Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/7c424fa9-46f5-3187-adf7-7a212a02a771.roa
File:                     7c424fa9-46f5-3187-adf7-7a212a02a771.roa (raw, json)
Hash identifier:          GLqAMfcoPsngJ629ltOgzSJBXObjDhINg18kRZqamKM=
Subject key identifier:   44:B1:E7:67:43:00:98:52:E3:57:AB:5F:2A:09:C5:84:AD:D1:A3:83
Certificate issuer:       /CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
Certificate serial:       010D0C9F4328584EBA87D2A01A9B43CC75BFEA80
Authority key identifier: 56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/7c424fa9-46f5-3187-adf7-7a212a02a771.roa
Signing time:             Tue 04 Aug 2026 20:22:32 +0000
ROA not before:           Tue 04 Aug 2026 20:22:32 +0000
ROA not after:            Mon 02 Nov 2026 21:22:32 +0000
asID:                     40933
IP address blocks:        70.33.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ba:87:d2:a0:1a:9b:43:cc:75:bf:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd
        Validity
            Not Before: Aug  4 20:22:32 2026 GMT
            Not After : Nov  2 21:22:32 2026 GMT
        Subject: CN=01e5fc17-1f7e-4287-b534-51ebecfeb003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:10:28:26:59:fa:df:cc:65:24:33:ee:40:12:
                    14:36:67:0e:2e:0f:7c:f1:08:a0:79:b1:b2:af:e6:
                    cd:ce:61:13:cc:00:dc:f8:6a:b8:3b:3e:77:f0:0c:
                    5e:3a:c6:73:49:c5:15:3e:bb:7b:d8:5f:b4:c4:2a:
                    58:68:c6:eb:09:32:f9:23:80:ae:8d:85:02:09:3e:
                    eb:47:6b:d3:f3:4c:d1:78:69:e0:97:98:bb:7a:00:
                    09:f9:22:6a:5a:3d:b2:bb:df:07:08:73:96:6c:07:
                    56:99:61:78:ce:70:7e:16:73:10:78:be:09:8f:f2:
                    31:c8:94:0a:90:fa:46:02:da:17:eb:fa:bf:6c:4b:
                    98:79:9d:c2:12:5f:d3:6b:d4:91:ab:21:81:0a:66:
                    d5:b9:55:ea:84:3f:94:ae:5e:e6:fd:ae:7e:d4:45:
                    28:85:0b:09:f0:97:1e:54:00:ba:6e:8b:dc:a2:03:
                    a6:55:1f:a1:dc:af:36:86:10:b9:a7:4d:b9:5a:42:
                    f5:4e:1c:68:f7:86:9b:2d:29:3a:35:b1:34:27:b7:
                    b2:4b:e1:75:27:16:c2:c7:7d:d6:f3:e8:41:e3:12:
                    f9:97:6d:38:35:d9:8d:90:9c:65:0a:ee:e8:73:bd:
                    2e:3c:09:c7:3b:fc:c9:b8:af:d3:e5:94:1a:0b:93:
                    2b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B1:E7:67:43:00:98:52:E3:57:AB:5F:2A:09:C5:84:AD:D1:A3:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/7c424fa9-46f5-3187-adf7-7a212a02a771.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl

            X509v3 Authority Key Identifier:
