Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/aab78b11-6bc5-30dc-bb88-ea89a8630abe.roa
File:                     aab78b11-6bc5-30dc-bb88-ea89a8630abe.roa (raw, json)
Hash identifier:          FbbvYzf62JhEDV/bx8OjbmbNy71uLJlxMGSXcQBro1U=
Subject key identifier:   38:34:AB:C5:01:EC:A0:F6:F7:50:15:E5:7A:97:BA:C6:CB:A9:1B:D9
Certificate issuer:       /CN=7019d1c7-b32a-4a65-a135-234cde3c7680
Certificate serial:       010D0C9F4328584EE227454C8FF099352A2C7060
Authority key identifier: 22:0D:F1:6D:99:E3:03:0F:29:82:88:A7:43:95:89:6B:00:CC:4D:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/aab78b11-6bc5-30dc-bb88-ea89a8630abe.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     8075
IP address blocks:        104.193.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/7019d1c7-b32a-4a65-a135-234cde3c7680.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/7019d1c7-b32a-4a65-a135-234cde3c7680.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:45:4c:8f:f0:99:35:2a:2c:70:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7019d1c7-b32a-4a65-a135-234cde3c7680
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=02a7f02d-0036-4cf6-a93f-b1b8f30bd857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bf:25:28:21:c2:7d:58:b0:90:24:d2:31:e6:
                    27:7b:c6:70:38:5c:4b:06:0f:91:b3:99:09:de:94:
                    5e:70:b3:65:ef:2d:c9:e8:93:99:53:61:7b:84:0d:
                    6c:a3:19:6a:a0:d4:f6:9e:33:f2:e1:5b:81:ff:25:
                    12:d3:f2:02:86:49:19:1f:26:29:b8:60:fe:59:83:
                    ff:9b:8d:16:17:79:3e:6b:24:cf:5e:1e:21:81:38:
                    82:bd:c9:12:9a:e8:45:db:0f:6b:af:fa:74:17:16:
                    07:6d:88:1c:0c:89:db:2b:94:be:e1:11:d8:42:3d:
                    27:7e:45:db:11:86:7d:fb:dc:4b:20:77:2a:c1:10:
                    63:61:14:70:ff:45:16:7c:69:b3:db:cf:72:64:50:
                    8e:4c:26:a0:cd:54:88:09:16:47:6c:6f:6b:37:37:
                    50:aa:09:fe:6c:92:a1:4f:88:29:33:0e:23:ce:9b:
                    e8:c9:d6:6c:fe:6e:e0:22:b3:c0:b8:b1:93:bb:8f:
                    25:c4:fc:a7:06:09:9a:53:cb:ff:a7:0a:f8:95:c9:
                    3c:a0:80:40:24:9d:a5:2c:89:55:71:cb:e1:2a:e4:
                    90:66:6e:d8:11:cf:9c:03:09:a9:b9:ee:71:4b:84:
                    87:42:75:6d:9e:e4:a5:c0:f5:01:02:b1:03:6c:2b:
                    37:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:34:AB:C5:01:EC:A0:F6:F7:50:15:E5:7A:97:BA:C6:CB:A9:1B:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/aab78b11-6bc5-30dc-bb88-ea89a8630abe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680/7019d1c7-b32a-4a65-a135-234cde3c7680.crl

            X509v3 Authority Key Identifier:
