Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d86e0241-4b3a-31de-b4b7-01ad7c3fcb55.roa
File:                     d86e0241-4b3a-31de-b4b7-01ad7c3fcb55.roa (raw, json)
Hash identifier:          JlrPrWNlr+84qJ7RhQ3l+rfPfbLfTUSHdWWSpxVggVA=
Subject key identifier:   5C:D7:04:3D:41:2F:7E:33:69:AE:9D:E8:7C:A9:D1:9E:B6:E6:DB:B6
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584DC135C7DBA49C01F61E29B140
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d86e0241-4b3a-31de-b4b7-01ad7c3fcb55.roa
Signing time:             Thu 07 May 2026 13:00:31 +0000
ROA not before:           Thu 07 May 2026 13:00:31 +0000
ROA not after:            Wed 05 Aug 2026 13:00:31 +0000
asID:                     22652
IP address blocks:        199.167.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:35:c7:db:a4:9c:01:f6:1e:29:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: May  7 13:00:31 2026 GMT
            Not After : Aug  5 13:00:31 2026 GMT
        Subject: CN=fd189124-2425-40e0-9a50-572a6fd83942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:da:85:08:4e:e1:1e:8f:a3:1f:76:dc:83:c4:
                    f3:f6:38:9e:f1:60:02:c5:91:5d:2a:b1:81:c5:fa:
                    1f:e3:dd:07:dd:99:7f:3c:d7:0d:05:24:16:91:a4:
                    34:1f:e5:1e:86:1a:61:47:b3:29:41:4e:1e:d4:aa:
                    95:f5:3a:08:5a:36:55:a4:1f:1a:04:64:c8:05:bf:
                    f8:1a:01:b9:41:71:3e:93:bf:02:fe:e3:db:f3:4f:
                    6b:2f:09:64:60:f1:1e:63:2c:e6:3b:ee:72:33:1c:
                    ce:62:f6:83:e3:ea:42:7b:4e:65:57:67:61:da:ed:
                    2a:12:fd:54:9a:4e:6a:a4:80:80:30:f4:a0:95:63:
                    34:7f:a8:6f:4f:bd:55:8d:ea:ef:21:58:69:5e:cb:
                    d0:c2:d1:80:82:d4:3f:53:a0:4c:e9:74:12:80:11:
                    e8:a3:41:0d:36:69:50:d7:c6:9e:f7:d8:92:62:61:
                    63:f9:80:6f:cd:64:c1:92:94:e4:c8:5f:cc:ad:9d:
                    08:a4:fe:c5:0d:56:14:65:dd:80:ba:4f:fd:84:d8:
                    d4:6c:93:ce:d7:f7:87:96:6f:a2:74:72:0a:3e:89:
                    22:34:72:c3:90:b9:f7:09:6a:31:bc:4b:45:7b:3d:
                    d4:c1:f2:90:2e:38:f7:c3:39:00:93:42:32:b4:1e:
                    85:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D7:04:3D:41:2F:7E:33:69:AE:9D:E8:7C:A9:D1:9E:B6:E6:DB:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d86e0241-4b3a-31de-b4b7-01ad7c3fcb55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:b2:c9:55:da:93:d3:37:59:8f:49:12:5c:8a:0e:1e:fc:68:
         e8:e9:bc:28:38:f0:e5:62:eb:15:9d:09:ec:f8:93:12:87:ea:
         14:11:a0:d9:a9:25:47:ce:43:fe:0e:91:62:32:b4:67:87:6f:
         cf:45:ea:22:47:52:19:ee:9d:f7:2c:0c:24:3a:bc:dd:e6:18:
         4d:5c:46:ca:04:6d:4b:95:a2:88:fa:e2:6a:27:f7:46:3e:73:
         42:82:df:78:e8:d0:14:78:e5:f9:4d:fb:7b:96:7e:a5:93:40:
         e0:03:72:b5:3f:90:ab:8a:ff:93:36:b7:14:da:e8:7f:c1:aa:
         93:c5:fc:7c:03:ba:bf:30:c2:10:f7:ef:d3:a4:61:7e:c9:4a:
         e2:b2:bf:5e:f8:ee:ca:a1:88:5c:60:33:ec:69:3a:64:f9:c5:
         a5:fa:4d:4d:15:c7:ae:47:b1:75:3d:47:90:36:96:ff:df:6f:
         0f:eb:10:4d:05:f1:86:8a:96:9c:a0:ab:ca:ec:d7:8d:a3:ae:
         fb:99:89:23:e2:11:47:c4:22:02:5e:a8:1c:18:82:a0:a8:bb:
         e8:b8:43:2b:3c:b4:5f:10:a6:f1:5d:08:31:90:2e:18:c7:47:
         55:5b:da:05:32:80:66:81:e1:7e:c6:57:01:75:68:2d:57:de:
         36:3a:bc:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3BNcfbpJwB9h4psUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI2MDUwNzEzMDAzMVoXDTI2MDgwNTEzMDAzMVowLzEtMCsGA1UEAxMk
ZmQxODkxMjQtMjQyNS00MGUwLTlhNTAtNTcyYTZmZDgzOTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttqFCE7hHo+jH3bcg8Tz9jie8WACxZFdKrGB
xfof490H3Zl/PNcNBSQWkaQ0H+UehhphR7MpQU4e1KqV9ToIWjZVpB8aBGTIBb/4
GgG5QXE+k78C/uPb809rLwlkYPEeYyzmO+5yMxzOYvaD4+pCe05lV2dh2u0qEv1U
mk5qpICAMPSglWM0f6hvT71VjervIVhpXsvQwtGAgtQ/U6BM6XQSgBHoo0ENNmlQ
18ae99iSYmFj+YBvzWTBkpTkyF/MrZ0IpP7FDVYUZd2Auk/9hNjUbJPO1/eHlm+i
dHIKPokiNHLDkLn3CWoxvEtFez3UwfKQLjj3wzkAk0IytB6F2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFzXBD1BL34zaa6d6Hyp0Z625tu2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvZDg2ZTAyNDEtNGIzYS0z
MWRlLWI0YjctMDFhZDdjM2ZjYjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx6doMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADCyyVXak9M3WY9JElyKDh78aOjpvCg48OVi6xWdCez4kxKH6hQRoNmp
JUfOQ/4OkWIytGeHb89F6iJHUhnunfcsDCQ6vN3mGE1cRsoEbUuVooj64mon90Y+
c0KC33jo0BR45flN+3uWfqWTQOADcrU/kKuK/5M2txTa6H/BqpPF/HwDur8wwhD3
79OkYX7JSuKyv1747sqhiFxgM+xpOmT5xaX6TU0Vx65HsXU9R5A2lv/fbw/rEE0F
8YaKlpygq8rs142jrvuZiSPiEUfEIgJeqBwYgqCou+i4Qys8tF8QpvFdCDGQLhjH
R1Vb2gUygGaB4X7GVwF1aC1X3jY6vKg=
-----END CERTIFICATE-----
Generated at Sat May 9 19:31:20 2026 by rpki-client