Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/87243b99-5c76-34c2-98a2-b2317462cb4c.roa
File:                     87243b99-5c76-34c2-98a2-b2317462cb4c.roa (raw, json)
Hash identifier:          n1N293UoXBoZ+eau0B1E+fACM9aNWP+6RNpkzBZu/dM=
Subject key identifier:   3E:A5:6D:A0:B9:B6:C1:70:44:5B:83:FE:B5:2B:D3:53:1B:A0:13:3D
Certificate issuer:       /CN=b2797f94-84cd-4d6b-a254-94f6593d32af
Certificate serial:       010D0C9F4328584EB84721650E219E379F198E80
Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/87243b99-5c76-34c2-98a2-b2317462cb4c.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     22079
IP address blocks:        64.186.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:21:65:0e:21:9e:37:9f:19:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=b53371fc-f514-485c-ba56-0a0ae5cce142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1b:02:ab:b8:fc:09:e0:57:32:31:bc:52:ab:
                    74:f5:61:e8:8b:5b:ed:af:b6:a2:32:7c:5f:24:cb:
                    76:2e:7e:46:10:f5:82:ad:50:ec:1e:ad:67:77:c5:
                    c4:24:94:99:10:21:3d:14:2d:f6:55:98:71:d8:ed:
                    ff:2b:84:9c:05:54:7e:1b:87:f0:00:cc:d9:cb:14:
                    f7:3a:24:2b:23:6d:24:8d:cb:9a:3b:80:cb:d1:c8:
                    ef:9f:12:69:5b:d9:fa:a7:d7:1a:c8:3b:91:20:23:
                    1b:a3:b1:58:89:95:08:dc:f2:4f:04:5b:c1:af:89:
                    8a:c3:0a:06:f9:7c:12:b1:47:eb:2c:98:a9:c4:7f:
                    d5:38:89:8e:73:bd:ae:ae:bc:c6:14:e9:11:d1:53:
                    47:e1:64:c7:df:c7:4c:66:53:4e:d5:84:3b:06:83:
                    9d:76:10:36:49:e8:ae:c2:2c:72:52:3e:05:c8:80:
                    5f:80:f2:b3:78:f4:9e:16:be:ba:63:63:b9:ff:56:
                    5a:4f:e8:02:bf:e9:05:eb:13:cc:0c:e9:1b:c2:97:
                    24:2c:5e:29:2d:3f:f6:00:5a:18:21:c1:f4:72:b6:
                    43:25:89:d6:a1:6e:3e:c3:7d:a8:0e:a7:6e:b2:e0:
                    94:cb:67:96:6e:d8:62:9a:34:65:b8:b3:94:f2:06:
                    f7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A5:6D:A0:B9:B6:C1:70:44:5B:83:FE:B5:2B:D3:53:1B:A0:13:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/87243b99-5c76-34c2-98a2-b2317462cb4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl

            X509v3 Authority Key Identifier:
                keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.186.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:e0:93:f3:05:ae:6e:50:a7:f9:6a:88:99:d6:49:e0:6d:36:
         e9:ad:59:37:59:cb:57:08:02:9f:9e:9a:57:7c:84:1b:8e:67:
         75:c2:ce:58:cd:76:4e:3f:2c:99:d1:8b:b3:ac:6b:fc:1e:5a:
         9e:36:46:e8:6a:d1:ac:37:cb:eb:19:cf:7a:6e:9a:dd:da:ca:
         b3:dd:21:5d:05:79:1c:72:3c:e8:06:f0:a1:ea:91:65:66:81:
         a3:7a:ed:a6:f0:8e:8c:68:e8:30:f8:41:ec:3d:f5:65:af:6a:
         fa:16:83:43:03:c3:9a:68:a9:60:1a:7c:6b:33:76:7b:b6:67:
         e9:5e:f4:26:38:0c:a2:fc:f0:54:1c:20:08:0c:39:6b:ee:d0:
         41:a4:24:97:2a:25:01:b3:b7:de:0e:51:ff:04:29:08:a2:43:
         ff:49:79:09:d6:82:ae:1b:6c:e3:d8:d4:a4:f4:91:a4:cb:5c:
         94:d2:91:77:6b:88:63:8c:e5:ac:48:4e:23:04:47:e1:df:c6:
         f5:4c:38:58:e4:49:7b:1a:09:29:d2:9c:98:9a:54:f4:8e:fc:
         8f:c4:ef:03:9f:9c:85:7a:fa:9c:a7:a4:f4:a4:cf:1f:39:d7:
         ef:eb:b7:3e:9e:dd:0e:73:fa:8d:a2:a6:ab:1c:73:1d:39:09:
         6c:13:30:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE64RyFlDiGeN58ZjoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjI3OTdmOTQtODRjZC00ZDZiLWEyNTQtOTRmNjU5M2Qz
MmFmMB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk
YjUzMzcxZmMtZjUxNC00ODVjLWJhNTYtMGEwYWU1Y2NlMTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRsCq7j8CeBXMjG8Uqt09WHoi1vtr7aiMnxf
JMt2Ln5GEPWCrVDsHq1nd8XEJJSZECE9FC32VZhx2O3/K4ScBVR+G4fwAMzZyxT3
OiQrI20kjcuaO4DL0cjvnxJpW9n6p9cayDuRICMbo7FYiZUI3PJPBFvBr4mKwwoG
+XwSsUfrLJipxH/VOImOc72urrzGFOkR0VNH4WTH38dMZlNO1YQ7BoOddhA2Seiu
wixyUj4FyIBfgPKzePSeFr66Y2O5/1ZaT+gCv+kF6xPMDOkbwpckLF4pLT/2AFoY
IcH0crZDJYnWoW4+w32oDqdusuCUy2eWbthimjRluLOU8gb3BwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD6lbaC5tsFwRFuD/rUr01MboBM9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iMjc5
N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2NTkzZDMyYWYvODcyNDNiOTktNWM3Ni0z
NGMyLTk4YTItYjIzMTc0NjJjYjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjI3OTdmOTQtODRjZC00ZDZiLWEy
NTQtOTRmNjU5M2QzMmFmL2IyNzk3Zjk0LTg0Y2QtNGQ2Yi1hMjU0LTk0ZjY1OTNk
MzJhZi5jcmwwHwYDVR0jBBgwFoAUaliZMYRR7DUFeyI1/3BS6hhsVyEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iMjc5N2Y5NC04NGNkLTRkNmItYTI1NC05NGY2
NTkzZDMyYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQLp8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFDgk/MFrm5Qp/lqiJnWSeBtNumtWTdZy1cIAp+emld8hBuOZ3XCzljN
dk4/LJnRi7Osa/weWp42Ruhq0aw3y+sZz3pumt3ayrPdIV0FeRxyPOgG8KHqkWVm
gaN67abwjoxo6DD4Qew99WWvavoWg0MDw5poqWAafGszdnu2Z+le9CY4DKL88FQc
IAgMOWvu0EGkJJcqJQGzt94OUf8EKQiiQ/9JeQnWgq4bbOPY1KT0kaTLXJTSkXdr
iGOM5axITiMER+HfxvVMOFjkSXsaCSnSnJiaVPSO/I/E7wOfnIV6+pynpPSkzx85
1+/rtz6e3Q5z+o2ipqsccx05CWwTMFE=
-----END CERTIFICATE-----
Generated at Thu Aug 13 21:58:04 2026 by rpki-client