Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/7dfa62b7-d3b1-3bd1-9246-31b00f03d824.roa
File:                     7dfa62b7-d3b1-3bd1-9246-31b00f03d824.roa (raw, json)
Hash identifier:          uM+VI1h0QVUc79/2cVw6ZAzc8sV3T9J8fXvYeps1Z2M=
Subject key identifier:   4D:37:6A:A9:7A:24:C8:BD:A8:4E:4D:0F:EE:19:E8:97:BF:21:2F:BA
Certificate issuer:       /CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a
Certificate serial:       010D0C9F4328584ED431F20B7FE8F4792BA48A20
Authority key identifier: 21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/7dfa62b7-d3b1-3bd1-9246-31b00f03d824.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     996
IP address blocks:        167.253.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:f2:0b:7f:e8:f4:79:2b:a4:8a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfffa5c3-b5c7-4347-8d57-96bc3102df8a
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=e618697c-037f-4c4c-96dd-4f8806d4fb19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bd:99:f3:40:a6:1c:39:95:10:15:9d:72:4c:
                    55:3c:1a:50:cf:42:1b:97:e4:3a:8d:e0:9c:81:30:
                    89:a5:bb:27:c1:08:38:be:0d:ce:f2:7f:19:92:de:
                    2c:1c:3e:68:38:78:03:27:c6:8d:97:97:dc:da:6d:
                    95:fe:53:f2:d9:ff:0e:ec:1e:7b:9f:6e:9a:6d:1e:
                    20:65:ac:e9:47:f5:2e:80:87:80:89:04:3c:4a:59:
                    18:ea:90:fd:9d:3e:07:37:84:aa:1c:4c:75:69:5b:
                    a6:d7:01:84:31:15:1c:41:98:8f:26:14:c4:21:76:
                    64:a2:4f:0e:5d:2a:e3:a5:ab:10:61:77:69:16:bd:
                    9a:cf:68:95:ec:12:37:63:d5:95:82:32:02:6c:ce:
                    f3:8d:2f:5a:cf:d4:f7:74:9b:a1:49:e7:15:13:5e:
                    90:38:4c:33:79:36:5b:18:46:df:25:7b:d7:ce:10:
                    65:05:87:e4:ab:95:d6:36:c1:59:0c:97:09:bf:7d:
                    02:e8:b7:20:3e:f2:08:7f:31:76:6f:cf:af:12:19:
                    3e:e5:ef:61:14:c2:86:c7:9c:b1:57:7e:ed:f1:d0:
                    64:ea:3c:95:ad:9a:60:86:07:a4:4f:73:f9:ea:47:
                    11:73:ef:e5:ce:f0:ee:55:84:4c:b6:7e:c1:34:4a:
                    c8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:37:6A:A9:7A:24:C8:BD:A8:4E:4D:0F:EE:19:E8:97:BF:21:2F:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/7dfa62b7-d3b1-3bd1-9246-31b00f03d824.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.crl

            X509v3 Authority Key Identifier:
                keyid:21:EF:A2:95:82:70:C4:A7:B7:7D:3E:26:4B:DE:9E:B4:66:0D:AE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dfffa5c3-b5c7-4347-8d57-96bc3102df8a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:17:39:9f:fc:eb:e8:5e:ca:3d:a3:18:4d:25:42:4c:d4:24:
