Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/ab75e324-5884-3478-bcb0-f1254ed9f0bf.roa
File:                     ab75e324-5884-3478-bcb0-f1254ed9f0bf.roa (raw, json)
Hash identifier:          KGqdX1QIOP/rd9K9TGpdZzXgi2C4tWKgdPceh/ey2no=
Subject key identifier:   8A:80:A5:EA:E2:8C:DF:8D:D6:5C:E3:FC:8A:EF:A9:7D:02:55:67:FE
Certificate issuer:       /CN=d709b40c-fe09-46e6-a38c-9cfe44ccdea2
Certificate serial:       010D0C9F4328584DD4C0685A9509F33C0A308B40
Authority key identifier: 47:40:53:7B:7D:1B:E6:72:85:34:F3:D2:AA:65:E9:5F:67:8E:0F:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/ab75e324-5884-3478-bcb0-f1254ed9f0bf.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     8075
IP address blocks:        208.75.32.0/22 maxlen: 22
                          208.75.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:68:5a:95:09:f3:3c:0a:30:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d709b40c-fe09-46e6-a38c-9cfe44ccdea2
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=7a26bba1-6949-45c0-aa45-a5a2ecc38746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b0:ae:5f:91:d2:09:af:42:38:09:f4:6e:f7:
                    9e:b1:d7:96:6d:95:e7:24:7a:dd:06:de:5d:ea:68:
                    26:75:0c:43:f2:ba:3a:48:3f:de:1d:e0:c4:1e:fc:
                    93:92:59:c0:e1:b6:75:ff:a2:d3:51:7a:83:1c:51:
                    de:c5:f7:69:a8:26:1b:95:27:ca:88:26:df:f8:2c:
                    f8:91:39:aa:59:5e:05:2f:9f:61:b8:87:49:0d:50:
                    f2:35:f3:8a:1b:03:bc:12:1f:f1:df:69:b6:b1:b8:
                    de:ac:d1:f8:09:1b:cd:61:33:3a:7c:d5:fe:58:45:
                    df:14:ef:f3:06:af:14:97:f5:e9:04:d5:e9:5b:56:
                    f6:e7:09:75:76:ef:5b:27:83:a2:27:4d:e7:b1:00:
                    9e:1e:de:41:bc:7c:d6:be:58:ad:59:22:6c:e5:ee:
                    ae:91:43:6a:99:8e:e7:58:8b:97:50:90:f2:a0:57:
                    3a:39:3c:0d:99:e9:42:9c:87:2c:a4:8c:f5:96:ce:
                    2f:47:09:93:77:e6:e4:ec:bb:d0:b4:3c:94:87:c2:
                    e2:59:17:d3:5d:7f:af:fc:ac:8d:47:f3:8a:c0:64:
                    d4:7d:5b:7a:f6:00:35:62:3d:72:0c:f8:f1:34:2f:
                    5d:01:f4:22:22:0d:e7:93:81:05:53:6c:5c:8d:5f:
                    64:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:80:A5:EA:E2:8C:DF:8D:D6:5C:E3:FC:8A:EF:A9:7D:02:55:67:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/ab75e324-5884-3478-bcb0-f1254ed9f0bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.crl

            X509v3 Authority Key Identifier:
                keyid:47:40:53:7B:7D:1B:E6:72:85:34:F3:D2:AA:65:E9:5F:67:8E:0F:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.75.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:fb:82:24:ff:d0:c4:0a:7e:b1:fe:df:f6:8c:5b:ee:3b:9e:
