Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f29d49e4-5385-3af0-8fcf-e6f0aca32976.roa
File:                     f29d49e4-5385-3af0-8fcf-e6f0aca32976.roa (raw, json)
Hash identifier:          b79+8qzSPsdXtoAww1PgdPbBZkWR79CmyTe0/XV8m8Q=
Subject key identifier:   B7:CD:76:B6:AC:CF:14:85:62:19:E5:6D:52:38:06:63:88:56:94:0F
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584DFA7077D4EB42BF268CA266C0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f29d49e4-5385-3af0-8fcf-e6f0aca32976.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     55035
IP address blocks:        69.9.252.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 30 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:77:d4:eb:42:bf:26:8c:a2:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=fe8ef418-72dc-4091-a792-30003d1c5790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2c:7f:1a:7d:fe:e7:30:97:b0:6b:6f:cd:8a:
                    03:de:84:1c:b8:a9:9a:05:a7:31:50:c8:f0:59:d4:
                    ef:35:c9:6f:29:f3:4c:64:bc:ef:2e:e7:bb:6d:28:
                    b0:c1:11:31:a2:f5:1d:9e:d1:1e:07:f0:56:42:c4:
                    8c:de:22:a6:aa:5d:83:22:af:60:b8:88:af:30:de:
                    2f:f5:7e:b9:ba:6f:8b:24:3e:6d:98:ca:34:38:60:
                    6e:fc:69:32:25:af:2c:f1:51:29:87:fa:4f:ab:58:
                    f8:74:20:c6:c9:e2:bc:dc:56:32:7b:e2:ed:62:47:
                    40:17:4d:03:7e:8c:d2:c5:db:25:33:4e:77:a9:17:
                    f3:77:b4:a5:29:88:4a:f9:97:12:cd:74:df:92:aa:
                    13:7b:0e:63:92:19:09:7c:07:86:04:28:9e:f5:e1:
                    a3:58:82:49:bc:31:56:8d:d9:f4:18:26:94:2e:c2:
                    37:eb:bc:0a:ef:8b:6f:87:2c:3c:47:39:c0:8c:20:
                    68:93:fb:b4:16:e0:be:ba:d1:9e:d2:fd:8a:33:ec:
                    2d:a1:3a:f9:31:05:e6:49:e2:dd:ef:d2:03:d8:ae:
                    47:67:0c:db:86:37:ef:63:61:a7:01:1d:2c:35:2d:
                    da:e3:7d:f0:45:a9:b5:8d:b2:37:2d:27:7e:47:a3:
                    5c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CD:76:B6:AC:CF:14:85:62:19:E5:6D:52:38:06:63:88:56:94:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f29d49e4-5385-3af0-8fcf-e6f0aca32976.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.9.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:64:87:8c:35:6c:8e:11:aa:ae:33:7d:38:59:e0:6a:6e:41:
         e9:0d:bc:b6:a9:7d:70:ba:77:31:87:36:3d:b5:45:9c:89:c8:
         9f:20:1a:10:45:48:7a:34:1d:91:8e:25:36:b6:0f:37:82:76:
         71:72:ae:32:c3:89:f1:a6:37:6c:fe:53:45:01:f4:2f:bf:67:
         e4:79:d4:3e:f4:65:7e:8a:f7:89:8a:fb:3f:75:35:8a:11:77:
         77:c2:a1:24:b0:25:f5:8b:38:d8:47:d8:f0:04:b5:92:15:2d:
         8d:9e:8d:2d:42:22:aa:31:8c:40:35:92:2e:47:0c:42:31:5e:
         77:86:40:e6:aa:94:0f:ba:34:f3:88:38:83:01:a3:7d:ea:e0:
         ae:2e:fa:e1:4c:14:93:8e:c4:37:b1:af:fa:8a:23:7f:86:7f:
         bd:23:27:35:de:55:f4:b1:68:0f:dc:40:6a:b9:4d:19:ef:e5:
         e5:b7:ed:9a:fb:c7:50:f7:f9:e7:9b:ff:4f:1a:9b:7a:fe:fb:
         2c:51:95:7c:13:41:36:d6:9c:0a:03:56:07:2c:5b:81:e7:dc:
         d2:56:49:0d:22:6e:4a:b9:bf:44:ab:b1:34:f8:74:d5:0d:46:
         b3:e4:94:f4:a5:3d:5e:37:44:d9:bb:c1:80:f9:bf:94:3e:28:
         ae:d0:08:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cHfU60K/JoyiZsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0NjNiMmMtNTM4YS00ZjkzLWJmYTMtZmUxNjQzYTc3
MDg1MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk
ZmU4ZWY0MTgtNzJkYy00MDkxLWE3OTItMzAwMDNkMWM1NzkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgix/Gn3+5zCXsGtvzYoD3oQcuKmaBacxUMjw
WdTvNclvKfNMZLzvLue7bSiwwRExovUdntEeB/BWQsSM3iKmql2DIq9guIivMN4v
9X65um+LJD5tmMo0OGBu/GkyJa8s8VEph/pPq1j4dCDGyeK83FYye+LtYkdAF00D
fozSxdslM053qRfzd7SlKYhK+ZcSzXTfkqoTew5jkhkJfAeGBCie9eGjWIJJvDFW
jdn0GCaULsI367wK74tvhyw8RznAjCBok/u0FuC+utGe0v2KM+wtoTr5MQXmSeLd
79ID2K5HZwzbhjfvY2GnAR0sNS3a433wRam1jbI3LSd+R6NcnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLfNdraszxSFYhnlbVI4BmOIVpQPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2
M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2NDNhNzcwODUvZjI5ZDQ5ZTQtNTM4NS0z
YWYwLThmY2YtZTZmMGFjYTMyOTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2U0NjNiMmMtNTM4YS00ZjkzLWJm
YTMtZmUxNjQzYTc3MDg1LzdlNDYzYjJjLTUzOGEtNGY5My1iZmEzLWZlMTY0M2E3
NzA4NS5jcmwwHwYDVR0jBBgwFoAUKTDtD4WmAXovQr1AnODHkJQUF0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTQ2M2IyYy01MzhhLTRmOTMtYmZhMy1mZTE2
NDNhNzcwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRQn8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI5kh4w1bI4Rqq4zfThZ4GpuQekNvLapfXC6dzGHNj21RZyJyJ8gGhBF
SHo0HZGOJTa2DzeCdnFyrjLDifGmN2z+U0UB9C+/Z+R51D70ZX6K94mK+z91NYoR
d3fCoSSwJfWLONhH2PAEtZIVLY2ejS1CIqoxjEA1ki5HDEIxXneGQOaqlA+6NPOI
OIMBo33q4K4u+uFMFJOOxDexr/qKI3+Gf70jJzXeVfSxaA/cQGq5TRnv5eW37Zr7
x1D3+eeb/08am3r++yxRlXwTQTbWnAoDVgcsW4Hn3NJWSQ0ibkq5v0SrsTT4dNUN
RrPklPSlPV43RNm7wYD5v5Q+KK7QCEc=
-----END CERTIFICATE-----
Generated at Fri May 29 17:49:24 2026 by rpki-client