Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/081065cb-7abc-3887-9c88-4159a2a8d7c6.roa
File:                     081065cb-7abc-3887-9c88-4159a2a8d7c6.roa (raw, json)
Hash identifier:          T4GXyAHJiV02bGFBwSAfOcEDiANdleMp2hxh9PtLjAM=
Subject key identifier:   54:3B:A7:F1:84:0E:84:FA:63:6A:27:D2:02:CF:07:9A:A3:67:D7:AB
Certificate issuer:       /CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
Certificate serial:       010D0C9F4328584EC20C67D202626C03A9688880
Authority key identifier: DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/081065cb-7abc-3887-9c88-4159a2a8d7c6.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     1403
IP address blocks:        173.246.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:67:d2:02:62:6c:03:a9:68:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b84ab52d-915e-4d8a-b37b-496ea49c6798
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=2a3866ab-834a-464e-be68-97501d85d616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1b:95:bf:ee:77:7f:85:b1:89:0f:bf:40:09:
                    fb:e2:57:e7:08:d2:07:da:93:75:7e:42:45:75:4c:
                    8d:54:49:8f:43:13:3d:75:68:6c:ba:4b:df:68:94:
                    33:bf:dd:3b:41:fc:94:a5:37:46:49:21:81:a3:dc:
                    a8:e5:a1:c6:27:89:a7:a9:2b:67:bd:8f:2a:9b:93:
                    43:4b:ec:61:ea:86:ce:c6:f6:7f:cd:30:47:b5:2f:
                    03:94:50:08:9e:a3:04:b6:33:54:fc:e2:83:ac:20:
                    46:8c:2a:df:8a:4b:3b:d8:0c:16:17:52:ec:18:4d:
                    b6:7b:dc:12:b2:99:8f:c4:59:b8:1e:02:c5:90:cd:
                    b2:01:3f:5f:01:1a:ff:d6:67:f9:1e:c7:66:40:96:
                    17:1c:60:c4:b1:cb:d0:ef:a3:12:28:e6:6a:5a:2e:
                    73:59:db:f7:d9:22:c8:25:07:cf:4e:38:6f:8e:e1:
                    53:ea:5d:0c:68:74:23:a8:ba:b5:2f:62:79:ea:66:
                    9a:cf:26:5b:7b:bb:7c:fb:6d:76:c4:10:03:16:44:
                    21:a8:5b:7f:e3:68:54:29:bf:b0:a0:30:d1:0e:55:
                    83:be:2b:1b:f1:e2:43:1a:87:6a:87:72:cf:51:ce:
                    05:ac:4e:40:82:f4:e1:9c:4d:31:f7:8e:70:4e:ac:
                    30:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3B:A7:F1:84:0E:84:FA:63:6A:27:D2:02:CF:07:9A:A3:67:D7:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/081065cb-7abc-3887-9c88-4159a2a8d7c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798/b84ab52d-915e-4d8a-b37b-496ea49c6798.crl

            X509v3 Authority Key Identifier:
                keyid:DD:B5:32:EF:53:10:BB:59:DD:81:2B:55:E8:DB:F7:E6:10:03:24:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b84ab52d-915e-4d8a-b37b-496ea49c6798.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.246.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:39:37:8d:6d:bd:ba:85:ed:08:af:3d:4b:a9:90:11:e0:aa:
