Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/47507502-c95c-347c-81f8-1b701f3a96c9.roa
File:                     47507502-c95c-347c-81f8-1b701f3a96c9.roa (raw, json)
Hash identifier:          O+FSquDi9q8NuZHVNOAL9kjF00CqY9YyNH+KkxbyRt0=
Subject key identifier:   D4:61:30:97:0B:99:FD:DD:67:9B:0F:57:E9:30:BF:88:CC:AD:91:95
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640FC939DDF45E88FBE0BCC0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/47507502-c95c-347c-81f8-1b701f3a96c9.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     397168
IP address blocks:        206.47.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:c9:39:dd:f4:5e:88:fb:e0:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=9562f08a-42ae-4507-824e-8e24a7e5d284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:23:77:25:bd:58:27:4c:5b:31:86:ee:79:c2:
                    93:ea:90:fd:67:77:98:bb:b5:56:81:df:37:70:b0:
                    d3:3a:c5:d2:c1:84:e7:e4:12:f4:a6:ff:78:78:23:
                    82:1e:f6:05:52:16:5b:60:62:2f:3f:d0:88:8b:fd:
                    fd:15:b2:02:f1:12:6a:56:1a:e9:8a:bc:b1:df:1a:
                    7e:95:14:92:40:12:24:d7:1b:45:90:fe:3b:b2:1d:
                    60:23:e2:5c:69:80:f6:53:b4:57:e8:4b:71:a1:0b:
                    7a:21:57:59:a0:72:7b:70:3f:76:65:1c:07:f2:a9:
                    fd:4e:7e:43:32:ca:91:a5:a6:74:0e:42:90:cc:aa:
                    53:19:ff:cd:22:77:56:34:de:26:1b:cf:44:fb:e3:
                    17:16:e3:08:4f:86:d5:8d:fd:7f:e1:31:38:73:99:
                    0e:7d:63:6f:ca:97:5e:f0:63:43:ed:bd:b6:17:a7:
                    a2:3a:7d:11:84:ca:6d:ec:72:38:35:bc:e4:a2:41:
                    c4:b5:87:75:61:db:55:63:a2:d4:6e:50:33:a9:07:
                    51:40:45:45:b2:7a:1d:39:0f:a6:39:d4:25:6e:24:
                    be:a5:d3:51:da:ad:2b:90:cf:f1:93:fe:7a:1e:f7:
                    f4:2b:b5:6a:dc:90:78:ef:40:2c:e4:27:10:87:db:
                    16:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:61:30:97:0B:99:FD:DD:67:9B:0F:57:E9:30:BF:88:CC:AD:91:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/47507502-c95c-347c-81f8-1b701f3a96c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.47.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:3a:51:a4:c5:dd:49:f3:86:c3:ba:9e:87:e1:40:a3:4f:86:
         61:4e:f0:05:59:40:5e:13:fa:5f:a5:c0:b3:27:ab:8c:ae:12:
         4a:72:49:c3:6e:a9:67:5c:6a:3e:23:37:7f:ac:15:a9:18:1e:
         be:b0:e0:8c:2d:2e:9c:f2:b0:a1:b7:be:01:5f:4e:f0:0f:af:
         c6:2d:7d:fc:77:67:98:b3:9f:05:77:86:e3:b3:a7:23:9e:40:
         34:66:5c:b6:ed:ad:98:77:28:70:93:a4:68:cf:22:95:04:3f:
         36:fa:66:d6:9f:7d:8d:a1:23:74:bf:f3:d0:88:fc:44:f9:97:
         ad:d4:6f:83:5f:5e:87:14:68:fd:e3:b7:aa:98:60:b4:96:01:
         b4:e8:7c:5f:a9:f1:47:cb:29:d0:dc:e7:0f:1a:e4:25:00:7f:
         00:30:5a:53:ad:f3:90:e2:22:d2:b4:6e:56:6b:e4:3f:44:82:
         0a:48:88:e9:b2:2d:d2:00:cc:85:8a:97:2f:ff:ef:f8:f6:ea:
         8a:b1:1c:f0:04:ce:92:64:82:01:b0:79:d6:e4:87:73:fd:d9:
         7a:5e:d8:ff:c9:75:af:c8:8b:6d:8c:b1:c9:06:4b:c8:8e:40:
         ac:08:41:a4:fd:ce:cd:a4:85:3c:0b:ef:f2:ff:e8:be:65:60:
         ea:3c:be:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5kD8k53fReiPvgvMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk
OTU2MmYwOGEtNDJhZS00NTA3LTgyNGUtOGUyNGE3ZTVkMjg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyN3Jb1YJ0xbMYbuecKT6pD9Z3eYu7VWgd83
cLDTOsXSwYTn5BL0pv94eCOCHvYFUhZbYGIvP9CIi/39FbIC8RJqVhrpiryx3xp+
lRSSQBIk1xtFkP47sh1gI+JcaYD2U7RX6EtxoQt6IVdZoHJ7cD92ZRwH8qn9Tn5D
MsqRpaZ0DkKQzKpTGf/NIndWNN4mG89E++MXFuMIT4bVjf1/4TE4c5kOfWNvypde
8GND7b22F6eiOn0RhMpt7HI4NbzkokHEtYd1YdtVY6LUblAzqQdRQEVFsnodOQ+m
OdQlbiS+pdNR2q0rkM/xk/56Hvf0K7Vq3JB470As5CcQh9sWJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNRhMJcLmf3dZ5sPV+kwv4jMrZGVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNDc1MDc1MDItYzk1Yy0z
NDdjLTgxZjgtMWI3MDFmM2E5NmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzi8dMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIc6UaTF3UnzhsO6nofhQKNPhmFO8AVZQF4T+l+lwLMnq4yuEkpyScNu
qWdcaj4jN3+sFakYHr6w4IwtLpzysKG3vgFfTvAPr8Ytffx3Z5iznwV3huOzpyOe
QDRmXLbtrZh3KHCTpGjPIpUEPzb6ZtaffY2hI3S/89CI/ET5l63Ub4NfXocUaP3j
t6qYYLSWAbTofF+p8UfLKdDc5w8a5CUAfwAwWlOt85DiItK0blZr5D9EggpIiOmy
LdIAzIWKly//7/j26oqxHPAEzpJkggGwedbkh3P92Xpe2P/Jda/Ii22MsckGS8iO
QKwIQaT9zs2khTwL7/L/6L5lYOo8vps=
-----END CERTIFICATE-----
Generated at Fri Jul 17 09:58:13 2026 by rpki-client