Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/cc3199e9-ef8a-38ab-8b3e-8e94e40fdef1.roa
File:                     cc3199e9-ef8a-38ab-8b3e-8e94e40fdef1.roa (raw, json)
Hash identifier:          LzCyVWQm4BP2JSnonTP1uGz/N+LmYI7cmgjZ0muxGS0=
Subject key identifier:   73:AD:94:A3:9C:D3:C9:CD:FC:3F:5F:EE:46:60:B8:F0:EC:27:27:CE
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F4328584F17324A993C9ABE07942F5800
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/cc3199e9-ef8a-38ab-8b3e-8e94e40fdef1.roa
Signing time:             Mon 07 Sep 2026 01:00:11 +0000
ROA not before:           Mon 07 Sep 2026 01:00:11 +0000
ROA not after:            Sun 06 Dec 2026 02:00:11 +0000
asID:                     7029
IP address blocks:        202.165.72.0/21 maxlen: 24
                          202.182.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:17:32:4a:99:3c:9a:be:07:94:2f:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Sep  7 01:00:11 2026 GMT
            Not After : Dec  6 02:00:11 2026 GMT
        Subject: CN=d84ea682-8e25-4751-940e-b7921b2baa9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0c:ea:13:42:21:0d:13:8f:a4:21:e5:6f:e2:
                    22:f8:40:e8:9c:57:d1:94:68:8e:ec:b8:cc:84:36:
                    13:40:6e:f4:d6:94:7a:43:15:57:17:0e:8d:65:c3:
                    d4:98:1b:f9:1e:17:10:28:12:6e:eb:91:e0:f3:5f:
                    93:ed:26:2e:9e:bc:57:b7:1d:55:13:6e:ce:be:76:
                    05:c0:19:3f:df:71:d9:f0:60:7b:83:7a:dc:41:1b:
                    90:da:b9:8d:93:9a:b0:e4:2d:37:c8:4f:e1:8c:55:
                    e0:6b:a2:b9:04:63:ad:cc:8f:be:9f:87:fa:d3:b5:
                    f5:42:d0:0c:35:c0:18:51:cd:c6:eb:0f:e3:59:58:
                    57:b0:40:ff:f1:06:21:45:ed:9a:6f:9f:d4:f0:f0:
                    77:b4:30:07:5f:eb:91:55:e4:11:e9:d7:5b:77:ba:
                    d0:3a:d1:f5:f8:5b:13:ae:8f:c5:cc:9b:82:a8:df:
                    5b:f4:63:d6:81:eb:41:7e:bf:d2:36:1b:6a:5d:72:
                    bd:6b:68:4c:86:cf:12:6a:c9:97:1c:cc:96:b9:fc:
                    39:b4:0e:30:0f:99:cf:33:da:05:a7:d9:5f:e0:25:
                    7c:48:6a:59:4a:26:d0:c4:66:e4:60:6f:12:9a:ff:
                    8d:e3:82:23:f5:19:59:a7:16:b1:c0:09:b7:1b:bc:
                    d0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AD:94:A3:9C:D3:C9:CD:FC:3F:5F:EE:46:60:B8:F0:EC:27:27:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/cc3199e9-ef8a-38ab-8b3e-8e94e40fdef1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.165.72.0/21
                  202.182.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e3:81:7f:b6:84:69:bb:aa:34:5b:db:49:dc:fa:ce:bc:a9:
         dc:25:6a:53:40:56:41:37:97:9e:4c:23:23:57:a0:10:01:3f:
         26:3f:66:b3:9d:1f:a8:77:66:a6:1f:0c:95:44:34:59:7c:af:
         6e:35:32:1d:11:10:ab:bd:49:71:71:bb:9d:36:ae:2d:37:f4:
         a1:2e:c2:f2:fc:1d:af:89:a8:7e:f8:7e:dc:55:ae:bb:04:3a:
         b7:3f:f2:06:9d:a0:8b:f5:93:97:0d:fc:8f:61:e2:b2:41:a6:
         0a:77:3d:66:28:09:49:ec:49:1f:c1:15:67:c2:3c:d8:d6:89:
         bf:b1:9c:91:b1:28:13:65:d4:0b:38:2a:36:5d:d5:16:b9:da:
         2a:cb:a7:42:7e:54:16:74:22:08:22:fa:06:36:12:4c:73:64:
         8d:19:4b:aa:72:ed:3d:3a:9a:ad:7c:93:ce:2a:3b:38:1a:1a:
         af:f9:00:71:d9:d7:6c:19:42:c0:1a:73:4b:67:91:92:a6:bc:
         2a:92:e6:7c:b8:26:8a:cf:15:45:56:c3:70:11:84:a6:94:25:
         d0:ac:e2:eb:c9:55:b1:e0:13:42:10:17:98:5d:d8:77:3e:a5:
         a5:15:4f:80:43:fb:d0:c7:5a:e3:29:96:0f:3b:ea:2e:19:a5:
         bd:b8:ef:f8
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8XMkqZPJq+B5QvWAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWVlMmU0YjAtNmY5YS00M2M3LWI2YmUtNmVmZjQ4ODc2
NjNlMB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk
ZDg0ZWE2ODItOGUyNS00NzUxLTk0MGUtYjc5MjFiMmJhYTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAzqE0IhDROPpCHlb+Ii+EDonFfRlGiO7LjM
hDYTQG701pR6QxVXFw6NZcPUmBv5HhcQKBJu65Hg81+T7SYunrxXtx1VE27OvnYF
wBk/33HZ8GB7g3rcQRuQ2rmNk5qw5C03yE/hjFXga6K5BGOtzI++n4f607X1QtAM
NcAYUc3G6w/jWVhXsED/8QYhRe2ab5/U8PB3tDAHX+uRVeQR6ddbd7rQOtH1+FsT
ro/FzJuCqN9b9GPWgetBfr/SNhtqXXK9a2hMhs8SasmXHMyWufw5tA4wD5nPM9oF
p9lf4CV8SGpZSibQxGbkYG8Smv+N44Ij9RlZpxaxwAm3G7zQswIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFHOtlKOc08nN/D9f7kZguPDsJyfOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUy
ZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZmNDg4NzY2M2UvY2MzMTk5ZTktZWY4YS0z
OGFiLThiM2UtOGU5NGU0MGZkZWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWVlMmU0YjAtNmY5YS00M2M3LWI2
YmUtNmVmZjQ4ODc2NjNlLzVlZTJlNGIwLTZmOWEtNDNjNy1iNmJlLTZlZmY0ODg3
NjYzZS5jcmwwHwYDVR0jBBgwFoAUDhljVY9E40F4e1TAZyFIXjijozAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUyZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZm
NDg4NzY2M2UuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDyqVIAwQE
yrZAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBACDjgX+2hGm7qjRb20nc+s68qdwlalNAVkE3l55MIyNXoBAB
PyY/ZrOdH6h3ZqYfDJVENFl8r241Mh0REKu9SXFxu502ri039KEuwvL8Ha+JqH74
ftxVrrsEOrc/8gadoIv1k5cN/I9h4rJBpgp3PWYoCUnsSR/BFWfCPNjWib+xnJGx
KBNl1As4KjZd1Ra52irLp0J+VBZ0Iggi+gY2EkxzZI0ZS6py7T06mq18k84qOzga
Gq/5AHHZ12wZQsAac0tnkZKmvCqS5ny4JorPFUVWw3ARhKaUJdCs4uvJVbHgE0IQ
F5hd2Hc+paUVT4BD+9DHWuMplg876i4Zpb247/g=
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:20:22 2026 by rpki-client