Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/d5ba652b-3b82-3586-9e7f-dc1038b2e572.roa
File:                     d5ba652b-3b82-3586-9e7f-dc1038b2e572.roa (raw, json)
Hash identifier:          l4UMthhst7oAbG0paSoOx99mSgVH2j8nS/vZwhu+LLU=
Subject key identifier:   1B:9F:4F:E7:DC:12:21:AA:5A:9D:EE:23:E5:BF:42:4C:43:8A:BD:75
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584EE0C2177B05FF4C5FD0CAC300
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/d5ba652b-3b82-3586-9e7f-dc1038b2e572.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     22504
IP address blocks:        67.58.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:17:7b:05:ff:4c:5f:d0:ca:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=702a3e83-6231-4db8-9941-d2ad7b3612b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f9:25:2b:3b:f6:c9:6f:81:6f:ac:42:a7:f6:
                    8c:6d:0b:c1:60:6a:8d:b3:1d:73:89:0f:78:55:20:
                    63:74:67:22:f2:15:24:80:88:16:34:82:4f:51:06:
                    14:cb:46:20:67:84:fa:71:14:c3:9e:88:1b:6c:6e:
                    33:af:62:48:45:8b:43:a7:d5:1d:b9:7d:8d:ad:18:
                    8c:45:fd:1a:79:82:26:94:1f:5f:c1:9b:e3:b1:90:
                    8d:1d:98:44:e8:bd:fd:96:16:56:b2:84:34:a8:5d:
                    be:76:4e:c4:06:a4:d7:2a:10:5a:91:d9:f8:5f:c7:
                    49:c0:ca:5c:a9:7e:79:38:95:c9:e4:22:d1:6f:31:
                    24:ab:89:91:9b:f8:3c:d8:ef:b3:90:f9:9e:50:44:
                    25:40:8f:4c:35:81:98:7b:b8:63:fe:c1:c5:9e:19:
                    e7:a3:82:c4:cb:e6:31:57:6e:f8:ce:5a:a1:65:01:
                    82:b3:df:06:c8:e0:ae:ce:4b:d9:71:fa:ca:b3:a0:
                    ed:42:18:8f:ab:fe:cf:08:97:40:e4:38:4f:db:8f:
                    22:4d:75:c7:4b:31:27:82:51:aa:1b:03:ec:fd:de:
                    70:09:38:52:ec:e3:ef:f2:15:77:d4:eb:e2:94:ce:
                    da:a2:d5:e7:cd:bf:d8:38:66:a2:c2:57:0d:4a:23:
                    11:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9F:4F:E7:DC:12:21:AA:5A:9D:EE:23:E5:BF:42:4C:43:8A:BD:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/d5ba652b-3b82-3586-9e7f-dc1038b2e572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.58.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:b6:d8:2d:df:22:2d:d3:f4:7e:67:13:77:13:44:99:86:3d:
         4b:66:e9:06:37:bd:b8:ac:f1:2e:85:99:36:3c:fa:ef:5c:3f:
         bc:54:11:e9:7e:d5:5d:ce:85:41:55:5c:36:f6:3c:44:79:34:
         96:cc:07:7a:34:18:f1:f4:74:e9:8c:72:8c:b2:b9:49:ec:11:
         15:55:aa:a6:5c:13:d4:24:87:64:3e:81:23:74:08:5a:74:ec:
         bd:38:ce:c9:65:86:de:4a:30:07:15:d8:1e:f8:90:c5:a7:a4:
         15:61:82:52:3b:4d:79:47:6f:8b:3f:45:5f:18:df:83:fa:16:
         39:de:71:ef:a3:15:6a:c9:b4:c8:fc:7c:0d:83:fb:b8:0a:24:
         3b:ed:94:0b:8c:17:e3:92:72:ac:bb:d8:a2:2c:c4:50:39:e3:
         96:f2:b3:cd:d4:5a:15:17:69:6b:61:1e:85:ec:a1:17:eb:aa:
         a1:b7:6d:6c:9f:21:32:af:0d:9d:f3:68:cd:5b:57:4a:60:57:
         cb:56:71:90:10:be:7c:3d:8d:84:51:b1:91:15:2c:ad:6b:50:
         4e:b7:9c:23:b4:a9:66:64:ff:d5:51:3b:6f:18:af:34:b9:f8:
         dc:24:91:a7:60:b7:78:cf:6f:3c:36:a4:d3:09:7c:6e:62:23:
         3d:04:ff:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwhd7Bf9MX9DKwwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQwMzc4YTktMTAzYy00NWNhLTg2OWQtN2M5MTE1Yzdi
MGY2MB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk
NzAyYTNlODMtNjIzMS00ZGI4LTk5NDEtZDJhZDdiMzYxMmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvklKzv2yW+Bb6xCp/aMbQvBYGqNsx1ziQ94
VSBjdGci8hUkgIgWNIJPUQYUy0YgZ4T6cRTDnogbbG4zr2JIRYtDp9UduX2NrRiM
Rf0aeYImlB9fwZvjsZCNHZhE6L39lhZWsoQ0qF2+dk7EBqTXKhBakdn4X8dJwMpc
qX55OJXJ5CLRbzEkq4mRm/g82O+zkPmeUEQlQI9MNYGYe7hj/sHFnhnno4LEy+Yx
V274zlqhZQGCs98GyOCuzkvZcfrKs6DtQhiPq/7PCJdA5DhP248iTXXHSzEnglGq
GwPs/d5wCThS7OPv8hV31OvilM7aotXnzb/YOGaiwlcNSiMRLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBufT+fcEiGqWp3uI+W/QkxDir11MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAz
NzhhOS0xMDNjLTQ1Y2EtODY5ZC03YzkxMTVjN2IwZjYvZDViYTY1MmItM2I4Mi0z
NTg2LTllN2YtZGMxMDM4YjJlNTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQwMzc4YTktMTAzYy00NWNhLTg2
OWQtN2M5MTE1YzdiMGY2LzBkMDM3OGE5LTEwM2MtNDVjYS04NjlkLTdjOTExNWM3
YjBmNi5jcmwwHwYDVR0jBBgwFoAUQpcvL3NZ63r1YWANDjlXhTjWG8kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAzNzhhOS0xMDNjLTQ1Y2EtODY5ZC03Yzkx
MTVjN2IwZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzpVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEq22C3fIi3T9H5nE3cTRJmGPUtm6QY3vbis8S6FmTY8+u9cP7xUEel+
1V3OhUFVXDb2PER5NJbMB3o0GPH0dOmMcoyyuUnsERVVqqZcE9Qkh2Q+gSN0CFp0
7L04zsllht5KMAcV2B74kMWnpBVhglI7TXlHb4s/RV8Y34P6Fjnece+jFWrJtMj8
fA2D+7gKJDvtlAuMF+OScqy72KIsxFA545bys83UWhUXaWthHoXsoRfrqqG3bWyf
ITKvDZ3zaM1bV0pgV8tWcZAQvnw9jYRRsZEVLK1rUE63nCO0qWZk/9VRO28YrzS5
+Nwkkadgt3jPbzw2pNMJfG5iIz0E/00=
-----END CERTIFICATE-----
Generated at Mon Aug 31 11:25:32 2026 by rpki-client