Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/8a264ea6-1b37-3d5f-96dc-ddb5be31a4b7.roa
File:                     8a264ea6-1b37-3d5f-96dc-ddb5be31a4b7.roa (raw, json)
Hash identifier:          j2d1rIk1FrxMg9t3xXfRbSyDSAZxYuFvEFbZKPZeR3s=
Subject key identifier:   18:BE:57:5D:57:D4:01:74:05:2A:80:F9:79:6E:95:6C:2D:4A:DB:DA
Certificate issuer:       /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial:       010D0C9F4328584ECA6C6CA5114DA27C429CAA80
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/8a264ea6-1b37-3d5f-96dc-ddb5be31a4b7.roa
Signing time:             Mon 10 Aug 2026 13:00:12 +0000
ROA not before:           Mon 10 Aug 2026 13:00:12 +0000
ROA not after:            Sun 08 Nov 2026 14:00:12 +0000
asID:                     40115
IP address blocks:        104.143.32.0/20 maxlen: 24
                          172.81.96.0/22 maxlen: 24
                          172.81.100.0/23 maxlen: 24
                          198.176.59.0/24 maxlen: 24
                          198.176.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ca:6c:6c:a5:11:4d:a2:7c:42:9c:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
        Validity
            Not Before: Aug 10 13:00:12 2026 GMT
            Not After : Nov  8 14:00:12 2026 GMT
        Subject: CN=19c632b6-ef19-4d92-b3f1-d2f2218e3788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:aa:19:a2:ee:51:bd:47:17:bb:90:f9:dd:e4:
                    c5:27:dc:07:62:bb:c9:b2:3d:9a:e8:26:00:93:40:
                    87:dc:07:da:cf:3f:7d:1c:d6:dd:2d:9f:a0:c1:d7:
                    2d:bd:cb:26:36:c9:19:55:0c:8b:69:c6:45:cc:af:
                    e0:7b:f5:48:ee:40:73:39:82:39:ac:74:3b:07:01:
                    c1:03:60:bd:fe:0f:1c:8a:c3:98:57:cd:4f:59:76:
                    20:32:1d:a6:e0:84:ba:17:59:3e:bf:0a:f7:84:65:
                    b0:4b:80:ee:b7:0e:5c:e3:53:ab:76:bf:e7:05:9a:
                    0b:82:6a:cf:2a:22:a2:1c:e8:b6:37:30:a1:87:92:
                    04:3b:78:9b:a7:4e:79:09:11:12:fe:da:c4:8f:eb:
                    3d:20:5e:d2:00:4f:b9:da:71:f5:78:a0:41:eb:33:
                    fd:e5:6a:e8:e9:a9:01:e6:42:18:8f:e8:02:51:7d:
                    d5:d1:d5:d1:6b:45:12:b1:99:7d:f2:12:af:38:bc:
                    d6:b7:d9:c3:17:98:45:c4:e9:a9:88:91:ff:09:9c:
                    c1:22:8c:b0:95:d0:bb:7f:45:99:3b:be:1d:22:4c:
                    85:47:9d:d4:cf:3d:43:47:2e:93:ca:59:83:c0:e2:
                    33:6f:26:d5:18:6a:12:80:e5:07:d0:0d:0f:40:8b:
                    f9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BE:57:5D:57:D4:01:74:05:2A:80:F9:79:6E:95:6C:2D:4A:DB:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/8a264ea6-1b37-3d5f-96dc-ddb5be31a4b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl

            X509v3 Authority Key Identifier:
                keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.143.32.0/20
                  172.81.96.0-172.81.101.255
                  198.176.59.0-198.176.63.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:91:86:8b:b1:ee:4f:81:ff:aa:5f:a1:78:35:bf:cb:85:a7:
         d8:bc:ba:10:7e:cf:21:44:f8:07:19:67:e0:08:1f:50:6e:63:
         23:29:fc:16:ae:f2:bd:64:b8:8d:4c:8b:9f:2b:70:b7:32:1a:
         66:aa:bc:76:4b:71:55:6d:42:10:87:f3:24:94:d2:89:0f:e8:
         56:d4:84:7d:66:88:58:d2:92:02:1f:a4:94:dc:c9:62:de:c9:
         87:09:13:af:51:30:cd:33:ca:3a:cf:fd:04:11:ea:c9:34:35:
         07:80:3a:59:b6:32:3d:e4:0b:85:79:f5:b2:f7:41:bc:17:1d:
         16:98:2f:eb:b4:79:bb:b3:a7:0e:87:14:28:8c:92:d2:cf:a4:
         58:89:00:e3:3e:02:a0:6e:78:86:b7:3c:3a:7f:7f:f9:d5:0a:
         69:0d:b1:b9:b1:f4:eb:15:16:8c:4f:d2:66:21:35:2d:d5:c3:
         2b:55:e2:bf:72:bc:90:a8:14:fe:a2:2c:54:c5:de:4c:e9:c1:
         93:4e:e8:30:46:f4:9e:a5:be:61:f0:b5:04:52:20:d9:35:03:
         dc:43:90:37:49:70:56:91:e1:4a:98:52:07:d9:5a:8f:d9:a7:
         39:f9:5b:68:91:a0:ca:15:13:08:45:82:ef:77:57:62:be:d6:
         69:18:e9:be
-----BEGIN CERTIFICATE-----
MIIGXzCCBUegAwIBAgIUAQ0Mn0MoWE7KbGylEU2ifEKcqoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm
MDYzMB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk
MTljNjMyYjYtZWYxOS00ZDkyLWIzZjEtZDJmMjIxOGUzNzg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6oZou5RvUcXu5D53eTFJ9wHYrvJsj2a6CYA
k0CH3Afazz99HNbdLZ+gwdctvcsmNskZVQyLacZFzK/ge/VI7kBzOYI5rHQ7BwHB
A2C9/g8cisOYV81PWXYgMh2m4IS6F1k+vwr3hGWwS4Dutw5c41Ordr/nBZoLgmrP
KiKiHOi2NzChh5IEO3ibp055CRES/trEj+s9IF7SAE+52nH1eKBB6zP95Wro6akB
5kIYj+gCUX3V0dXRa0USsZl98hKvOLzWt9nDF5hFxOmpiJH/CZzBIoywldC7f0WZ
O74dIkyFR53Uzz1DRy6TylmDwOIzbybVGGoSgOUH0A0PQIv5/QIDAQABo4IDcTCC
A20wHQYDVR0OBBYEFBi+V11X1AF0BSqA+XlulWwtStvaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi
MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvOGEyNjRlYTYtMWIzNy0z
ZDVmLTk2ZGMtZGRiNWJlMzFhNGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1
YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky
ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4
NzY5MmYwNjMuY2VyMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQEaI8gMAwD
BAWsUWADBAGsUWQwDAMEAMawOwMEBsawADBUBgNVHSABAf8ESjBIMEYGCCsGAQUF
Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl
cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBvkYaLse5Pgf+qX6F4
Nb/LhafYvLoQfs8hRPgHGWfgCB9QbmMjKfwWrvK9ZLiNTIufK3C3Mhpmqrx2S3FV
bUIQh/MklNKJD+hW1IR9ZohY0pICH6SU3Mli3smHCROvUTDNM8o6z/0EEerJNDUH
gDpZtjI95AuFefWy90G8Fx0WmC/rtHm7s6cOhxQojJLSz6RYiQDjPgKgbniGtzw6
f3/51QppDbG5sfTrFRaMT9JmITUt1cMrVeK/cryQqBT+oixUxd5M6cGTTugwRvSe
pb5h8LUEUiDZNQPcQ5A3SXBWkeFKmFIH2VqP2ac5+VtokaDKFRMIRYLvd1divtZp
GOm+
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:29:59 2026 by rpki-client