Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/fe7b0e99-c671-383a-a651-229cc6e1a962.roa
File:                     fe7b0e99-c671-383a-a651-229cc6e1a962.roa (raw, json)
Hash identifier:          Ls+2aSyaPEY6w+rZBm8oVyIgAIzWdjCmroc+FnnsP0Y=
Subject key identifier:   D5:41:66:52:B1:39:87:F7:35:B6:1D:AF:BD:75:23:8A:EB:D8:EB:F9
Certificate issuer:       /CN=c22717c6-604d-4453-a20f-3430af557f6e
Certificate serial:       010D0C9F4328584EE0C1FD1304BB4467D49E9800
Authority key identifier: EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/fe7b0e99-c671-383a-a651-229cc6e1a962.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     7922
IP address blocks:        72.42.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:fd:13:04:bb:44:67:d4:9e:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c22717c6-604d-4453-a20f-3430af557f6e
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=319274b7-73ef-402f-af8a-1ce5fec3e9f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f7:31:80:10:bb:8c:17:e0:7b:f3:34:32:10:
                    9e:41:9a:9a:9e:49:a4:43:44:79:34:be:8d:5c:31:
                    fa:ad:cd:9e:4e:c4:0c:74:8b:5f:33:01:dd:64:54:
                    21:5d:ba:34:98:21:e5:3c:05:b5:1a:76:3f:2b:b8:
                    9c:37:99:46:33:56:ca:3b:72:dd:af:1c:79:fa:4e:
                    c7:87:bd:a1:2f:ba:0e:a8:45:15:06:be:a9:ed:ce:
                    5e:b1:1d:8b:fa:41:e1:4b:87:1a:f7:f9:8b:df:cd:
                    84:34:7a:d8:4a:e9:66:43:30:6a:df:80:4b:fa:d2:
                    f1:36:46:8a:20:97:0c:27:a0:b3:ac:09:06:bc:d6:
                    c5:d8:e1:26:94:15:90:19:ba:eb:d7:11:d4:7b:49:
                    5e:d9:46:05:ff:c0:30:b0:54:5c:e4:cd:bf:ce:e6:
                    51:41:aa:66:ee:d1:d4:a2:6f:98:88:3c:1a:19:fb:
                    30:4d:01:46:37:4b:d5:dc:14:a6:e8:a6:23:85:70:
                    e8:75:ee:4c:53:db:86:2d:ca:9a:22:75:aa:9e:69:
                    d5:0f:9e:11:0b:79:08:f9:01:9b:34:ef:e6:2b:05:
                    f9:bb:18:2b:42:24:e9:27:9f:e1:3e:29:84:36:0f:
                    16:e5:d6:41:26:52:37:69:1d:85:94:db:65:26:b0:
                    f4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:41:66:52:B1:39:87:F7:35:B6:1D:AF:BD:75:23:8A:EB:D8:EB:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/fe7b0e99-c671-383a-a651-229cc6e1a962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl

            X509v3 Authority Key Identifier:
                keyid:EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.42.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:f6:b4:7a:46:6f:7e:ca:84:7f:12:6b:25:f1:e5:16:47:91:
         e4:9c:0f:ef:c6:54:9f:95:f4:e6:01:3a:3f:a7:1b:42:24:6a:
         b9:41:53:4f:76:66:f4:03:c9:c1:c3:cc:7f:a0:20:30:db:06:
         e3:df:e7:42:af:41:8c:52:5b:0a:40:62:4f:6b:31:5c:33:8e:
         0a:18:d1:13:1e:8f:df:e4:94:b5:39:35:97:cd:28:e0:9c:be:
         26:e6:48:03:5b:6e:bd:d9:e9:15:dc:ee:1a:bd:99:56:fb:26:
         51:4a:78:17:5a:97:10:b1:5e:e9:33:d1:f5:e3:14:f2:1a:c1:
         bc:4b:8a:cf:df:73:e9:85:d8:c2:41:a7:7a:7c:35:74:b9:12:
         fd:76:b3:da:ee:0d:2c:ce:ce:44:4e:9c:be:eb:b2:74:40:82:
         e5:76:e1:91:a4:32:98:6f:73:ec:c2:75:9e:26:2f:a5:3d:95:
         5c:7a:d9:ed:f2:f2:f8:e4:f4:6a:0a:40:b3:f4:1b:29:c8:5e:
         f2:ab:43:96:27:11:05:6c:d3:2f:4b:be:81:06:22:bf:c5:5c:
         44:89:a9:bf:7b:01:10:f4:c0:4c:97:fe:7d:f4:cb:b5:7f:87:
         78:18:21:57:c8:2f:2a:80:1c:09:e6:79:65:6a:46:ce:71:ff:
         2f:41:06:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwf0TBLtEZ9SemAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIyNzE3YzYtNjA0ZC00NDUzLWEyMGYtMzQzMGFmNTU3
ZjZlMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk
MzE5Mjc0YjctNzNlZi00MDJmLWFmOGEtMWNlNWZlYzNlOWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivcxgBC7jBfge/M0MhCeQZqankmkQ0R5NL6N
XDH6rc2eTsQMdItfMwHdZFQhXbo0mCHlPAW1GnY/K7icN5lGM1bKO3Ldrxx5+k7H
h72hL7oOqEUVBr6p7c5esR2L+kHhS4ca9/mL382ENHrYSulmQzBq34BL+tLxNkaK
IJcMJ6CzrAkGvNbF2OEmlBWQGbrr1xHUe0le2UYF/8AwsFRc5M2/zuZRQapm7tHU
om+YiDwaGfswTQFGN0vV3BSm6KYjhXDode5MU9uGLcqaInWqnmnVD54RC3kI+QGb
NO/mKwX5uxgrQiTpJ5/hPimENg8W5dZBJlI3aR2FlNtlJrD0cwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNVBZlKxOYf3NbYdr711I4rr2Ov5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMjI3
MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMwYWY1NTdmNmUvZmU3YjBlOTktYzY3MS0z
ODNhLWE2NTEtMjI5Y2M2ZTFhOTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzIyNzE3YzYtNjA0ZC00NDUzLWEy
MGYtMzQzMGFmNTU3ZjZlL2MyMjcxN2M2LTYwNGQtNDQ1My1hMjBmLTM0MzBhZjU1
N2Y2ZS5jcmwwHwYDVR0jBBgwFoAU7qMrzzRTqz7xoBFGZHeL3kSWVmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9jMjI3MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMw
YWY1NTdmNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASCr7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACD2tHpGb37KhH8SayXx5RZHkeScD+/GVJ+V9OYBOj+nG0IkarlBU092
ZvQDycHDzH+gIDDbBuPf50KvQYxSWwpAYk9rMVwzjgoY0RMej9/klLU5NZfNKOCc
vibmSANbbr3Z6RXc7hq9mVb7JlFKeBdalxCxXukz0fXjFPIawbxLis/fc+mF2MJB
p3p8NXS5Ev12s9ruDSzOzkROnL7rsnRAguV24ZGkMphvc+zCdZ4mL6U9lVx62e3y
8vjk9GoKQLP0GynIXvKrQ5YnEQVs0y9LvoEGIr/FXESJqb97ARD0wEyX/n30y7V/
h3gYIVfILyqAHAnmeWVqRs5x/y9BBqs=
-----END CERTIFICATE-----
Generated at Tue Aug 25 02:58:19 2026 by rpki-client