                keyid:56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.33.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:ec:73:18:04:6d:e6:f2:8b:8d:ef:f7:ad:28:51:df:08:03:
         a0:28:ed:d8:68:d4:dc:de:3b:d0:7a:c7:99:93:4d:55:8e:04:
         cc:4d:49:b1:34:c6:13:8c:9d:76:c0:fb:e7:1c:58:fd:e7:45:
         05:69:5c:40:ba:45:9b:c9:5d:09:0f:8d:52:5b:e9:af:d5:71:
         41:9b:a3:14:46:85:9d:21:36:3f:45:40:6c:50:13:a6:3d:96:
         7a:66:98:7a:80:e7:3b:59:6a:14:e8:c5:4f:47:0a:44:f5:7e:
         21:b3:5e:04:12:6c:d7:b3:01:9e:00:90:26:67:35:c7:8d:bf:
         d6:98:e4:a3:cf:85:92:fd:68:9b:fb:02:cb:78:4c:22:83:55:
         60:0d:0c:1e:d4:3e:63:63:e0:64:50:74:aa:af:5e:73:b1:da:
         36:2a:b3:98:e4:cd:a6:39:ae:86:c5:98:3c:77:ba:d3:2f:d5:
         84:a6:81:aa:31:b0:c3:c3:c9:e8:ac:69:38:b0:7b:ac:c6:a3:
         23:73:43:11:f5:b9:1b:c4:8a:f5:36:d6:9d:a7:6c:32:1e:02:
         b1:5e:76:cd:04:11:0c:83:59:f7:dc:ff:cb:f8:43:da:06:8a:
         20:b5:94:79:5f:dd:b3:f5:eb:83:bc:0d:b0:66:b5:82:0c:9f:
         d2:77:7b:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE66h9KgGptDzHW/6oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEzOWUzNzEtNmUzYi00NThiLTliMDctYzNhMDc1YzVh
ZWNkMB4XDTI2MDgwNDIwMjIzMloXDTI2MTEwMjIxMjIzMlowLzEtMCsGA1UEAxMk
MDFlNWZjMTctMWY3ZS00Mjg3LWI1MzQtNTFlYmVjZmViMDAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRAoJln638xlJDPuQBIUNmcOLg988QigebGy
r+bNzmETzADc+Gq4Oz538AxeOsZzScUVPrt72F+0xCpYaMbrCTL5I4CujYUCCT7r
R2vT80zReGngl5i7egAJ+SJqWj2yu98HCHOWbAdWmWF4znB+FnMQeL4Jj/IxyJQK
kPpGAtoX6/q/bEuYeZ3CEl/Ta9SRqyGBCmbVuVXqhD+Url7m/a5+1EUohQsJ8Jce
VAC6bovcogOmVR+h3K82hhC5p025WkL1Thxo94abLSk6NbE0J7eyS+F1JxbCx33W
8+hB4xL5l204NdmNkJxlCu7oc70uPAnHO/zJuK/T5ZQaC5Mr6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFESx52dDAJhS41erXyoJxYSt0aODMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80YTM5
ZTM3MS02ZTNiLTQ1OGItOWIwNy1jM2EwNzVjNWFlY2QvN2M0MjRmYTktNDZmNS0z
MTg3LWFkZjctN2EyMTJhMDJhNzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNGEzOWUzNzEtNmUzYi00NThiLTli
MDctYzNhMDc1YzVhZWNkLzRhMzllMzcxLTZlM2ItNDU4Yi05YjA3LWMzYTA3NWM1
YWVjZC5jcmwwHwYDVR0jBBgwFoAUVtWLRQt6l4UE9a2UYiZiVO3isa8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi80YTM5ZTM3MS02ZTNiLTQ1OGItOWIwNy1jM2Ew
NzVjNWFlY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiEZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH/scxgEbebyi43v960oUd8IA6Ao7dho1NzeO9B6x5mTTVWOBMxNSbE0
xhOMnXbA++ccWP3nRQVpXEC6RZvJXQkPjVJb6a/VcUGboxRGhZ0hNj9FQGxQE6Y9
lnpmmHqA5ztZahToxU9HCkT1fiGzXgQSbNezAZ4AkCZnNceNv9aY5KPPhZL9aJv7
Ast4TCKDVWANDB7UPmNj4GRQdKqvXnOx2jYqs5jkzaY5robFmDx3utMv1YSmgaox
sMPDyeisaTiwe6zGoyNzQxH1uRvEivU21p2nbDIeArFeds0EEQyDWffc/8v4Q9oG
iiC1lHlf3bP164O8DbBmtYIMn9J3e/E=
-----END CERTIFICATE-----
Generated at Wed Aug 26 07:03:24 2026 by rpki-client