Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/3bca850c-a082-395e-b6b3-a870cbd395cb.roa
File:                     3bca850c-a082-395e-b6b3-a870cbd395cb.roa (raw, json)
Hash identifier:          8VCVHvs1eFD0mWQbYmXSH1bhAsEbIn4/1SD0yJ/pdWA=
Subject key identifier:   3A:4E:6A:32:85:69:46:2E:AD:16:7B:D0:1A:EB:B8:E1:3B:46:20:E4
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F4328584ECD3719EABA65FF82E95F0480
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/3bca850c-a082-395e-b6b3-a870cbd395cb.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     42
IP address blocks:        67.22.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:19:ea:ba:65:ff:82:e9:5f:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=c32c3356-00de-4cec-b8a9-7c045ff22353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0d:94:da:36:6f:b4:fe:7a:bf:6b:b6:38:e9:
                    5f:bd:22:f7:f5:59:0b:8c:db:b3:49:5d:cd:36:be:
                    d4:e6:af:f4:5c:42:91:9b:42:ea:3a:ef:53:b4:d2:
                    f1:ad:2b:8f:13:fc:38:cb:94:02:82:5e:2f:d1:30:
                    db:c4:23:fe:3f:ab:f6:50:05:5e:4a:67:93:f6:60:
                    c1:32:c4:8b:f9:cf:a3:f3:2d:e0:c8:ea:45:7f:fa:
                    18:df:00:c5:03:82:cb:84:f5:d5:5f:74:6a:d3:96:
                    60:17:7a:fb:2a:af:5f:78:6e:4b:41:3e:7b:82:14:
                    f6:05:92:aa:1f:38:93:83:3c:8f:c5:3c:25:1d:65:
                    30:f3:29:ef:c0:79:f2:54:bc:ef:74:8b:34:31:f9:
                    b9:e0:83:48:84:40:af:59:88:95:6b:57:41:0d:f3:
                    32:a4:c1:f4:29:aa:d7:b1:32:d4:56:7c:bb:3f:62:
                    31:66:91:62:6d:e9:aa:96:e6:59:4b:1a:3c:34:c9:
                    7b:89:e1:be:04:f0:60:de:83:a7:db:50:e3:39:71:
                    9e:e8:85:b2:76:05:06:d4:66:9f:2a:29:42:f0:f3:
                    97:88:81:90:e2:fd:4a:e7:cd:56:90:bc:1f:ce:5b:
                    bb:e9:3e:f6:cb:3d:a0:cc:ab:3c:8d:25:1a:90:0e:
                    91:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4E:6A:32:85:69:46:2E:AD:16:7B:D0:1A:EB:B8:E1:3B:46:20:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/3bca850c-a082-395e-b6b3-a870cbd395cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.22.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:64:7d:80:32:cd:fa:d7:a4:ab:de:58:53:b6:22:18:75:dd:
         46:fd:38:4f:4b:d6:52:b3:bd:3d:32:73:14:59:da:27:d5:11:
         7d:c3:9f:bb:c1:4b:a9:c6:5e:2c:b8:f3:26:b8:a0:f0:07:5b:
         e4:42:15:7c:9a:9d:fc:1d:cc:74:1e:65:d2:a7:1c:31:6f:f1:
         4a:13:15:f6:c0:fd:69:d2:fe:f7:20:ed:99:4a:f6:a8:39:da:
         82:4e:c8:ef:43:41:d4:1e:e6:b3:89:4a:9c:91:b7:6b:43:2c:
         7d:7a:c8:ff:93:67:45:26:09:b5:6f:a0:1d:8f:23:6d:4a:47:
         39:2a:ee:fc:ed:b7:6a:dc:07:c2:95:51:7a:37:99:d6:85:2b:
         ab:be:c3:a9:01:1c:78:7b:f9:0d:e5:f6:4e:06:58:18:93:4c:
         cd:ac:8d:38:99:06:d2:2f:13:0c:2c:c1:c1:a4:1a:cd:17:fa:
         d2:bc:33:14:b5:50:4b:4c:f9:29:2b:6b:88:19:16:21:dc:89:
         8c:12:87:06:30:3e:7f:8f:a9:26:de:4e:30:43:85:88:c6:f6:
         e6:d6:95:b5:3a:93:4d:32:9c:b4:d5:91:f5:44:18:9e:46:fe:
         7a:dc:63:82:50:75:6c:87:ea:5c:7b:82:dc:07:48:7f:f8:f5:
         05:03:7f:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNxnqumX/gulfBIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3
MTAzMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk
YzMyYzMzNTYtMDBkZS00Y2VjLWI4YTktN2MwNDVmZjIyMzUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ2U2jZvtP56v2u2OOlfvSL39VkLjNuzSV3N
Nr7U5q/0XEKRm0LqOu9TtNLxrSuPE/w4y5QCgl4v0TDbxCP+P6v2UAVeSmeT9mDB
MsSL+c+j8y3gyOpFf/oY3wDFA4LLhPXVX3Rq05ZgF3r7Kq9feG5LQT57ghT2BZKq
HziTgzyPxTwlHWUw8ynvwHnyVLzvdIs0Mfm54INIhECvWYiVa1dBDfMypMH0KarX
sTLUVny7P2IxZpFibemqluZZSxo8NMl7ieG+BPBg3oOn21DjOXGe6IWydgUG1Gaf
KilC8POXiIGQ4v1K581WkLwfzlu76T72yz2gzKs8jSUakA6RUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDpOajKFaUYurRZ70BrruOE7RiDkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy
NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvM2JjYTg1MGMtYTA4Mi0z
OTVlLWI2YjMtYTg3MGNiZDM5NWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4
ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj
NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2
MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQxZwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFFkfYAyzfrXpKveWFO2Ihh13Ub9OE9L1lKzvT0ycxRZ2ifVEX3Dn7vB
S6nGXiy48ya4oPAHW+RCFXyanfwdzHQeZdKnHDFv8UoTFfbA/WnS/vcg7ZlK9qg5
2oJOyO9DQdQe5rOJSpyRt2tDLH16yP+TZ0UmCbVvoB2PI21KRzkq7vztt2rcB8KV
UXo3mdaFK6u+w6kBHHh7+Q3l9k4GWBiTTM2sjTiZBtIvEwwswcGkGs0X+tK8MxS1
UEtM+Skra4gZFiHciYwShwYwPn+PqSbeTjBDhYjG9ubWlbU6k00ynLTVkfVEGJ5G
/nrcY4JQdWyH6lx7gtwHSH/49QUDf1M=
-----END CERTIFICATE-----
Generated at Mon Sep 14 09:07:23 2026 by rpki-client