         c9:8e:99:71:a1:21:40:50:ec:bc:fc:65:bc:32:b9:94:1f:78:
         b5:2d:1f:ef:2e:38:18:6f:20:40:09:6b:06:27:15:f7:9e:a1:
         0b:66:a2:46:22:5a:6b:9d:d8:9e:c1:a0:12:77:64:60:b7:7e:
         64:68:50:01:c4:56:14:d8:0f:f6:f2:3f:34:34:7f:2e:9d:f6:
         b8:77:3d:89:f6:b7:9e:47:1f:ca:9a:9a:35:33:23:98:8d:5d:
         51:c1:99:3a:8d:ec:2c:3e:e3:9a:be:ac:38:fd:f7:20:94:0d:
         46:ea:d1:9b:2e:ca:e6:82:2c:aa:e4:48:74:ea:9a:fa:a0:24:
         60:42:89:19:11:22:c9:e2:38:06:9d:43:6e:d6:af:1e:f2:d9:
         f3:72:16:a3:20:d1:a3:2a:be:c4:66:95:11:99:ab:8e:b0:05:
         5a:cd:42:12:56:d8:eb:01:85:75:13:14:8d:b4:7d:87:55:bd:
         d1:53:be:5b:ae:f7:86:a1:06:27:e9:55:bb:a4:f7:ca:55:91:
         a8:b2:11:10:f2:2a:b6:79:19:2f:84:9a:e0:c6:c1:fc:a6:2c:
         ec:90:4b:95:f7:b5:ab:ed:48:1b:52:f8:c4:a7:48:05:af:3c:
         b7:5c:0f:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDGfSAmJsA6loiIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg0YWI1MmQtOTE1ZS00ZDhhLWIzN2ItNDk2ZWE0OWM2
Nzk4MB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk
MmEzODY2YWItODM0YS00NjRlLWJlNjgtOTc1MDFkODVkNjE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRuVv+53f4WxiQ+/QAn74lfnCNIH2pN1fkJF
dUyNVEmPQxM9dWhsukvfaJQzv907QfyUpTdGSSGBo9yo5aHGJ4mnqStnvY8qm5ND
S+xh6obOxvZ/zTBHtS8DlFAInqMEtjNU/OKDrCBGjCrfiks72AwWF1LsGE22e9wS
spmPxFm4HgLFkM2yAT9fARr/1mf5HsdmQJYXHGDEscvQ76MSKOZqWi5zWdv32SLI
JQfPTjhvjuFT6l0MaHQjqLq1L2J56maazyZbe7t8+212xBADFkQhqFt/42hUKb+w
oDDRDlWDvisb8eJDGodqh3LPUc4FrE5AgvThnE0x945wTqwwDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFQ7p/GEDoT6Y2on0gLPB5qjZ9erMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRh
YjUyZC05MTVlLTRkOGEtYjM3Yi00OTZlYTQ5YzY3OTgvMDgxMDY1Y2ItN2FiYy0z
ODg3LTljODgtNDE1OWEyYThkN2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjg0YWI1MmQtOTE1ZS00ZDhhLWIz
N2ItNDk2ZWE0OWM2Nzk4L2I4NGFiNTJkLTkxNWUtNGQ4YS1iMzdiLTQ5NmVhNDlj
Njc5OC5jcmwwHwYDVR0jBBgwFoAU3bUy71MQu1ndgStV6Nv35hADJHwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iODRhYjUyZC05MTVlLTRkOGEtYjM3Yi00OTZl
YTQ5YzY3OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrfYAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACE5N41tvbqF7QivPUupkBHgqsmOmXGhIUBQ7Lz8ZbwyuZQfeLUtH+8u
OBhvIEAJawYnFfeeoQtmokYiWmud2J7BoBJ3ZGC3fmRoUAHEVhTYD/byPzQ0fy6d
9rh3PYn2t55HH8qamjUzI5iNXVHBmTqN7Cw+45q+rDj99yCUDUbq0ZsuyuaCLKrk
SHTqmvqgJGBCiRkRIsniOAadQ27Wrx7y2fNyFqMg0aMqvsRmlRGZq46wBVrNQhJW
2OsBhXUTFI20fYdVvdFTvluu94ahBifpVbuk98pVkaiyERDyKrZ5GS+EmuDGwfym
LOyQS5X3tavtSBtS+MSnSAWvPLdcD4U=
-----END CERTIFICATE-----
Generated at Thu Aug 13 10:58:55 2026 by rpki-client