Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/ab72ae7a-bbb6-383b-bcd5-f0c98c0ab346.roa
File:                     ab72ae7a-bbb6-383b-bcd5-f0c98c0ab346.roa (raw, json)
Hash identifier:          WRaH5cEfS7rLE6UZ4m37X7pze+doziZjaP3wvhSKHF4=
Subject key identifier:   F5:31:89:34:E5:18:F7:44:AA:A8:57:CD:6B:90:00:56:33:C9:DA:4E
Certificate issuer:       /CN=7aeb1cf3-9b67-4e65-93ee-39960a392b68
Certificate serial:       010D0C9F4328584ECA6C72633B89F71F62459300
Authority key identifier: 69:61:30:F5:96:DC:44:BC:35:07:F4:81:95:8A:64:32:64:F8:7C:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/ab72ae7a-bbb6-383b-bcd5-f0c98c0ab346.roa
Signing time:             Mon 10 Aug 2026 13:00:12 +0000
ROA not before:           Mon 10 Aug 2026 13:00:12 +0000
ROA not after:            Sun 08 Nov 2026 14:00:12 +0000
asID:                     11399
IP address blocks:        137.165.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/7aeb1cf3-9b67-4e65-93ee-39960a392b68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/7aeb1cf3-9b67-4e65-93ee-39960a392b68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:6c:72:63:3b:89:f7:1f:62:45:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aeb1cf3-9b67-4e65-93ee-39960a392b68
        Validity
            Not Before: Aug 10 13:00:12 2026 GMT
            Not After : Nov  8 14:00:12 2026 GMT
        Subject: CN=ef5b8f5d-e1aa-4f33-a6e3-34596462e207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:10:ab:1d:cd:84:eb:cd:48:68:ac:3e:9e:17:
                    0a:57:ab:8e:9d:f3:2d:cc:0e:76:b3:f5:b1:16:e2:
                    eb:fa:0b:f0:30:98:a0:1d:65:c0:0e:0a:d7:79:2f:
                    1f:29:c5:fc:04:99:e3:29:0c:11:00:42:96:29:68:
                    0d:74:1d:fb:5f:f0:cc:de:0a:31:32:bd:6a:1b:93:
                    b0:90:6c:0c:93:35:be:cb:01:a0:86:fe:c9:e2:64:
                    40:cc:fa:97:15:28:a7:e8:1a:dc:32:0b:70:7d:7f:
                    6b:58:b9:d9:60:06:b3:7a:99:b7:8f:20:f9:3c:d9:
                    6c:0f:b2:20:46:df:9e:1b:62:cc:cc:e9:ac:85:1d:
                    c2:5b:c8:40:1f:35:2f:7f:32:be:16:c9:ab:24:cb:
                    30:a7:83:bb:53:29:f4:f1:dc:98:95:a4:d4:c1:7a:
                    98:ec:f0:73:c0:f8:b2:f9:8c:03:52:88:16:6f:71:
                    70:b6:22:98:8b:66:ae:c7:67:f0:ad:41:e7:2e:42:
                    a7:f4:b0:3e:5b:8e:1e:e5:5e:4b:e6:03:a0:9f:69:
                    24:9f:1b:be:2f:2d:50:98:fe:33:d2:7d:d2:e7:09:
                    36:19:40:3d:2b:6a:73:37:fc:88:e0:d6:4e:ca:e7:
                    e5:3e:76:e4:9d:71:e9:00:23:e6:9a:38:a7:14:cf:
                    b4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:31:89:34:E5:18:F7:44:AA:A8:57:CD:6B:90:00:56:33:C9:DA:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/ab72ae7a-bbb6-383b-bcd5-f0c98c0ab346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68/7aeb1cf3-9b67-4e65-93ee-39960a392b68.crl

            X509v3 Authority Key Identifier:
