Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/a339b963-39c3-3123-a97a-62a737e00fe1.roa
File:                     a339b963-39c3-3123-a97a-62a737e00fe1.roa (raw, json)
Hash identifier:          Q4vnHOq0B5BHEKUPjhTfr5vziHp/+ZqVQDi4wj1YZlI=
Subject key identifier:   D5:9F:FC:68:41:42:50:2E:37:87:F4:0D:C3:D9:F2:29:45:49:D9:FD
Certificate issuer:       /CN=ec8ef17e-d8d3-48e9-92e7-84e96fa64410
Certificate serial:       010D0C9F4328584EA791771C8E8F565880C71A40
Authority key identifier: 65:0C:4A:76:B2:7A:A5:C8:07:02:8E:FF:32:02:C4:75:B4:34:F7:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/a339b963-39c3-3123-a97a-62a737e00fe1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20213
IP address blocks:        207.174.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:77:1c:8e:8f:56:58:80:c7:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec8ef17e-d8d3-48e9-92e7-84e96fa64410
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ce32fcc2-9d43-4775-a60b-1361df0aae2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:44:92:71:b8:e3:2a:07:98:d4:f5:ac:75:49:
                    ba:8c:e8:ed:9b:a8:34:7e:8a:91:af:3f:b2:a5:8d:
                    0f:61:48:88:2b:61:ef:87:31:86:5d:ec:66:34:74:
                    27:0f:c3:53:a6:d1:db:c8:bc:12:1f:a2:c7:31:87:
                    a9:b7:ae:d9:61:94:eb:a7:f3:db:35:81:2d:97:e4:
                    ae:bd:29:9e:3b:0e:93:47:2c:a2:28:fe:5a:35:bd:
                    99:81:02:d8:60:41:b4:cf:d9:32:9c:6d:8f:04:89:
                    01:0d:f4:ef:83:00:26:dd:31:ec:9e:1d:b3:a2:c4:
                    43:67:56:e6:c2:6b:b7:a3:a8:75:ee:f5:ee:35:f6:
                    eb:98:7c:95:b1:09:8e:ab:aa:da:a4:aa:f8:ed:54:
                    d5:f8:71:45:d5:b3:86:e5:80:72:25:02:f8:f6:84:
                    b1:35:2a:59:51:31:12:81:76:2d:ef:7f:44:ae:e3:
                    d3:08:71:ea:81:ca:57:04:25:0b:14:3a:f1:91:ae:
                    ea:54:f8:5b:70:9a:80:c2:08:c4:d9:0b:66:73:a8:
                    86:b3:3e:84:5c:48:91:33:de:9c:33:af:42:5e:98:
                    e0:f8:9f:2b:77:d4:4d:6a:9c:42:24:cf:e4:eb:ea:
                    67:5b:e5:c7:13:a4:2e:99:09:88:9a:b3:c7:1d:5f:
                    77:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9F:FC:68:41:42:50:2E:37:87:F4:0D:C3:D9:F2:29:45:49:D9:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/a339b963-39c3-3123-a97a-62a737e00fe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.crl

            X509v3 Authority Key Identifier:
                keyid:65:0C:4A:76:B2:7A:A5:C8:07:02:8E:FF:32:02:C4:75:B4:34:F7:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:1d:14:b2:20:1b:b2:7f:8e:46:a1:a3:e9:3f:d4:14:61:87:
