Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/190dc32b-6a63-4f2b-b868-55e3ce7d6773/7367b013-189f-3fe9-b86d-bd0c59ec8d6d.roa
File:                     7367b013-189f-3fe9-b86d-bd0c59ec8d6d.roa (raw, json)
Hash identifier:          OeISE7Jgdm7PnllbXjjuRf331Td6knmgudRhlwb4jAI=
Subject key identifier:   5E:02:89:26:E6:F3:B2:2F:8A:27:1F:00:FA:0C:12:88:4C:5F:B9:13
Certificate issuer:       /CN=190dc32b-6a63-4f2b-b868-55e3ce7d6773
Certificate serial:       010D0C9F4328584E78FF7AB85DC9ED4781FFFB00
Authority key identifier: 96:D4:93:82:02:44:E5:D2:8B:BB:2C:45:71:36:5D:53:C3:89:96:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/190dc32b-6a63-4f2b-b868-55e3ce7d6773.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/190dc32b-6a63-4f2b-b868-55e3ce7d6773/7367b013-189f-3fe9-b86d-bd0c59ec8d6d.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     8075
IP address blocks:        156.29.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/190dc32b-6a63-4f2b-b868-55e3ce7d6773/190dc32b-6a63-4f2b-b868-55e3ce7d6773.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/190dc32b-6a63-4f2b-b868-55e3ce7d6773/190dc32b-6a63-4f2b-b868-55e3ce7d6773.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/190dc32b-6a63-4f2b-b868-55e3ce7d6773.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:7a:b8:5d:c9:ed:47:81:ff:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=190dc32b-6a63-4f2b-b868-55e3ce7d6773
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=641a475e-6f90-4e31-8bb8-06fd1844bd6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:26:97:70:d1:33:0b:a1:73:4a:94:c9:bb:bb:
                    ab:33:27:80:74:4c:c3:4c:7e:93:f0:dd:96:45:6f:
                    67:34:d9:85:36:e0:6b:af:02:6a:d3:16:ba:91:9a:
                    0f:88:24:2d:6a:df:a0:71:3a:78:4f:44:95:cc:10:
                    c1:22:d3:a4:1a:b7:2a:7a:07:01:02:86:23:9f:30:
                    97:94:29:d1:b3:a0:b6:49:af:a9:cb:45:bc:4b:91:
                    d2:de:cb:a0:dd:05:47:4d:39:58:84:1b:26:f4:7e:
                    3a:d5:f7:99:92:53:1d:5c:9d:da:a2:9c:c2:04:9a:
                    89:c8:f3:8f:c5:6a:47:34:c8:49:3f:82:40:60:30:
                    3e:8e:88:e3:95:64:d7:28:77:17:3a:c8:9a:31:ea:
                    8e:03:71:8a:e1:79:84:e7:31:dd:d5:02:42:5d:f6:
                    ee:ad:6d:66:ef:ad:e1:b7:82:b4:fc:64:8e:ab:c0:
                    91:bd:af:02:37:e5:74:3c:5c:0e:75:aa:c9:ff:d6:
                    8a:54:8a:f3:19:3f:f8:c3:cd:37:f7:22:44:e3:2a:
                    2f:97:25:ba:dc:35:4a:67:e1:25:d8:31:9c:47:46:
                    ed:0e:0b:d7:a6:e2:3c:fb:a8:54:42:7e:72:37:3c:
                    ee:55:43:28:47:5e:7e:6e:ea:cf:30:68:30:67:a3:
                    20:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:02:89:26:E6:F3:B2:2F:8A:27:1F:00:FA:0C:12:88:4C:5F:B9:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/190dc32b-6a63-4f2b-b868-55e3ce7d6773/7367b013-189f-3fe9-b86d-bd0c59ec8d6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/190dc32b-6a63-4f2b-b868-55e3ce7d6773/190dc32b-6a63-4f2b-b868-55e3ce7d6773.crl

