Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/fc7d5805-7bd5-3dfe-9943-9059063f3200.roa
File:                     fc7d5805-7bd5-3dfe-9943-9059063f3200.roa (raw, json)
Hash identifier:          rzdiZEQNYzzapyR1xAuuFWyUbOf7RAqwMQlN3fnf5+4=
Subject key identifier:   DA:9E:BC:B7:1D:53:8A:51:0A:F2:C6:AF:05:32:0E:96:7C:AD:19:19
Certificate issuer:       /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial:       010D0C9F4328584E3FC4762969E54D765BE92C00
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/fc7d5805-7bd5-3dfe-9943-9059063f3200.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     22611
IP address blocks:        168.235.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:76:29:69:e5:4d:76:5b:e9:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=1ec7c797-7e14-4e13-ab7f-786269105778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bd:c9:f7:48:64:a2:68:61:d5:37:ae:34:85:
                    35:7d:9f:e3:8e:f5:18:6f:58:95:1a:a2:15:e8:55:
                    8f:4f:67:07:db:4d:49:9a:1a:7d:2a:a0:88:94:c3:
                    75:d5:41:f3:c8:42:4f:08:a7:ca:1b:7b:0e:36:ec:
                    18:3c:a1:03:bb:38:1c:1c:e9:30:06:75:76:9e:bf:
                    21:52:31:21:04:40:8a:e3:0f:42:b4:61:02:b3:b7:
                    07:ff:d7:4e:db:73:24:44:30:3e:76:80:f1:fa:be:
                    9c:86:7e:8e:0f:ef:4a:9e:cd:34:a7:00:f2:bc:c0:
                    1c:c1:d9:6e:f1:2f:b0:16:c1:bc:41:bd:47:da:9e:
                    bf:f3:72:ea:27:3b:ec:69:79:af:23:f0:5d:2d:e7:
                    24:e0:8d:76:17:f5:35:84:15:1a:20:42:bd:df:e6:
                    5f:d6:87:1a:df:63:15:28:19:83:2a:49:bd:5e:6e:
                    42:0a:4f:09:14:95:1d:e8:bd:7b:98:26:21:83:71:
                    ff:dc:7a:cd:73:18:85:2d:22:e9:f9:21:ec:6e:70:
                    ad:31:f3:60:a4:7f:a6:0a:01:88:08:59:a8:f8:c2:
                    c2:68:d3:9a:e2:ab:79:2e:05:76:68:ab:be:99:a4:
                    26:46:51:f3:a2:d5:1c:01:e5:38:a7:f7:e9:14:af:
                    be:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9E:BC:B7:1D:53:8A:51:0A:F2:C6:AF:05:32:0E:96:7C:AD:19:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/fc7d5805-7bd5-3dfe-9943-9059063f3200.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.235.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:ee:b9:a8:86:ce:c6:12:1a:65:d6:0a:27:2e:1b:a8:d8:bf:
         84:01:d5:6d:a8:52:07:96:9e:ed:50:50:c0:6a:16:a0:39:ce:
         d3:54:d9:d0:a3:18:cf:01:e4:67:bb:7c:38:d4:8f:ac:b7:02:
         0c:18:cc:86:78:e9:67:f2:94:2e:62:f6:65:ad:2b:9e:a0:3b:
         e6:72:d4:cb:f6:5b:cd:1e:c3:c9:31:c4:cd:a5:af:c5:c2:ac:
         7d:93:ca:52:de:97:ee:f6:85:f0:01:7e:c5:60:9c:d3:c7:a4:
         a6:5f:a4:1a:e5:f2:84:5a:eb:04:6b:4c:99:0a:23:79:10:9d:
         78:21:3e:5d:b0:aa:13:bb:ac:30:a2:c3:fd:a7:18:b9:ee:04:
         02:b2:d3:29:09:70:93:2d:fb:c7:38:cb:0e:e4:59:76:70:69:
         48:2c:37:28:31:a7:88:7d:95:45:52:44:29:19:28:6e:ae:e6:
         8a:1d:f0:85:f4:9c:24:7e:ff:a6:dc:d2:f9:da:8f:de:89:2a:
         97:c8:2b:dc:d4:5d:e6:78:f8:86:75:26:f0:8d:a7:d8:60:ad:
         d2:0d:00:6d:8a:3a:7f:f2:e3:f5:d8:d1:b7:eb:33:2b:f5:4b:
         16:f8:7e:fe:34:f1:93:42:96:dd:78:9d:e0:99:d2:98:5e:b5:
         88:e4:ed:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4/xHYpaeVNdlvpLAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY3MTA2MjItN2VjNC00YmIyLTllODctMjdjNWU1OTY0
ZmFlMB4XDTI2MDYyMTIxMDAxMloXDTI2MDkxOTIxMDAxMlowLzEtMCsGA1UEAxMk
MWVjN2M3OTctN2UxNC00ZTEzLWFiN2YtNzg2MjY5MTA1Nzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL3J90hkomhh1TeuNIU1fZ/jjvUYb1iVGqIV
6FWPT2cH201Jmhp9KqCIlMN11UHzyEJPCKfKG3sONuwYPKEDuzgcHOkwBnV2nr8h
UjEhBECK4w9CtGECs7cH/9dO23MkRDA+doDx+r6chn6OD+9Kns00pwDyvMAcwdlu
8S+wFsG8Qb1H2p6/83LqJzvsaXmvI/BdLeck4I12F/U1hBUaIEK93+Zf1oca32MV
KBmDKkm9Xm5CCk8JFJUd6L17mCYhg3H/3HrNcxiFLSLp+SHsbnCtMfNgpH+mCgGI
CFmo+MLCaNOa4qt5LgV2aKu+maQmRlHzotUcAeU4p/fpFK++NQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNqevLcdU4pRCvLGrwUyDpZ8rRkZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcx
MDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1ZTU5NjRmYWUvZmM3ZDU4MDUtN2JkNS0z
ZGZlLTk5NDMtOTA1OTA2M2YzMjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWY3MTA2MjItN2VjNC00YmIyLTll
ODctMjdjNWU1OTY0ZmFlL2VmNzEwNjIyLTdlYzQtNGJiMi05ZTg3LTI3YzVlNTk2
NGZhZS5jcmwwHwYDVR0jBBgwFoAUi0oOeoRIPRQYvawxB5YPaCph7dcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcxMDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1
ZTU5NjRmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqOt4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJfuuaiGzsYSGmXWCicuG6jYv4QB1W2oUgeWnu1QUMBqFqA5ztNU2dCj
GM8B5Ge7fDjUj6y3AgwYzIZ46WfylC5i9mWtK56gO+Zy1Mv2W80ew8kxxM2lr8XC
rH2TylLel+72hfABfsVgnNPHpKZfpBrl8oRa6wRrTJkKI3kQnXghPl2wqhO7rDCi
w/2nGLnuBAKy0ykJcJMt+8c4yw7kWXZwaUgsNygxp4h9lUVSRCkZKG6u5ood8IX0
nCR+/6bc0vnaj96JKpfIK9zUXeZ4+IZ1JvCNp9hgrdINAG2KOn/y4/XY0bfrMyv1
Sxb4fv408ZNClt14neCZ0phetYjk7fM=
-----END CERTIFICATE-----
Generated at Fri Jul 17 14:34:17 2026 by rpki-client