Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d8996fb7-cb02-3778-aba5-3987918169be.roa
File:                     d8996fb7-cb02-3778-aba5-3987918169be.roa (raw, json)
Hash identifier:          7vLwVXeyOPkKpRUg34veoSn4IEW9FCs57uU/4TBqshc=
Subject key identifier:   29:7C:DC:9F:83:61:00:FA:D6:FD:8E:18:1E:14:D8:A3:C2:BB:D1:E6
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584EA787F207CED2193D7173B300
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d8996fb7-cb02-3778-aba5-3987918169be.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     395075
IP address blocks:        216.113.68.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:f2:07:ce:d2:19:3d:71:73:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=333718cc-c83d-45e4-a9cf-8f998a21b2b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f3:38:a7:6a:36:7f:50:7b:82:e3:68:b7:0a:
                    63:aa:f5:07:1e:70:5a:ef:7e:45:d9:2a:b0:11:2f:
                    0e:0f:3d:5d:03:05:50:f4:7a:ae:b6:d6:0c:27:e3:
                    eb:ef:54:e7:24:f4:bd:67:ea:0e:76:bf:f1:cb:1a:
                    76:37:6a:a8:b2:e4:56:cb:1a:13:60:d0:6c:3d:f2:
                    89:a1:02:78:56:04:ee:68:c7:1e:b1:2f:37:7a:62:
                    88:97:18:0b:0e:ab:81:d6:55:2a:6d:75:6a:43:7f:
                    81:bd:a2:64:81:e9:73:b1:ad:f3:a4:c6:43:ad:1d:
                    08:e5:ed:f5:cb:19:d0:fd:87:2b:7a:4f:7a:c9:e4:
                    42:2f:92:99:ab:c1:96:5a:d7:7b:3d:94:9e:70:86:
                    04:43:10:6d:d5:47:c7:f7:27:69:91:ed:35:a8:15:
                    82:0b:b1:46:12:83:ab:66:e6:2e:a6:52:cd:87:21:
                    56:0b:d9:c0:26:41:b3:81:15:df:ec:b9:c5:90:f2:
                    a7:ae:af:68:b1:2b:fd:1b:91:60:51:49:22:b1:fe:
                    90:ea:27:bd:6a:71:0b:e1:ae:a7:49:c3:6e:1f:9b:
                    b7:d0:58:4e:31:ed:b3:60:5f:dc:39:f6:a9:80:20:
                    02:d1:c5:36:56:84:5d:6a:55:00:5c:34:fb:94:a3:
                    40:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7C:DC:9F:83:61:00:FA:D6:FD:8E:18:1E:14:D8:A3:C2:BB:D1:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d8996fb7-cb02-3778-aba5-3987918169be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.113.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ef:97:75:94:ea:bf:c1:dd:91:4f:f6:cc:74:93:cc:9b:21:
         fa:71:8a:af:39:93:a9:19:c6:f3:07:3f:3b:8d:2a:55:92:5d:
         30:0b:cc:9c:81:28:59:f8:9b:0b:37:ea:30:2a:4e:9e:74:e3:
         67:c7:d2:7b:86:4f:be:ba:a0:24:f9:99:81:41:3e:e1:6b:94:
         af:08:b9:b9:af:a5:d1:34:3f:70:57:c5:55:da:36:af:e7:6c:
         0f:57:29:19:9a:78:a0:ce:d8:48:cb:c2:3e:90:70:33:ce:4a:
         bd:1e:c0:32:d8:ce:8d:5a:5a:8c:23:ca:2c:ac:d6:3d:2e:0e:
         b5:b5:14:36:8f:46:63:23:3d:6b:2d:28:ab:07:70:af:24:8e:
         6e:73:7c:5a:02:8f:88:1d:90:10:2e:37:b7:0d:14:50:9f:e3:
         90:e5:28:e5:5b:af:08:23:4e:e6:ad:6d:c4:d7:77:4a:21:16:
         5b:6c:e9:28:df:c2:62:c0:fc:93:44:f2:ad:44:d8:90:d1:eb:
         e5:ee:c7:7c:fd:f0:68:13:5a:5e:43:81:65:a4:55:f2:f7:19:
         0e:d5:75:f1:62:c6:aa:3c:40:22:83:50:de:2e:63:07:98:24:
         90:0f:e0:ad:35:3f:41:71:30:03:b4:ed:df:06:0d:65:f6:1c:
         bb:85:1b:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh/IHztIZPXFzswAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MzMzNzE4Y2MtYzgzZC00NWU0LWE5Y2YtOGY5OThhMjFiMmI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPM4p2o2f1B7guNotwpjqvUHHnBa735F2Sqw
ES8ODz1dAwVQ9HquttYMJ+Pr71TnJPS9Z+oOdr/xyxp2N2qosuRWyxoTYNBsPfKJ
oQJ4VgTuaMcesS83emKIlxgLDquB1lUqbXVqQ3+BvaJkgelzsa3zpMZDrR0I5e31
yxnQ/Ycrek96yeRCL5KZq8GWWtd7PZSecIYEQxBt1UfH9ydpke01qBWCC7FGEoOr
ZuYuplLNhyFWC9nAJkGzgRXf7LnFkPKnrq9osSv9G5FgUUkisf6Q6ie9anEL4a6n
ScNuH5u30FhOMe2zYF/cOfapgCAC0cU2VoRdalUAXDT7lKNAIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCl83J+DYQD61v2OGB4U2KPCu9HmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvZDg5OTZmYjctY2IwMi0z
Nzc4LWFiYTUtMzk4NzkxODE2OWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2HFEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH7vl3WU6r/B3ZFP9sx0k8ybIfpxiq85k6kZxvMHPzuNKlWSXTALzJyB
KFn4mws36jAqTp5042fH0nuGT766oCT5mYFBPuFrlK8IubmvpdE0P3BXxVXaNq/n
bA9XKRmaeKDO2EjLwj6QcDPOSr0ewDLYzo1aWowjyiys1j0uDrW1FDaPRmMjPWst
KKsHcK8kjm5zfFoCj4gdkBAuN7cNFFCf45DlKOVbrwgjTuatbcTXd0ohFlts6Sjf
wmLA/JNE8q1E2JDR6+Xux3z98GgTWl5DgWWkVfL3GQ7VdfFixqo8QCKDUN4uYweY
JJAP4K01P0FxMAO07d8GDWX2HLuFG1E=
-----END CERTIFICATE-----
Generated at Sat Aug 8 22:40:28 2026 by rpki-client