                keyid:69:61:30:F5:96:DC:44:BC:35:07:F4:81:95:8A:64:32:64:F8:7C:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7aeb1cf3-9b67-4e65-93ee-39960a392b68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.165.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:0f:92:fc:eb:fe:a9:62:ce:05:96:13:83:50:ba:b8:5e:a4:
         7b:b3:09:94:1f:56:c4:a6:41:13:6e:c8:4a:69:31:09:9d:29:
         b6:63:5b:90:87:63:19:4c:c8:d3:3e:97:07:b7:85:a9:17:cb:
         7a:51:08:67:77:e9:e6:bc:8a:fb:be:12:31:e0:4c:34:a1:3e:
         90:e4:23:a6:85:85:15:29:cd:ef:a3:02:99:fe:5f:fc:bc:4b:
         81:cc:29:cd:d4:d0:b3:1c:5c:80:68:04:ff:8b:58:f0:4e:3d:
         67:9f:3f:56:c3:4f:4a:bb:e9:7f:e1:7b:81:a9:ab:93:d4:66:
         a6:ea:11:2f:4c:70:fa:19:78:b6:73:3c:3c:42:d2:be:9b:03:
         48:40:70:ae:7d:29:02:d0:02:19:d2:c0:eb:c9:11:81:7a:4e:
         ad:30:9d:96:5a:b5:26:cc:18:d3:76:ab:72:40:0c:7f:f8:cd:
         52:0a:b3:09:90:de:b1:11:d5:1e:7c:62:73:13:50:b1:67:38:
         08:3d:11:26:e2:6f:27:30:4b:5b:70:b2:56:2a:ab:6d:ae:0a:
         4e:41:23:e0:6e:a2:69:dd:5e:c7:5f:58:65:21:98:ff:f7:b4:
         00:30:8a:de:ac:c2:96:92:fa:60:8a:9b:b5:5a:47:cd:85:e6:
         9a:fc:b6:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KbHJjO4n3H2JFkwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2FlYjFjZjMtOWI2Ny00ZTY1LTkzZWUtMzk5NjBhMzky
YjY4MB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk
ZWY1YjhmNWQtZTFhYS00ZjMzLWE2ZTMtMzQ1OTY0NjJlMjA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BCrHc2E681IaKw+nhcKV6uOnfMtzA52s/Wx
FuLr+gvwMJigHWXADgrXeS8fKcX8BJnjKQwRAEKWKWgNdB37X/DM3goxMr1qG5Ow
kGwMkzW+ywGghv7J4mRAzPqXFSin6BrcMgtwfX9rWLnZYAazepm3jyD5PNlsD7Ig
Rt+eG2LMzOmshR3CW8hAHzUvfzK+FsmrJMswp4O7Uyn08dyYlaTUwXqY7PBzwPiy
+YwDUogWb3FwtiKYi2aux2fwrUHnLkKn9LA+W44e5V5L5gOgn2kknxu+Ly1QmP4z
0n3S5wk2GUA9K2pzN/yI4NZOyuflPnbknXHpACPmmjinFM+0hQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPUxiTTlGPdEqqhXzWuQAFYzydpOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83YWVi
MWNmMy05YjY3LTRlNjUtOTNlZS0zOTk2MGEzOTJiNjgvYWI3MmFlN2EtYmJiNi0z
ODNiLWJjZDUtZjBjOThjMGFiMzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvN2FlYjFjZjMtOWI2Ny00ZTY1LTkz
ZWUtMzk5NjBhMzkyYjY4LzdhZWIxY2YzLTliNjctNGU2NS05M2VlLTM5OTYwYTM5
MmI2OC5jcmwwHwYDVR0jBBgwFoAUaWEw9ZbcRLw1B/SBlYpkMmT4fKowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83YWViMWNmMy05YjY3LTRlNjUtOTNlZS0zOTk2
MGEzOTJiNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHiaUAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIsPkvzr/qlizgWWE4NQurhepHuzCZQfVsSmQRNuyEppMQmdKbZjW5CH
YxlMyNM+lwe3hakXy3pRCGd36ea8ivu+EjHgTDShPpDkI6aFhRUpze+jApn+X/y8
S4HMKc3U0LMcXIBoBP+LWPBOPWefP1bDT0q76X/he4Gpq5PUZqbqES9McPoZeLZz
PDxC0r6bA0hAcK59KQLQAhnSwOvJEYF6Tq0wnZZatSbMGNN2q3JADH/4zVIKswmQ
3rER1R58YnMTULFnOAg9ESbibycwS1twslYqq22uCk5BI+BuomndXsdfWGUhmP/3
tAAwit6swpaS+mCKm7VaR82F5pr8tjg=
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:43:25 2026 by rpki-client