            X509v3 Authority Key Identifier:
                keyid:96:D4:93:82:02:44:E5:D2:8B:BB:2C:45:71:36:5D:53:C3:89:96:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/190dc32b-6a63-4f2b-b868-55e3ce7d6773.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.29.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:55:47:e8:8f:06:0d:2a:f8:c7:75:a4:ea:54:91:81:ca:cd:
         26:65:ae:19:a2:af:8d:b3:0b:17:d9:1a:fb:55:ea:89:70:8b:
         b0:ad:f7:e2:9e:e5:25:48:85:d6:45:06:1d:ca:00:b7:48:68:
         4e:0d:09:7c:ff:cf:9c:61:23:22:a8:f7:e4:06:75:54:61:78:
         88:ad:24:70:45:f3:29:57:0b:41:af:9b:88:0f:1e:d9:9d:2e:
         7d:c5:10:e3:cd:1a:79:43:86:4b:d4:4d:0f:a9:2a:3e:50:72:
         fd:7b:d2:7b:13:41:96:4d:d8:92:f6:ce:76:72:fb:b8:51:8c:
         91:43:37:21:0d:aa:5e:ed:02:28:d6:58:a0:01:e9:e9:f2:31:
         f1:8a:3a:47:78:0c:52:88:2e:72:1f:49:ef:35:a0:c4:b9:27:
         de:e8:88:95:a9:00:ea:2d:7c:56:4a:fa:46:ea:e1:4a:5a:51:
         41:b5:78:ea:c6:55:7b:43:a3:b2:1a:eb:1b:55:2a:29:1e:a7:
         32:62:bb:6b:22:7a:52:ee:47:4b:55:2a:93:a1:b5:7a:15:29:
         73:6b:bf:8d:81:47:28:46:d1:77:93:d4:75:fd:5b:87:82:46:
         d4:dc:51:03:11:b8:fe:fb:00:2c:df:54:93:53:29:b7:d6:97:
         e4:12:83:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/3q4XcntR4H/+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTkwZGMzMmItNmE2My00ZjJiLWI4NjgtNTVlM2NlN2Q2
NzczMB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk
NjQxYTQ3NWUtNmY5MC00ZTMxLThiYjgtMDZmZDE4NDRiZDZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iaXcNEzC6FzSpTJu7urMyeAdEzDTH6T8N2W
RW9nNNmFNuBrrwJq0xa6kZoPiCQtat+gcTp4T0SVzBDBItOkGrcqegcBAoYjnzCX
lCnRs6C2Sa+py0W8S5HS3sug3QVHTTlYhBsm9H461feZklMdXJ3aopzCBJqJyPOP
xWpHNMhJP4JAYDA+jojjlWTXKHcXOsiaMeqOA3GK4XmE5zHd1QJCXfburW1m763h
t4K0/GSOq8CRva8CN+V0PFwOdarJ/9aKVIrzGT/4w8039yJE4yovlyW63DVKZ+El
2DGcR0btDgvXpuI8+6hUQn5yNzzuVUMoR15+burPMGgwZ6Mg9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF4CiSbm87IviicfAPoMEohMX7kTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8xOTBk
YzMyYi02YTYzLTRmMmItYjg2OC01NWUzY2U3ZDY3NzMvNzM2N2IwMTMtMTg5Zi0z
ZmU5LWI4NmQtYmQwYzU5ZWM4ZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMTkwZGMzMmItNmE2My00ZjJiLWI4
NjgtNTVlM2NlN2Q2NzczLzE5MGRjMzJiLTZhNjMtNGYyYi1iODY4LTU1ZTNjZTdk
Njc3My5jcmwwHwYDVR0jBBgwFoAUltSTggJE5dKLuyxFcTZdU8OJlsgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8xOTBkYzMyYi02YTYzLTRmMmItYjg2OC01NWUz
Y2U3ZDY3NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnB0QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAlVR+iPBg0q+Md1pOpUkYHKzSZlrhmir42zCxfZGvtV6olwi7Ct9+Ke
5SVIhdZFBh3KALdIaE4NCXz/z5xhIyKo9+QGdVRheIitJHBF8ylXC0Gvm4gPHtmd
Ln3FEOPNGnlDhkvUTQ+pKj5Qcv170nsTQZZN2JL2znZy+7hRjJFDNyENql7tAijW
WKAB6enyMfGKOkd4DFKILnIfSe81oMS5J97oiJWpAOotfFZK+kbq4UpaUUG1eOrG
VXtDo7Ia6xtVKikepzJiu2sielLuR0tVKpOhtXoVKXNrv42BRyhG0XeT1HX9W4eC
RtTcUQMRuP77ACzfVJNTKbfWl+QSgyA=
-----END CERTIFICATE-----
Generated at Tue Jul 21 04:54:05 2026 by rpki-client