Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/30b29ec8-c538-3d18-b944-3b40662f733e.roa
File:                     30b29ec8-c538-3d18-b944-3b40662f733e.roa (raw, json)
Hash identifier:          LBipRrX0vCaNgy4zG3fy/tsVE0V26g5+UBrDCWGlXhc=
Subject key identifier:   49:E8:AD:60:E7:63:5E:40:62:4E:64:DF:1F:63:66:6C:D8:74:F1:C3
Certificate issuer:       /CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
Certificate serial:       010D0C9F4328584EA798E883B023648D229F5C80
Authority key identifier: 36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/30b29ec8-c538-3d18-b944-3b40662f733e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     23341
IP address blocks:        143.55.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:e8:83:b0:23:64:8d:22:9f:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=232f9414-ba13-405b-9cf9-1bf37bb3631b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:54:5c:a2:ef:b9:43:74:3b:4a:50:58:2d:ee:
                    21:93:0d:4d:46:03:d3:65:5a:c0:ee:f4:eb:45:96:
                    8a:9a:45:dd:79:fa:91:47:81:9f:21:05:a5:78:2f:
                    25:58:b5:86:52:60:9a:b1:1f:68:f5:c0:16:65:49:
                    49:d3:71:ee:61:d7:00:28:e5:0a:9a:c0:e0:46:d0:
                    bd:6d:03:9e:d7:65:c6:79:11:60:54:67:a0:ec:c2:
                    27:40:27:f8:97:26:bf:1e:ec:34:1f:d9:30:ba:50:
                    7a:29:4b:d6:0b:75:67:07:dc:a4:e9:22:f2:89:6a:
                    05:66:ed:8e:a6:7d:31:59:a2:4d:2e:5c:b4:91:86:
                    51:a4:de:c0:87:c1:93:4d:43:37:27:d0:fe:17:e0:
                    8c:ea:99:82:49:3d:4f:10:78:31:77:25:08:75:f0:
                    67:9f:55:b0:11:2b:11:cf:55:02:e3:ef:90:1b:c8:
                    46:08:c5:39:05:ba:11:ad:cc:8d:0f:42:e7:ba:08:
                    61:67:f0:67:f5:f7:1b:69:4e:7d:61:dc:e6:aa:96:
                    73:39:05:9d:48:9f:35:87:23:86:63:2c:66:21:de:
                    9d:44:01:01:f0:28:f9:ae:cb:9f:db:fe:e3:32:f7:
                    a7:db:e3:9e:1a:3a:32:4a:bc:3b:ce:ba:03:15:08:
                    33:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E8:AD:60:E7:63:5E:40:62:4E:64:DF:1F:63:66:6C:D8:74:F1:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/30b29ec8-c538-3d18-b944-3b40662f733e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl

            X509v3 Authority Key Identifier:
                keyid:36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.55.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:1b:8c:34:7f:dc:a0:15:8d:d5:54:6d:8e:a6:bd:0a:4b:59:
         36:8f:fa:1e:c0:fa:55:dc:45:2e:4c:3e:e0:d7:b7:85:05:3b:
         0f:e2:16:e9:a9:f4:13:c3:01:fc:be:95:b2:72:81:1b:af:d0:
         14:93:4a:ad:9d:63:72:08:48:74:9a:5a:aa:8e:a1:17:03:2f:
         a6:04:31:61:7e:ef:f4:3f:c1:f1:60:90:40:41:dc:be:23:fb:
         33:97:f8:0a:2d:fe:81:1c:f4:d9:cf:3e:18:85:60:ee:10:d7:
         15:e7:27:2a:e0:88:c3:98:70:28:5d:13:c5:e7:f8:3a:b0:be:
         18:40:2a:f3:8a:54:05:70:ab:4b:4f:88:21:92:79:8e:3a:a2:
         0b:e2:f4:c1:48:56:c6:6a:3e:6c:ae:d7:cc:d5:67:0f:25:73:
         43:2a:da:ea:de:fe:ff:4d:40:9a:a8:f3:9b:7f:87:cd:c2:37:
         bf:c3:d8:c7:13:b3:18:00:12:ad:da:0e:1c:30:3b:3c:d6:99:
         da:dc:ff:c6:47:0d:04:24:29:6d:d1:78:14:24:dd:c6:5e:49:
         3a:31:26:b7:ac:3f:ab:8f:86:17:65:c4:07:54:2a:96:9a:67:
         ba:12:be:47:c8:41:8d:e0:f4:93:1a:9f:eb:f0:c4:b8:bd:9d:
         bb:86:47:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmOiDsCNkjSKfXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI2ZmQyNjItOTRlYS00ZTMzLWFmM2UtMjEyYWJlMGZj
NjI4MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MjMyZjk0MTQtYmExMy00MDViLTljZjktMWJmMzdiYjM2MzFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1Rcou+5Q3Q7SlBYLe4hkw1NRgPTZVrA7vTr
RZaKmkXdefqRR4GfIQWleC8lWLWGUmCasR9o9cAWZUlJ03HuYdcAKOUKmsDgRtC9
bQOe12XGeRFgVGeg7MInQCf4lya/Huw0H9kwulB6KUvWC3VnB9yk6SLyiWoFZu2O
pn0xWaJNLly0kYZRpN7Ah8GTTUM3J9D+F+CM6pmCST1PEHgxdyUIdfBnn1WwESsR
z1UC4++QG8hGCMU5BboRrcyND0LnughhZ/Bn9fcbaU59YdzmqpZzOQWdSJ81hyOG
YyxmId6dRAEB8Cj5rsuf2/7jMven2+OeGjoySrw7zroDFQgzXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEnorWDnY15AYk5k3x9jZmzYdPHDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81YjZm
ZDI2Mi05NGVhLTRlMzMtYWYzZS0yMTJhYmUwZmM2MjgvMzBiMjllYzgtYzUzOC0z
ZDE4LWI5NDQtM2I0MDY2MmY3MzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWI2ZmQyNjItOTRlYS00ZTMzLWFm
M2UtMjEyYWJlMGZjNjI4LzViNmZkMjYyLTk0ZWEtNGUzMy1hZjNlLTIxMmFiZTBm
YzYyOC5jcmwwHwYDVR0jBBgwFoAUNjzIUHmlbKUy9HhU//w8/Bj4M/cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC81YjZmZDI2Mi05NGVhLTRlMzMtYWYzZS0yMTJh
YmUwZmM2MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjzcHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGobjDR/3KAVjdVUbY6mvQpLWTaP+h7A+lXcRS5MPuDXt4UFOw/iFump
9BPDAfy+lbJygRuv0BSTSq2dY3IISHSaWqqOoRcDL6YEMWF+7/Q/wfFgkEBB3L4j
+zOX+Aot/oEc9NnPPhiFYO4Q1xXnJyrgiMOYcChdE8Xn+DqwvhhAKvOKVAVwq0tP
iCGSeY46ogvi9MFIVsZqPmyu18zVZw8lc0Mq2ure/v9NQJqo85t/h83CN7/D2McT
sxgAEq3aDhwwOzzWmdrc/8ZHDQQkKW3ReBQk3cZeSToxJresP6uPhhdlxAdUKpaa
Z7oSvkfIQY3g9JMan+vwxLi9nbuGR/E=
-----END CERTIFICATE-----
Generated at Sat Aug 1 11:41:13 2026 by rpki-client