         59:d4:e8:eb:3b:87:16:0f:3a:c8:3f:9e:0c:9b:b2:cd:9f:f4:
         12:4e:06:82:33:e0:2d:7e:b6:ce:49:18:ea:08:36:61:e1:fb:
         e7:ca:18:84:14:27:dc:20:21:28:90:20:25:70:02:b6:77:f8:
         82:06:da:e8:94:7c:0f:71:02:30:41:6f:ee:81:fc:38:6c:9d:
         8c:ba:42:15:00:7e:52:1c:a0:1d:02:3d:a2:69:3a:55:dc:c4:
         34:41:dc:d2:15:66:4b:70:b1:28:be:0f:05:65:18:28:45:f1:
         f0:10:04:78:c8:8f:a8:f0:a9:b9:3d:a0:12:a0:f3:1d:3b:1d:
         86:15:40:41:bd:67:91:9f:07:37:53:55:1c:7c:ba:4e:24:e5:
         82:9b:3b:1f:f5:bb:82:2f:4d:8a:85:94:00:25:19:99:00:5f:
         16:1d:ad:5e:87:0d:9d:d3:0d:bc:b6:8c:3c:12:c5:a8:a5:ea:
         d9:ad:93:c1:5e:10:2a:5c:c2:a8:c0:ef:31:3f:79:7a:f3:88:
         fd:9c:05:c1:bb:b7:8a:66:8f:af:cf:72:bf:1a:00:7a:90:b0:
         2a:9d:82:64:28:1a:76:cd:76:9b:20:af:3a:3e:6d:0a:d9:65:
         ad:13:cb:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3UwGhalQnzPAowi0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwOWI0MGMtZmUwOS00NmU2LWEzOGMtOWNmZTQ0Y2Nk
ZWEyMB4XDTI2MDUxNDEzMDAzMVoXDTI2MDgxMjEzMDAzMVowLzEtMCsGA1UEAxMk
N2EyNmJiYTEtNjk0OS00NWMwLWFhNDUtYTVhMmVjYzM4NzQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbCuX5HSCa9COAn0bveesdeWbZXnJHrdBt5d
6mgmdQxD8ro6SD/eHeDEHvyTklnA4bZ1/6LTUXqDHFHexfdpqCYblSfKiCbf+Cz4
kTmqWV4FL59huIdJDVDyNfOKGwO8Eh/x32m2sbjerNH4CRvNYTM6fNX+WEXfFO/z
Bq8Ul/XpBNXpW1b25wl1du9bJ4OiJ03nsQCeHt5BvHzWvlitWSJs5e6ukUNqmY7n
WIuXUJDyoFc6OTwNmelCnIcspIz1ls4vRwmTd+bk7LvQtDyUh8LiWRfTXX+v/KyN
R/OKwGTUfVt69gA1Yj1yDPjxNC9dAfQiIg3nk4EFU2xcjV9kewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIqAperijN+N1lzj/IrvqX0CVWf+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNzA5
YjQwYy1mZTA5LTQ2ZTYtYTM4Yy05Y2ZlNDRjY2RlYTIvYWI3NWUzMjQtNTg4NC0z
NDc4LWJjYjAtZjEyNTRlZDlmMGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDcwOWI0MGMtZmUwOS00NmU2LWEz
OGMtOWNmZTQ0Y2NkZWEyL2Q3MDliNDBjLWZlMDktNDZlNi1hMzhjLTljZmU0NGNj
ZGVhMi5jcmwwHwYDVR0jBBgwFoAUR0BTe30b5nKFNPPSqmXpX2eOD44wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNzA5YjQwYy1mZTA5LTQ2ZTYtYTM4Yy05Y2Zl
NDRjY2RlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EsgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGb7giT/0MQKfrH+3/aMW+47nlnU6Os7hxYPOsg/ngybss2f9BJOBoIz
4C1+ts5JGOoINmHh++fKGIQUJ9wgISiQICVwArZ3+IIG2uiUfA9xAjBBb+6B/Dhs
nYy6QhUAflIcoB0CPaJpOlXcxDRB3NIVZktwsSi+DwVlGChF8fAQBHjIj6jwqbk9
oBKg8x07HYYVQEG9Z5GfBzdTVRx8uk4k5YKbOx/1u4IvTYqFlAAlGZkAXxYdrV6H
DZ3TDby2jDwSxail6tmtk8FeECpcwqjA7zE/eXrziP2cBcG7t4pmj6/Pcr8aAHqQ
sCqdgmQoGnbNdpsgrzo+bQrZZa0Ty9o=
-----END CERTIFICATE-----
Generated at Wed Jun 3 19:47:58 2026 by rpki-client