                keyid:22:0D:F1:6D:99:E3:03:0F:29:82:88:A7:43:95:89:6B:00:CC:4D:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7019d1c7-b32a-4a65-a135-234cde3c7680.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:9c:26:0e:cb:fc:98:c6:ee:5c:c2:5a:45:03:9a:52:2a:14:
         d9:ff:f8:c4:e9:ba:ef:dd:4d:64:71:cf:20:3b:23:df:46:b6:
         a6:bb:a3:b7:83:bd:23:07:b9:ae:26:98:fb:8b:90:f0:e9:a0:
         01:ba:3f:12:ee:ed:51:cf:c4:97:0c:f4:56:8e:66:0c:5f:63:
         a6:21:8a:d5:f1:ed:0a:94:b5:46:0e:da:eb:a6:62:4e:41:77:
         1d:9d:7c:f6:db:84:c0:cc:3f:2a:a9:4a:2a:4b:ef:c7:67:85:
         e9:e4:b5:04:f6:8d:40:ad:55:03:37:5a:9b:be:9f:ff:72:0e:
         8c:1d:f9:5e:6f:32:d7:64:31:e9:90:5a:13:10:f8:6f:a9:4f:
         b2:d2:84:0b:6e:8d:5f:b3:f2:0f:26:f7:d6:69:2e:87:a6:8a:
         ff:79:50:b0:7f:c3:2c:42:59:eb:30:65:5b:d6:c4:14:c5:a7:
         d9:d7:a3:d3:ed:4c:88:ba:9c:f5:48:46:73:bd:ef:0f:74:c6:
         15:c7:b6:88:6a:9d:3f:27:15:cc:be:d1:bb:cc:3b:3f:35:8e:
         14:94:c3:a7:2f:77:b2:ea:05:75:d5:f4:1a:5c:e8:dc:9f:af:
         4c:ce:30:45:b7:f1:2e:d6:5d:c3:d8:f7:d6:e9:69:a1:71:74:
         0b:fd:69:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7iJ0VMj/CZNSoscGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzAxOWQxYzctYjMyYS00YTY1LWExMzUtMjM0Y2RlM2M3
NjgwMB4XDTI2MDgxOTAxMDAxMloXDTI2MTExNzAyMDAxMlowLzEtMCsGA1UEAxMk
MDJhN2YwMmQtMDAzNi00Y2Y2LWE5M2YtYjFiOGYzMGJkODU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgr8lKCHCfViwkCTSMeYne8ZwOFxLBg+Rs5kJ
3pRecLNl7y3J6JOZU2F7hA1soxlqoNT2njPy4VuB/yUS0/IChkkZHyYpuGD+WYP/
m40WF3k+ayTPXh4hgTiCvckSmuhF2w9rr/p0FxYHbYgcDInbK5S+4RHYQj0nfkXb
EYZ9+9xLIHcqwRBjYRRw/0UWfGmz289yZFCOTCagzVSICRZHbG9rNzdQqgn+bJKh
T4gpMw4jzpvoydZs/m7gIrPAuLGTu48lxPynBgmaU8v/pwr4lck8oIBAJJ2lLIlV
ccvhKuSQZm7YEc+cAwmpue5xS4SHQnVtnuSlwPUBArEDbCs33QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDg0q8UB7KD291AV5XqXusbLqRvZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83MDE5
ZDFjNy1iMzJhLTRhNjUtYTEzNS0yMzRjZGUzYzc2ODAvYWFiNzhiMTEtNmJjNS0z
MGRjLWJiODgtZWE4OWE4NjMwYWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzAxOWQxYzctYjMyYS00YTY1LWEx
MzUtMjM0Y2RlM2M3NjgwLzcwMTlkMWM3LWIzMmEtNGE2NS1hMTM1LTIzNGNkZTNj
NzY4MC5jcmwwHwYDVR0jBBgwFoAUIg3xbZnjAw8pgoinQ5WJawDMTZMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83MDE5ZDFjNy1iMzJhLTRhNjUtYTEzNS0yMzRj
ZGUzYzc2ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMEMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAECcJg7L/JjG7lzCWkUDmlIqFNn/+MTpuu/dTWRxzyA7I99Gtqa7o7eD
vSMHua4mmPuLkPDpoAG6PxLu7VHPxJcM9FaOZgxfY6YhitXx7QqUtUYO2uumYk5B
dx2dfPbbhMDMPyqpSipL78dnhenktQT2jUCtVQM3Wpu+n/9yDowd+V5vMtdkMemQ
WhMQ+G+pT7LShAtujV+z8g8m99ZpLoemiv95ULB/wyxCWeswZVvWxBTFp9nXo9Pt
TIi6nPVIRnO97w90xhXHtohqnT8nFcy+0bvMOz81jhSUw6cvd7LqBXXV9Bpc6Nyf
r0zOMEW38S7WXcPY99bpaaFxdAv9adI=
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:15:35 2026 by rpki-client