Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/617ccb52-509b-3202-925b-62a7e44758f2.roa
File:                     617ccb52-509b-3202-925b-62a7e44758f2.roa (raw, json)
Hash identifier:          4xQEc7a0ABuw4WRxPd2TG5OctG8cJisn3ExTKJKjHuo=
Subject key identifier:   5F:76:54:FA:14:A7:AE:FD:87:7D:78:E3:40:55:C8:FC:AA:02:E0:39
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EB2B200584D068F769326F500
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/617ccb52-509b-3202-925b-62a7e44758f2.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     30036
IP address blocks:        108.161.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b2:00:58:4d:06:8f:76:93:26:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=aa68da50-69d8-4689-9171-25dd83a2fdd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9b:be:95:a3:f9:e1:e7:03:31:d0:e6:e6:96:
                    14:59:98:11:a2:35:01:52:f8:19:52:a7:73:c6:19:
                    8a:01:0c:49:b7:30:66:63:0e:0d:a1:c9:d1:cb:7b:
                    81:08:7d:86:dc:e7:ba:17:d3:0f:83:79:70:6c:94:
                    9c:89:12:9e:08:45:98:d7:35:f6:89:b0:d3:ff:26:
                    58:8a:81:3d:48:ee:c3:56:79:d3:d7:50:eb:5f:fe:
                    07:cd:5b:11:12:53:00:c3:21:99:a0:d6:e5:5a:27:
                    c4:6f:13:8b:cf:dd:34:03:72:8c:2d:a2:cc:39:ce:
                    a3:e1:0a:6a:cb:f9:f8:9e:00:ca:ff:74:65:ee:b1:
                    e1:53:03:b9:67:48:17:c3:a4:b6:03:d7:3e:a9:b7:
                    fe:b2:2c:27:dc:d6:26:d7:13:93:ba:9b:19:1b:db:
                    3c:8c:08:ac:94:f4:e5:14:80:36:7c:4b:d8:71:a3:
                    3f:85:2c:a0:98:df:fb:ac:db:8b:84:68:eb:bc:8f:
                    55:ac:aa:f2:e0:43:be:5b:d9:31:4d:5a:c9:7e:07:
                    83:b0:47:78:0c:ad:0e:61:49:6c:fb:11:c5:8c:ee:
                    db:66:29:07:1b:98:d7:bf:39:58:99:b3:02:2d:b5:
                    b6:2e:39:58:2b:1c:e6:43:d7:ea:69:7b:8f:96:88:
                    96:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:76:54:FA:14:A7:AE:FD:87:7D:78:E3:40:55:C8:FC:AA:02:E0:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/617ccb52-509b-3202-925b-62a7e44758f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.161.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:fb:37:f0:b4:34:03:c8:30:6f:33:44:32:8c:a9:62:45:50:
         cb:72:4e:46:e0:5e:ee:fc:14:55:f1:5a:e3:49:ef:12:0a:c8:
         57:a8:15:f6:58:95:34:86:f8:8d:30:65:28:25:82:9f:9f:34:
         a4:9c:42:46:20:f1:e6:89:90:38:0d:7a:87:ad:9d:16:90:a0:
         c9:30:3b:20:b5:22:26:e8:1e:f0:9b:af:e9:5a:ea:c3:81:ed:
         c3:c6:92:6b:67:67:42:33:83:76:1c:cf:b3:ad:d2:63:bc:c2:
         7e:b6:57:e8:e0:38:eb:da:ab:59:4e:ef:bc:58:33:2c:50:4f:
         1a:9d:4e:44:84:27:a6:cc:e4:f6:4c:af:c5:cf:c7:ea:30:dd:
         c1:4b:b5:e3:a3:c0:f5:80:54:4f:e4:d4:16:e7:ab:4c:93:5d:
         17:52:62:c2:5b:3a:27:74:d4:bf:b7:30:c7:bb:fc:3d:3f:aa:
         24:ab:5c:a4:3a:4f:de:16:29:af:cd:bc:ee:97:f6:84:24:84:
         41:cc:c7:b5:3e:66:19:29:f6:7f:bc:bf:aa:00:46:cd:12:48:
         5c:a2:da:e7:b8:0f:69:16:47:19:e3:16:74:81:d9:3e:9d:32:
         d4:7f:2e:87:a9:92:f8:a8:4a:60:03:41:23:9b:97:45:ec:3e:
         cf:21:12:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysgBYTQaPdpMm9QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
YWE2OGRhNTAtNjlkOC00Njg5LTkxNzEtMjVkZDgzYTJmZGQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpu+laP54ecDMdDm5pYUWZgRojUBUvgZUqdz
xhmKAQxJtzBmYw4NocnRy3uBCH2G3Oe6F9MPg3lwbJSciRKeCEWY1zX2ibDT/yZY
ioE9SO7DVnnT11DrX/4HzVsRElMAwyGZoNblWifEbxOLz900A3KMLaLMOc6j4Qpq
y/n4ngDK/3Rl7rHhUwO5Z0gXw6S2A9c+qbf+siwn3NYm1xOTupsZG9s8jAislPTl
FIA2fEvYcaM/hSygmN/7rNuLhGjrvI9VrKry4EO+W9kxTVrJfgeDsEd4DK0OYUls
+xHFjO7bZikHG5jXvzlYmbMCLbW2LjlYKxzmQ9fqaXuPloiWhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF92VPoUp679h31440BVyPyqAuA5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjE3Y2NiNTItNTA5Yi0z
MjAyLTkyNWItNjJhN2U0NDc1OGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbKFQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADH7N/C0NAPIMG8zRDKMqWJFUMtyTkbgXu78FFXxWuNJ7xIKyFeoFfZY
lTSG+I0wZSglgp+fNKScQkYg8eaJkDgNeoetnRaQoMkwOyC1IiboHvCbr+la6sOB
7cPGkmtnZ0Izg3Ycz7Ot0mO8wn62V+jgOOvaq1lO77xYMyxQTxqdTkSEJ6bM5PZM
r8XPx+ow3cFLteOjwPWAVE/k1Bbnq0yTXRdSYsJbOid01L+3MMe7/D0/qiSrXKQ6
T94WKa/NvO6X9oQkhEHMx7U+Zhkp9n+8v6oARs0SSFyi2ue4D2kWRxnjFnSB2T6d
MtR/LoepkvioSmADQSObl0XsPs8hEgg=
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:47:43 2026 by rpki-client