         07:fd:5f:f6:e7:2e:b1:d8:5c:75:22:71:a6:ee:11:29:dd:2d:
         7d:d9:54:ce:f7:a9:e9:22:8f:01:10:40:ff:37:2b:73:12:53:
         99:86:bc:28:b4:59:e4:39:b6:6d:95:5a:75:f3:0a:24:da:55:
         2c:9c:37:ad:ca:a8:33:83:67:61:77:1b:c9:a7:54:6a:ad:af:
         ed:46:73:48:85:17:e8:6d:8b:7e:b7:7f:26:93:c9:b5:d8:55:
         ee:2f:e3:d3:86:b4:b3:18:12:7c:7e:35:3a:95:93:d8:0b:a6:
         e8:ec:71:e2:bb:7a:7f:6b:8e:f5:54:50:68:f1:ae:b3:6b:81:
         10:0d:68:33:ef:c8:8b:f8:bd:d5:c6:6f:f3:6a:ce:09:ba:c7:
         70:db:25:d7:ea:0a:33:d5:3e:e0:c9:f4:ea:b6:77:2d:14:9a:
         a3:5d:f7:04:ad:24:76:06:8f:af:ec:b3:e5:4c:00:4a:9c:93:
         8a:b1:0f:c4:86:0b:6a:84:21:f0:e3:fb:54:60:1d:8a:3b:9f:
         17:d7:91:1d:4d:87:2d:90:77:c0:ac:45:68:11:e5:47:29:de:
         fe:e8:4e:4b:56:f8:55:5b:5c:2c:9f:bb:e8:02:91:05:24:d0:
         5b:1a:aa:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMfILf+j0eSukiiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGZmZmE1YzMtYjVjNy00MzQ3LThkNTctOTZiYzMxMDJk
ZjhhMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk
ZTYxODY5N2MtMDM3Zi00YzRjLTk2ZGQtNGY4ODA2ZDRmYjE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr2Z80CmHDmVEBWdckxVPBpQz0Ibl+Q6jeCc
gTCJpbsnwQg4vg3O8n8Zkt4sHD5oOHgDJ8aNl5fc2m2V/lPy2f8O7B57n26abR4g
ZazpR/UugIeAiQQ8SlkY6pD9nT4HN4SqHEx1aVum1wGEMRUcQZiPJhTEIXZkok8O
XSrjpasQYXdpFr2az2iV7BI3Y9WVgjICbM7zjS9az9T3dJuhSecVE16QOEwzeTZb
GEbfJXvXzhBlBYfkq5XWNsFZDJcJv30C6LcgPvIIfzF2b8+vEhk+5e9hFMKGx5yx
V37t8dBk6jyVrZpghgekT3P56kcRc+/lzvDuVYRMtn7BNErI/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE03aql6JMi9qE5ND+4Z6Je/IS+6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZmZm
YTVjMy1iNWM3LTQzNDctOGQ1Ny05NmJjMzEwMmRmOGEvN2RmYTYyYjctZDNiMS0z
YmQxLTkyNDYtMzFiMDBmMDNkODI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGZmZmE1YzMtYjVjNy00MzQ3LThk
NTctOTZiYzMxMDJkZjhhL2RmZmZhNWMzLWI1YzctNDM0Ny04ZDU3LTk2YmMzMTAy
ZGY4YS5jcmwwHwYDVR0jBBgwFoAUIe+ilYJwxKe3fT4mS96etGYNrkgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZmZmYTVjMy1iNWM3LTQzNDctOGQ1Ny05NmJj
MzEwMmRmOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/09MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADkXOZ/86+heyj2jGE0lQkzUJAf9X/bnLrHYXHUicabuESndLX3ZVM73
qekijwEQQP83K3MSU5mGvCi0WeQ5tm2VWnXzCiTaVSycN63KqDODZ2F3G8mnVGqt
r+1Gc0iFF+hti363fyaTybXYVe4v49OGtLMYEnx+NTqVk9gLpujsceK7en9rjvVU
UGjxrrNrgRANaDPvyIv4vdXGb/Nqzgm6x3DbJdfqCjPVPuDJ9Oq2dy0UmqNd9wSt
JHYGj6/ss+VMAEqck4qxD8SGC2qEIfDj+1RgHYo7nxfXkR1Nhy2Qd8CsRWgR5Ucp
3v7oTktW+FVbXCyfu+gCkQUk0Fsaqk8=
-----END CERTIFICATE-----
Generated at Thu Sep 17 21:55:23 2026 by rpki-client