Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e7af233e-fa26-3293-bcf8-b64f71a0e384.roa
File:                     e7af233e-fa26-3293-bcf8-b64f71a0e384.roa (raw, json)
Hash identifier:          iJJz6RzBgjeA4uGmfXlt+GruGi5DBSYrJjE2O4m6Ic8=
Subject key identifier:   83:87:67:C4:F6:D9:C5:F4:2F:82:BB:1D:F7:C1:77:8F:38:3B:76:ED
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640F5799CF89F58B673AD080
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e7af233e-fa26-3293-bcf8-b64f71a0e384.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     33017
IP address blocks:        207.61.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:57:99:cf:89:f5:8b:67:3a:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=26858bfc-0fc8-497f-8777-9ac923fd8b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ab:62:64:c7:b4:a0:a1:ee:8b:42:dd:5f:26:
                    6e:ee:fe:f4:11:fb:78:96:c4:7c:3e:63:c9:91:e9:
                    d3:12:e5:18:11:da:0e:a7:a1:bb:43:92:9d:91:01:
                    81:95:bc:53:c4:83:60:06:b0:3e:bf:63:c4:f9:d1:
                    5a:31:68:06:11:ee:6d:c9:49:19:85:73:dd:49:88:
                    aa:cc:ba:1b:a8:04:ed:8c:36:89:bf:f7:6d:30:a9:
                    64:7b:6d:c4:f3:bd:55:7b:39:82:c4:41:4f:71:1c:
                    1a:1f:82:e6:44:0c:e3:5a:b9:4a:b2:30:3f:eb:f5:
                    f5:20:37:69:ac:dd:bd:20:2b:9d:3e:ea:e8:1b:58:
                    f2:fe:ec:6b:c3:18:00:b0:c6:0d:84:e1:fd:ac:a4:
                    16:d2:65:0e:65:de:b2:29:c8:8e:34:c0:e0:a4:0b:
                    ff:45:f8:20:68:5a:d2:be:6d:9b:39:34:94:63:2c:
                    bd:d1:fe:ca:3e:bf:cb:63:2d:c7:99:4d:42:f6:f7:
                    c9:47:bd:72:6b:0e:5b:1c:b8:6c:f1:ae:d2:f4:a3:
                    5a:0b:68:7c:e0:8d:e0:f6:47:69:9a:22:aa:e3:f7:
                    fe:14:18:b7:75:0c:8f:4a:5a:67:22:be:3f:91:00:
                    04:44:ba:da:f3:17:e0:d4:b8:f7:e9:9b:dd:0b:54:
                    b3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:87:67:C4:F6:D9:C5:F4:2F:82:BB:1D:F7:C1:77:8F:38:3B:76:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/e7af233e-fa26-3293-bcf8-b64f71a0e384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.61.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:9c:a1:c0:e8:3c:61:cf:2a:3e:ea:ff:b7:8b:63:83:a5:7f:
         8a:59:34:35:86:7b:0b:81:49:8f:37:1b:2c:3c:bf:09:d5:48:
         0a:97:5c:0d:bc:17:cc:04:bb:cf:fd:9c:c2:df:91:fb:38:29:
         ce:16:8f:f1:36:4a:1b:ff:e1:38:0e:c5:2b:65:22:8c:99:50:
         62:df:04:23:41:1b:55:e7:10:c8:55:b8:42:ea:6e:45:d5:e5:
         a4:45:15:b0:1f:c9:d9:20:0c:9d:82:6d:20:0c:c0:b6:5e:ba:
         2a:12:c1:c8:cf:a7:eb:3f:4a:ef:52:68:ce:3c:97:5d:0f:74:
         f3:51:b3:ce:3b:af:ad:c5:58:44:e9:de:78:25:be:c8:d4:71:
         7c:b2:0f:f9:c5:ba:7f:a7:9a:ff:42:23:68:70:01:d7:66:6d:
         b1:fe:2e:57:e8:0f:57:18:28:fa:b4:18:7e:65:7a:8d:3c:a9:
         00:21:6b:6c:07:75:2d:31:28:90:b4:3f:dd:ad:97:7f:32:34:
         be:b1:ac:c3:d8:3b:77:02:be:65:92:0b:76:b7:94:24:63:24:
         ac:08:bc:65:6e:2a:17:05:66:08:13:83:0e:87:ca:b5:ad:df:
         a8:5a:89:af:30:1d:62:fb:97:14:8d:e0:01:ff:58:fa:13:26:
         65:49:d6:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5kD1eZz4n1i2c60IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk
MjY4NThiZmMtMGZjOC00OTdmLTg3NzctOWFjOTIzZmQ4YjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqtiZMe0oKHui0LdXyZu7v70Eft4lsR8PmPJ
kenTEuUYEdoOp6G7Q5KdkQGBlbxTxINgBrA+v2PE+dFaMWgGEe5tyUkZhXPdSYiq
zLobqATtjDaJv/dtMKlke23E871VezmCxEFPcRwaH4LmRAzjWrlKsjA/6/X1IDdp
rN29ICudPuroG1jy/uxrwxgAsMYNhOH9rKQW0mUOZd6yKciONMDgpAv/RfggaFrS
vm2bOTSUYyy90f7KPr/LYy3HmU1C9vfJR71yaw5bHLhs8a7S9KNaC2h84I3g9kdp
miKq4/f+FBi3dQyPSlpnIr4/kQAERLra8xfg1Lj36ZvdC1Sz1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIOHZ8T22cX0L4K7HffBd484O3btMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZTdhZjIzM2UtZmEyNi0z
MjkzLWJjZjgtYjY0ZjcxYTBlMzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzz08MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHmcocDoPGHPKj7q/7eLY4Olf4pZNDWGewuBSY83Gyw8vwnVSAqXXA28
F8wEu8/9nMLfkfs4Kc4Wj/E2Shv/4TgOxStlIoyZUGLfBCNBG1XnEMhVuELqbkXV
5aRFFbAfydkgDJ2CbSAMwLZeuioSwcjPp+s/Su9SaM48l10PdPNRs847r63FWETp
3nglvsjUcXyyD/nFun+nmv9CI2hwAddmbbH+LlfoD1cYKPq0GH5leo08qQAha2wH
dS0xKJC0P92tl38yNL6xrMPYO3cCvmWSC3a3lCRjJKwIvGVuKhcFZggTgw6HyrWt
36haia8wHWL7lxSN4AH/WPoTJmVJ1oc=
-----END CERTIFICATE-----
Generated at Fri Jul 17 09:53:23 2026 by rpki-client