         29:60:06:95:7a:0e:2e:48:af:b7:ab:c0:ce:4d:45:85:61:b7:
         96:c2:cb:a8:4f:c6:e5:3a:c3:a1:ee:f2:ab:c2:2c:0b:9d:0f:
         54:87:5c:58:b2:da:47:86:bd:47:d3:bf:29:60:7e:e6:9b:ca:
         54:03:e5:b0:64:b9:de:f7:f6:e8:6e:32:70:fa:09:26:24:24:
         49:93:92:22:bc:14:bc:3e:28:a6:93:19:3d:6e:0d:71:24:75:
         75:de:8a:bb:fe:5e:19:8a:83:20:3f:af:3f:58:1e:11:68:8c:
         08:81:e1:a5:71:5b:a9:09:cc:cb:11:3a:f7:c8:b9:d3:ff:83:
         8d:b4:8e:5f:e9:1a:d4:a1:62:02:a4:83:18:c7:fb:05:9e:cc:
         fd:e5:37:4d:0a:5b:17:f7:8e:dd:6b:92:85:da:01:d1:0b:19:
         d6:e5:eb:96:db:44:55:46:8e:27:5f:b0:e6:c1:a1:cc:64:d8:
         ad:2a:6b:73:ba:fa:68:f7:d1:1e:54:2f:f4:8a:33:3c:b0:fa:
         04:e1:1d:c8:02:81:8b:39:c9:cd:24:9b:71:6c:57:b5:63:08:
         e9:b1:bf:ae:54:9a:32:00:0d:e6:fb:0b:f7:5b:4a:ea:80:04:
         c8:e4:00:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkXccjo9WWIDHGkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWM4ZWYxN2UtZDhkMy00OGU5LTkyZTctODRlOTZmYTY0
NDEwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
Y2UzMmZjYzItOWQ0My00Nzc1LWE2MGItMTM2MWRmMGFhZTJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvESScbjjKgeY1PWsdUm6jOjtm6g0foqRrz+y
pY0PYUiIK2HvhzGGXexmNHQnD8NTptHbyLwSH6LHMYept67ZYZTrp/PbNYEtl+Su
vSmeOw6TRyyiKP5aNb2ZgQLYYEG0z9kynG2PBIkBDfTvgwAm3THsnh2zosRDZ1bm
wmu3o6h17vXuNfbrmHyVsQmOq6rapKr47VTV+HFF1bOG5YByJQL49oSxNSpZUTES
gXYt739EruPTCHHqgcpXBCULFDrxka7qVPhbcJqAwgjE2Qtmc6iGsz6EXEiRM96c
M69CXpjg+J8rd9RNapxCJM/k6+pnW+XHE6QumQmImrPHHV936QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNWf/GhBQlAuN4f0DcPZ8ilFSdn9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lYzhl
ZjE3ZS1kOGQzLTQ4ZTktOTJlNy04NGU5NmZhNjQ0MTAvYTMzOWI5NjMtMzljMy0z
MTIzLWE5N2EtNjJhNzM3ZTAwZmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZWM4ZWYxN2UtZDhkMy00OGU5LTky
ZTctODRlOTZmYTY0NDEwL2VjOGVmMTdlLWQ4ZDMtNDhlOS05MmU3LTg0ZTk2ZmE2
NDQxMC5jcmwwHwYDVR0jBBgwFoAUZQxKdrJ6pcgHAo7/MgLEdbQ0974wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9lYzhlZjE3ZS1kOGQzLTQ4ZTktOTJlNy04NGU5
NmZhNjQ0MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz65YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEodFLIgG7J/jkaho+k/1BRhhylgBpV6Di5Ir7erwM5NRYVht5bCy6hP
xuU6w6Hu8qvCLAudD1SHXFiy2keGvUfTvylgfuabylQD5bBkud739uhuMnD6CSYk
JEmTkiK8FLw+KKaTGT1uDXEkdXXeirv+XhmKgyA/rz9YHhFojAiB4aVxW6kJzMsR
OvfIudP/g420jl/pGtShYgKkgxjH+wWezP3lN00KWxf3jt1rkoXaAdELGdbl65bb
RFVGjidfsObBocxk2K0qa3O6+mj30R5UL/SKMzyw+gThHcgCgYs5yc0km3FsV7Vj
COmxv65UmjIADeb7C/dbSuqABMjkAIs=
-----END CERTIFICATE-----
Generated at Wed Jul 29 20:36:22 2026 by rpki-client