Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/1a5c1871-08d5-32c6-b27c-f0ef66438ab9.roa
File:                     1a5c1871-08d5-32c6-b27c-f0ef66438ab9.roa (raw, json)
Hash identifier:          nL+9MQREvKBOvlX6i0YliyC0y8hSHQdPX8405anmFQg=
Subject key identifier:   CD:65:A1:97:CA:50:82:CF:13:38:60:AF:C8:D2:15:31:D5:ED:41:2C
Certificate issuer:       /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
Certificate serial:       010D0C9F4328584EA787A62E4643406D505C0500
Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/1a5c1871-08d5-32c6-b27c-f0ef66438ab9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396185
IP address blocks:        74.127.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:a6:2e:46:43:40:6d:50:5c:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1a6d7c29-eb3b-416a-af9e-f5c14644b86d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6c:3d:31:67:ea:d0:25:e3:a1:d6:f5:05:d2:
                    19:da:a9:9c:f0:60:c2:b4:53:27:e2:5d:30:2a:5b:
                    4a:af:64:59:3f:f6:ef:b5:f7:78:4a:e4:d8:9b:47:
                    6d:29:11:09:bb:31:23:58:2b:4f:ab:12:65:09:4c:
                    42:39:f5:99:c8:28:93:dc:65:62:d0:3f:e1:41:48:
                    f3:e2:e6:27:2f:ce:26:80:fa:f4:7d:87:1b:0a:58:
                    62:51:0e:da:61:bd:53:6c:09:6e:21:8a:ba:43:8a:
                    6e:8a:b5:06:08:53:79:4d:64:fa:9c:c6:e8:35:f3:
                    8c:d2:ea:e1:98:1a:9c:79:d2:2a:34:78:6b:30:4c:
                    2f:0f:3c:39:e4:1f:75:e1:58:0c:eb:40:69:e9:53:
                    70:03:78:d9:03:8c:d0:be:8b:03:28:dd:f5:e5:a2:
                    4b:0f:75:71:e7:d3:c0:38:b2:f1:3b:c9:f8:6d:b0:
                    e6:4e:90:da:3a:3e:db:be:14:d4:b1:43:da:36:9a:
                    f3:e8:b8:9a:3e:14:9c:56:41:0f:2f:f4:af:c9:24:
                    ed:04:bb:9d:f2:dd:7f:0a:26:89:df:f1:4f:de:c0:
                    e1:f4:c6:65:3d:d2:53:76:4b:7a:fc:e2:8b:8d:9f:
                    47:08:2a:93:95:03:01:04:d2:52:1f:e5:89:87:70:
                    b3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:65:A1:97:CA:50:82:CF:13:38:60:AF:C8:D2:15:31:D5:ED:41:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/1a5c1871-08d5-32c6-b27c-f0ef66438ab9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl

            X509v3 Authority Key Identifier:
                keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.127.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:2c:48:4e:4d:f1:1a:73:a3:3a:79:98:51:23:c1:f9:f6:bb:
         81:4a:9f:b3:c7:72:71:39:6f:57:7d:ba:94:93:01:cf:62:bc:
         77:77:e4:dd:bc:4c:d6:04:3a:b8:3d:e0:f5:91:6c:9a:0c:12:
         9c:cb:a9:f6:78:09:18:da:d4:68:22:a8:7c:cb:7b:58:ad:c8:
         59:45:a4:22:5d:af:a0:bf:07:20:69:fa:11:fa:d5:8c:58:9f:
         79:3e:40:93:77:a5:66:0a:9c:15:fa:d1:49:cd:65:7b:7e:0a:
         26:d1:11:3a:3e:fc:30:83:e8:e2:9e:40:17:1a:10:ed:ea:3c:
         9d:c7:0e:78:70:aa:37:56:af:0a:3e:d1:fe:5e:ec:58:eb:e1:
         cd:ef:b9:81:a8:ad:62:3f:ad:1c:66:c5:7c:89:96:a4:f7:04:
         70:ed:f4:a4:72:9f:c9:cc:bc:9d:b5:87:a1:c5:1c:7b:9d:68:
         28:b4:12:7c:87:64:f7:2b:bd:1e:9a:f7:1a:d5:8e:78:66:cb:
         cb:1d:29:80:c7:d8:fd:59:a3:2c:13:87:90:64:bb:f6:21:29:
         ae:2a:b4:84:bd:3a:01:b6:ba:1a:76:09:3d:77:ca:d0:89:f2:
         75:18:99:7c:49:df:80:bf:ec:8f:e4:e3:15:b1:cb:0a:7a:82:
         77:f6:8b:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh6YuRkNAbVBcBQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm
YTExMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MWE2ZDdjMjktZWIzYi00MTZhLWFmOWUtZjVjMTQ2NDRiODZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2w9MWfq0CXjodb1BdIZ2qmc8GDCtFMn4l0w
KltKr2RZP/bvtfd4SuTYm0dtKREJuzEjWCtPqxJlCUxCOfWZyCiT3GVi0D/hQUjz
4uYnL84mgPr0fYcbClhiUQ7aYb1TbAluIYq6Q4puirUGCFN5TWT6nMboNfOM0urh
mBqcedIqNHhrMEwvDzw55B914VgM60Bp6VNwA3jZA4zQvosDKN315aJLD3Vx59PA
OLLxO8n4bbDmTpDaOj7bvhTUsUPaNprz6LiaPhScVkEPL/SvySTtBLud8t1/CiaJ
3/FP3sDh9MZlPdJTdkt6/OKLjZ9HCCqTlQMBBNJSH+WJh3CztwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM1loZfKUILPEzhgr8jSFTHV7UEsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw
ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvMWE1YzE4NzEtMDhkNS0z
MmM2LWIyN2MtZjBlZjY2NDM4YWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1
YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk
ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5
NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSn9QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKwsSE5N8Rpzozp5mFEjwfn2u4FKn7PHcnE5b1d9upSTAc9ivHd35N28
TNYEOrg94PWRbJoMEpzLqfZ4CRja1GgiqHzLe1ityFlFpCJdr6C/ByBp+hH61YxY
n3k+QJN3pWYKnBX60UnNZXt+CibRETo+/DCD6OKeQBcaEO3qPJ3HDnhwqjdWrwo+
0f5e7Fjr4c3vuYGorWI/rRxmxXyJlqT3BHDt9KRyn8nMvJ21h6HFHHudaCi0EnyH
ZPcrvR6a9xrVjnhmy8sdKYDH2P1ZoywTh5Bku/YhKa4qtIS9OgG2uhp2CT13ytCJ
8nUYmXxJ34C/7I/k4xWxywp6gnf2i2w=
-----END CERTIFICATE-----
Generated at Fri Sep 11 15:43:38 2026 by rpki-client