2:82:2f:56:f6:3e:35:
                    2c:38:29:58:65:83:17:ee:97:b0:72:44:4c:f5:5b:
                    24:78:7e:9c:fc:56:ea:48:9f:e0:b9:36:15:dc:54:
                    be:d2:37:d6:76:dd:c8:a8:7e:6f:c9:55:1a:8f:bf:
                    cd:a6:78:5a:5b:8c:66:6a:67:eb:ca:78:a3:89:03:
                    9f:0b:bf:c3:0e:2a:eb:45:23:51:93:81:3a:8f:81:
                    2b:e8:b1:51:3f:1d:78:6d:a7:eb:c9:26:93:5d:41:
                    92:2c:66:9f:99:d2:e2:d1:49:7f:9b:35:88:22:ae:
                    9e:19:ec:12:3c:50:93:64:08:05:54:2e:86:9f:9d:
                    e8:6b:12:21:62:35:73:9f:b1:af:ea:2f:7e:f4:b8:
                    99:26:1b:e7:6d:16:05:d7:eb:1b:b8:fb:25:5d:72:
                    53:ec:48:f5:3a:c1:f3:b2:8d:79:e7:ad:1e:eb:d9:
                    59:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:87:1C:D7:E5:07:62:69:15:CE:95:2C:DC:BD:09:D8:5A:84:F8:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/b8089062-6103-343a-b379-ab3675be6b7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.crl

            X509v3 Authority Key Identifier:
                keyid:D7:85:1F:AA:F6:15:70:21:20:57:58:8B:1C:D1:C3:BE:BA:D2:F4:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:f5:18:fb:16:8e:4d:fa:37:f9:af:26:52:a5:d4:60:14:10:
         66:53:e0:f7:0c:67:e5:ca:f8:7d:b7:0f:02:7c:8d:20:69:94:
         45:99:8f:e4:3f:79:3e:2b:26:3b:0f:30:7c:93:7d:00:80:be:
         e8:54:e0:d9:c7:0b:f1:dd:c1:bc:ff:45:56:7a:32:01:bc:29:
         c7:e5:b6:e7:6b:72:61:da:08:f8:f4:37:ee:3a:b9:fb:d0:cb:
         e0:0f:37:b6:30:33:7b:0f:48:e3:50:5a:24:d8:42:34:ef:38:
         45:27:6d:0e:d9:74:af:25:bc:39:16:cc:c0:e7:47:ee:8a:cc:
         82:32:01:3f:96:4e:c7:a6:e2:b3:df:22:10:44:10:9c:73:9e:
         65:55:b2:92:f1:47:18:ae:5c:b9:46:91:1e:9a:81:00:dd:7b:
         47:56:41:86:0c:d0:38:91:6f:47:06:2d:92:25:6b:b3:82:44:
         78:62:fc:28:2b:56:08:1e:94:34:24:2a:e5:b9:09:2a:0c:fe:
         c9:13:73:4a:48:ee:2f:b1:3c:ea:ee:9e:31:29:b7:11:fa:0a:
         7a:8a:80:f0:1d:83:63:d9:c1:30:a7:6f:f0:ad:6d:8d:ab:4b:
         ec:0c:08:81:c2:0d:66:62:14:6e:bf:e0:82:44:98:5a:33:1e:
         65:27:21:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4vBF/xYw5lisgK3IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDBmYjZlZmUtZGJjMS00NWE4LWIyNjYtY2E3MmY3ZTA3
OWMyMB4XDTI2MDYxNTIxMDAxMloXDTI2MDkxMzIxMDAxMlowLzEtMCsGA1UEAxMk
OWIzY2JhMDgtODY3My00MTllLWFhM2EtYzgxNWFhNThhODEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6bWVXIkRypcruw5EHniN/iMM+Lzoe8HxF99
Iu0sOjWXcUZja8zz5VQ3RGchoY2Hw1aV+ekeAjbvvj5223ZMfinoJLPu/YcmctU5
aGAtpaGM0sKCL1b2PjUsOClYZYMX7pewckRM9VskeH6c/FbqSJ/guTYV3FS+0jfW
dt3IqH5vyVUaj7/NpnhaW4xmamfrynijiQOfC7/DDirrRSNRk4E6j4Er6LFRPx14
bafrySaTXUGSLGafmdLi0Ul/mzWIIq6eGewSPFCTZAgFVC6Gn53oaxIhYjVzn7Gv
6i9+9LiZJhvnbRYF1+sbuPslXXJT7Ej1OsHzso15560e69lZawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOuHHNflB2JpFc6VLNy9CdhahPgLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMGZi
NmVmZS1kYmMxLTQ1YTgtYjI2Ni1jYTcyZjdlMDc5YzIvYjgwODkwNjItNjEwMy0z
NDNhLWIzNzktYWIzNjc1YmU2YjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDBmYjZlZmUtZGJjMS00NWE4LWIy
NjYtY2E3MmY3ZTA3OWMyLzAwZmI2ZWZlLWRiYzEtNDVhOC1iMjY2LWNhNzJmN2Uw
NzljMi5jcmwwHwYDVR0jBBgwFoAU14UfqvYVcCEgV1iLHNHDvrrS9HcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wMGZiNmVmZS1kYmMxLTQ1YTgtYjI2Ni1jYTcy
ZjdlMDc5YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYo56MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALP1GPsWjk36N/mvJlKl1GAUEGZT4PcMZ+XK+H23DwJ8jSBplEWZj+Q/
eT4rJjsPMHyTfQCAvuhU4NnHC/Hdwbz/RVZ6MgG8KcfltudrcmHaCPj0N+46ufvQ
y+APN7YwM3sPSONQWiTYQjTvOEUnbQ7ZdK8lvDkWzMDnR+6KzIIyAT+WTsem4rPf
IhBEEJxznmVVspLxRxiuXLlGkR6agQDde0dWQYYM0DiRb0cGLZIla7OCRHhi/Cgr
VggelDQkKuW5CSoM/skTc0pI7i+xPOrunjEptxH6CnqKgPAdg2PZwTCnb/CtbY2r
S+wMCIHCDWZiFG6/4IJEmFozHmUnIaM=
-----END CERTIFICATE-----
Generated at Tue Jul 21 04:54:13 2026 by rpki-client