Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/f09ec41f-bf58-33da-8be5-009ba2270a35.roa
File:                     f09ec41f-bf58-33da-8be5-009ba2270a35.roa (raw, json)
Hash identifier:          UgEfponQcRE2K/+0oZGIUvPoodDRCSWMzWTF+D0HiLo=
Subject key identifier:   DF:E7:F0:D3:C9:B3:3D:1B:2F:BF:D0:B7:96:94:5B:25:73:C0:EE:07
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584EA78713BD4E7680A35870D680
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/f09ec41f-bf58-33da-8be5-009ba2270a35.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     5769
IP address blocks:        207.96.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:13:bd:4e:76:80:a3:58:70:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a5539b02-1a9e-4dac-8102-73b43f1899db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:18:c5:56:96:ca:17:80:09:b4:aa:32:5e:fc:
                    b7:9b:c5:49:fa:c6:28:9b:06:b5:dc:04:d1:39:ec:
                    bd:65:8c:e3:a1:dd:5c:ce:a8:93:e2:68:62:c2:16:
                    3d:a2:49:41:8e:af:1e:99:4f:54:82:63:e1:39:1a:
                    fe:41:eb:ce:89:48:f8:a8:41:7b:61:a7:3b:f8:fb:
                    e1:a8:12:2f:2b:81:d5:b0:7e:43:ef:fb:1a:46:35:
                    27:f1:76:92:2b:40:d8:46:bb:06:90:e6:16:21:5f:
                    ad:7b:9d:6e:a4:d0:85:d7:df:00:7c:48:20:e5:8a:
                    7f:b3:03:b0:4a:00:d9:c7:92:6a:97:ab:a4:1f:c7:
                    ee:db:7d:6c:1d:d9:c5:45:a9:93:e2:8d:5f:2d:46:
                    d8:d3:d2:ae:0d:96:f4:8c:a5:49:19:ee:e2:6e:48:
                    58:41:da:05:b3:ac:b0:ed:b9:5c:1e:41:f2:30:b2:
                    1a:71:1f:88:83:48:5a:8f:72:72:df:76:8f:83:ba:
                    e0:1b:f6:87:a9:b0:9e:2d:31:f4:e7:10:27:2f:26:
                    27:63:71:ff:18:91:83:26:c4:d4:2e:17:7a:f1:b9:
                    03:42:b4:4a:18:ee:9e:73:83:9f:c1:95:37:af:e9:
                    95:6b:fd:9f:d4:7d:aa:96:d7:be:71:03:d3:ff:44:
                    1f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E7:F0:D3:C9:B3:3D:1B:2F:BF:D0:B7:96:94:5B:25:73:C0:EE:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/f09ec41f-bf58-33da-8be5-009ba2270a35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.96.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:9d:94:64:f2:55:8a:41:26:51:42:31:21:a1:a3:b5:92:83:
         03:b7:b0:ab:b3:9c:5a:ca:2d:d4:37:14:8d:7b:b0:a7:f4:f7:
         10:50:ce:53:05:30:97:84:7a:28:f3:d4:0f:69:ed:e3:32:c6:
         12:d1:df:f8:cc:60:01:79:e1:80:68:5b:92:72:75:87:b9:ad:
         68:20:b1:17:2b:6e:fa:c1:f3:62:5d:72:e0:c9:32:6f:e3:5c:
         2b:56:03:6c:7c:08:4b:49:34:d8:f8:8f:f9:53:94:8e:de:6f:
         94:79:4a:ee:a6:ba:d1:a6:4b:99:c3:94:58:00:f5:15:8d:66:
         75:d5:45:1c:ec:af:cc:89:2c:7b:aa:b5:cf:13:72:fe:23:ba:
         96:34:54:da:db:70:f6:14:4e:64:3c:3c:eb:07:ac:de:fc:56:
         bb:c6:72:8e:14:c6:71:79:98:97:2c:f2:78:55:f4:0c:01:5a:
         f8:54:84:cd:63:e0:7f:cb:05:a1:dc:54:0f:e5:96:4f:5f:92:
         0f:3d:32:7e:4d:2b:9a:54:6a:cc:ca:4d:06:6c:6d:5a:9e:a8:
         e9:bd:02:81:88:fd:3a:0e:cc:d3:af:20:ad:58:41:0c:7f:1e:
         50:85:6f:1f:b8:e1:cd:b9:e6:f1:95:f8:69:a3:d2:7b:1a:d3:
         74:7d:fb:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhxO9TnaAo1hw1oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YTU1MzliMDItMWE5ZS00ZGFjLTgxMDItNzNiNDNmMTg5OWRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRjFVpbKF4AJtKoyXvy3m8VJ+sYomwa13ATR
Oey9ZYzjod1czqiT4mhiwhY9oklBjq8emU9UgmPhORr+QevOiUj4qEF7Yac7+Pvh
qBIvK4HVsH5D7/saRjUn8XaSK0DYRrsGkOYWIV+te51upNCF198AfEgg5Yp/swOw
SgDZx5Jql6ukH8fu231sHdnFRamT4o1fLUbY09KuDZb0jKVJGe7ibkhYQdoFs6yw
7blcHkHyMLIacR+Ig0haj3Jy33aPg7rgG/aHqbCeLTH05xAnLyYnY3H/GJGDJsTU
Lhd68bkDQrRKGO6ec4OfwZU3r+mVa/2f1H2qlte+cQPT/0Qf9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN/n8NPJsz0bL7/Qt5aUWyVzwO4HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvZjA5ZWM0MWYtYmY1OC0z
M2RhLThiZTUtMDA5YmEyMjcwYTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz2CFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGmdlGTyVYpBJlFCMSGho7WSgwO3sKuznFrKLdQ3FI17sKf09xBQzlMF
MJeEeijz1A9p7eMyxhLR3/jMYAF54YBoW5JydYe5rWggsRcrbvrB82JdcuDJMm/j
XCtWA2x8CEtJNNj4j/lTlI7eb5R5Su6mutGmS5nDlFgA9RWNZnXVRRzsr8yJLHuq
tc8Tcv4jupY0VNrbcPYUTmQ8POsHrN78VrvGco4UxnF5mJcs8nhV9AwBWvhUhM1j
4H/LBaHcVA/llk9fkg89Mn5NK5pUaszKTQZsbVqeqOm9AoGI/ToOzNOvIK1YQQx/
HlCFbx+44c255vGV+Gmj0nsa03R9+9I=
-----END CERTIFICATE-----
Generated at Sat Aug 8 22:36:35 2026 by rpki-client