Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5c31a71f-7b3a-3f40-88c6-6a5dada80741.roa
File:                     5c31a71f-7b3a-3f40-88c6-6a5dada80741.roa (raw, json)
Hash identifier:          AWpQPD4TYVTcaDE15NDvr77z05xr8RLEl0tImomWXbc=
Subject key identifier:   8D:3D:A3:C1:5A:9A:39:5A:04:84:65:E6:3E:D9:3A:19:7D:CD:32:26
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584EA787F09EBDF20C9CD1713430
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5c31a71f-7b3a-3f40-88c6-6a5dada80741.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22652
IP address blocks:        198.154.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:f0:9e:bd:f2:0c:9c:d1:71:34:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a71bb0af-c2d9-48b5-9b40-76bbf6b89be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4d:92:08:25:f0:48:dc:da:5f:04:56:10:1c:
                    b5:20:6b:d6:57:90:74:53:79:6c:99:55:f3:3e:5f:
                    25:35:25:ba:03:f1:f1:dd:10:1e:0d:77:5d:6b:10:
                    a3:6a:ed:91:f3:74:ed:6e:23:60:59:c7:7a:b3:df:
                    e5:98:19:a5:60:48:6e:60:84:3b:3f:52:8c:ef:b1:
                    98:ac:d9:8c:44:9c:94:27:1c:90:68:35:e4:a3:7f:
                    9d:35:38:79:b4:3c:1b:e4:7e:67:3a:ec:75:69:ce:
                    5d:fc:5a:21:62:ea:ae:34:60:8e:20:34:a1:3f:8b:
                    73:35:7b:85:09:5f:d0:ee:5c:3b:1b:2d:5d:cd:a2:
                    95:a7:0e:11:d8:1d:66:ec:5a:94:06:4c:85:c0:dd:
                    f4:f8:b8:ff:d5:98:6a:17:46:51:30:36:7a:92:2b:
                    4a:e9:c5:5e:ec:96:a1:91:a2:67:3f:02:a4:66:36:
                    09:1b:43:da:6f:80:26:f8:a6:0e:76:fc:0d:22:42:
                    1e:1d:9e:95:50:aa:d6:f8:42:5b:8c:40:5e:5e:de:
                    76:e6:a7:a6:45:03:81:1d:e0:bb:67:bd:50:3d:a2:
                    48:13:58:8a:a2:af:1f:c1:46:c8:e4:67:c1:fb:9a:
                    a5:ca:fc:74:f8:fa:cc:63:b7:77:74:74:d2:76:3b:
                    d4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3D:A3:C1:5A:9A:39:5A:04:84:65:E6:3E:D9:3A:19:7D:CD:32:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/5c31a71f-7b3a-3f40-88c6-6a5dada80741.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.154.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:c0:06:bc:fe:02:4a:fd:90:08:45:ec:d9:c8:3b:c8:02:33:
         f9:f7:be:a6:ac:f4:45:0e:8d:2d:82:4c:44:65:c2:06:98:72:
         16:0d:c2:8b:9c:3b:67:e0:84:69:59:e7:fd:d9:ad:d2:d7:8b:
         bc:0a:d8:2d:d0:0b:b1:8a:03:f8:0c:8c:4c:37:e1:b8:62:a9:
         4f:70:ea:e0:d6:27:ca:e2:53:81:7f:75:95:77:84:06:f4:19:
         57:38:ca:b8:6c:e5:74:c7:fe:fe:3b:36:e0:db:91:ef:5f:31:
         ad:26:2a:e8:02:ac:a7:29:7f:6e:ae:01:6e:ed:58:e2:cc:46:
         30:83:f3:37:03:d3:8c:fe:aa:db:36:4f:61:2f:bb:13:d8:f3:
         a0:a2:2b:3f:67:ee:ca:3c:39:a4:e1:90:c0:35:f9:a0:82:38:
         1c:e4:64:f6:a7:91:f7:28:82:bc:fd:7e:e2:29:4a:d9:bd:c2:
         85:74:f1:36:f2:f9:cd:3e:49:f9:8f:4a:13:52:56:9d:fd:85:
         a3:55:b0:e8:0d:34:f3:d1:3f:fe:3e:d5:de:dc:40:14:6a:20:
         d4:b2:23:eb:35:f6:13:83:f1:7c:13:f1:b0:0a:58:dc:c9:5b:
         9f:4b:7f:ff:73:4a:a0:3e:44:ea:59:b3:0f:89:ab:35:8d:cd:
         e6:b2:07:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh/CevfIMnNFxNDAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YTcxYmIwYWYtYzJkOS00OGI1LTliNDAtNzZiYmY2Yjg5YmU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU2SCCXwSNzaXwRWEBy1IGvWV5B0U3lsmVXz
Pl8lNSW6A/Hx3RAeDXddaxCjau2R83TtbiNgWcd6s9/lmBmlYEhuYIQ7P1KM77GY
rNmMRJyUJxyQaDXko3+dNTh5tDwb5H5nOux1ac5d/FohYuquNGCOIDShP4tzNXuF
CV/Q7lw7Gy1dzaKVpw4R2B1m7FqUBkyFwN30+Lj/1ZhqF0ZRMDZ6kitK6cVe7Jah
kaJnPwKkZjYJG0Pab4Am+KYOdvwNIkIeHZ6VUKrW+EJbjEBeXt525qemRQOBHeC7
Z71QPaJIE1iKoq8fwUbI5GfB+5qlyvx0+PrMY7d3dHTSdjvUsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI09o8FamjlaBIRl5j7ZOhl9zTImMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvNWMzMWE3MWYtN2IzYS0z
ZjQwLTg4YzYtNmE1ZGFkYTgwNzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxpq8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHnABrz+Akr9kAhF7NnIO8gCM/n3vqas9EUOjS2CTERlwgaYchYNwouc
O2fghGlZ5/3ZrdLXi7wK2C3QC7GKA/gMjEw34bhiqU9w6uDWJ8riU4F/dZV3hAb0
GVc4yrhs5XTH/v47NuDbke9fMa0mKugCrKcpf26uAW7tWOLMRjCD8zcD04z+qts2
T2EvuxPY86CiKz9n7so8OaThkMA1+aCCOBzkZPankfcogrz9fuIpStm9woV08Tby
+c0+SfmPShNSVp39haNVsOgNNPPRP/4+1d7cQBRqINSyI+s19hOD8XwT8bAKWNzJ
W59Lf/9zSqA+ROpZsw+JqzWNzeayB1k=
-----END CERTIFICATE-----
Generated at Sat Aug 8 22:39:47 2026 by rpki-client