Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d320e1b9-c43b-3503-85a0-06e7b614e696.roa
File:                     d320e1b9-c43b-3503-85a0-06e7b614e696.roa (raw, json)
Hash identifier:          w83+5hiX/N0VE2SZivbfdol+4Z/vo/vjPHVQ+6vd2l0=
Subject key identifier:   F1:14:09:1E:6F:06:CF:14:EE:03:0B:6E:74:5C:F7:F3:B8:61:D9:A7
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E9A7FC7692FF4C50F20BE0A80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d320e1b9-c43b-3503-85a0-06e7b614e696.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     22516
IP address blocks:        174.134.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:c7:69:2f:f4:c5:0f:20:be:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=e88d2a27-51c2-4fee-ab3f-3687e223cbc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b8:00:51:d1:72:c3:b9:a1:f1:b1:cc:db:1d:
                    9c:01:db:2a:ac:90:bd:bf:53:7c:59:35:ed:72:e6:
                    b1:65:bc:fa:0c:38:ab:df:b8:91:93:41:4c:84:f3:
                    20:bb:9c:56:ad:3c:c9:81:bc:1c:90:b5:15:9c:b3:
                    0e:42:c4:4d:5b:06:bc:5c:34:2f:d3:7b:98:d0:e0:
                    1a:bd:79:4c:af:90:95:66:ec:b3:f2:b6:79:55:0d:
                    2a:45:0d:6e:84:a4:d2:d6:d3:5b:db:41:56:72:12:
                    4f:64:69:3b:89:f4:f2:b1:d0:6c:73:ac:e6:9e:be:
                    b2:80:9b:fb:7b:9a:de:f3:52:22:86:3e:c9:61:ed:
                    53:a4:72:b3:65:1a:2a:2b:ee:a1:22:ec:a8:05:07:
                    e4:bd:95:cc:fc:30:f6:24:2b:f9:cb:1a:65:58:dc:
                    6e:d7:10:3c:84:1a:73:81:7e:86:54:af:20:0f:75:
                    b2:cf:69:1b:e6:51:10:f4:51:2d:af:4d:21:37:13:
                    6f:b6:9d:f9:a8:04:1c:f7:bf:b1:57:de:a1:e7:77:
                    57:3a:9c:4d:7b:5c:c8:f4:ad:64:51:dc:a9:54:12:
                    1d:0f:e6:46:61:d4:26:c5:08:4e:6c:05:3b:8a:fd:
                    6a:2d:7d:29:ea:ad:ea:51:7a:66:d0:1f:4f:17:19:
                    c6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:14:09:1E:6F:06:CF:14:EE:03:0B:6E:74:5C:F7:F3:B8:61:D9:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d320e1b9-c43b-3503-85a0-06e7b614e696.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.134.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:19:ac:e4:67:98:93:98:87:ab:98:57:70:8d:79:1d:b5:73:
         ca:ac:dc:80:77:2c:d6:c2:24:d0:a6:f1:f3:5d:c6:9a:43:67:
         eb:5d:26:4e:4d:e2:62:89:11:cf:af:a8:24:c4:3a:f5:a3:4e:
         c3:40:ed:08:4c:74:84:c6:93:2f:3f:a9:ee:ee:70:f6:0f:39:
         35:32:fe:46:23:e4:d6:14:47:b3:63:4c:99:63:fa:b3:a8:7a:
         29:8a:ed:4c:ee:06:78:a1:fa:6e:d3:1a:59:67:08:1c:60:73:
         d5:36:0b:93:26:f3:50:f2:7d:fa:1b:fa:1f:4a:27:e9:64:59:
         7e:9a:5c:fd:45:26:8c:d6:47:4a:a1:94:80:86:33:9e:55:4f:
         b8:08:b1:65:eb:fe:b5:02:b6:24:53:7e:30:b7:89:6d:d4:cb:
         fb:38:4a:1f:66:94:9a:bf:81:2a:64:80:3c:a6:cf:97:74:87:
         72:5b:b2:9a:f5:67:17:3a:62:b9:43:e1:fc:4a:3c:7f:17:93:
         ef:ac:9f:13:1d:b0:42:83:6d:da:3d:e1:95:fd:68:ff:17:fd:
         86:aa:0d:fc:24:0c:33:35:a3:65:f4:8a:16:76:66:3e:fb:bb:
         f0:f6:8d:e4:b6:39:1e:86:f3:46:94:17:1a:73:03:d9:9a:19:
         68:d6:e5:1e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6af8dpL/TFDyC+CoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk
ZTg4ZDJhMjctNTFjMi00ZmVlLWFiM2YtMzY4N2UyMjNjYmMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrgAUdFyw7mh8bHM2x2cAdsqrJC9v1N8WTXt
cuaxZbz6DDir37iRk0FMhPMgu5xWrTzJgbwckLUVnLMOQsRNWwa8XDQv03uY0OAa
vXlMr5CVZuyz8rZ5VQ0qRQ1uhKTS1tNb20FWchJPZGk7ifTysdBsc6zmnr6ygJv7
e5re81Iihj7JYe1TpHKzZRoqK+6hIuyoBQfkvZXM/DD2JCv5yxplWNxu1xA8hBpz
gX6GVK8gD3Wyz2kb5lEQ9FEtr00hNxNvtp35qAQc97+xV96h53dXOpxNe1zI9K1k
UdypVBIdD+ZGYdQmxQhObAU7iv1qLX0p6q3qUXpm0B9PFxnG6wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPEUCR5vBs8U7gMLbnRc9/O4YdmnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZDMyMGUxYjktYzQzYi0z
NTAzLTg1YTAtMDZlN2I2MTRlNjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAroYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgRms5GeYk5iHq5hXcI15HbVzyqzcgHcs1sIk0Kbx813GmkNn610mTk3i
YokRz6+oJMQ69aNOw0DtCEx0hMaTLz+p7u5w9g85NTL+RiPk1hRHs2NMmWP6s6h6
KYrtTO4GeKH6btMaWWcIHGBz1TYLkybzUPJ9+hv6H0on6WRZfppc/UUmjNZHSqGU
gIYznlVPuAixZev+tQK2JFN+MLeJbdTL+zhKH2aUmr+BKmSAPKbPl3SHcluymvVn
FzpiuUPh/Eo8fxeT76yfEx2wQoNt2j3hlf1o/xf9hqoN/CQMMzWjZfSKFnZmPvu7
8PaN5LY5HobzRpQXGnMD2ZoZaNblHg==
-----END CERTIFICATE-----
Generated at Fri Sep 4 16:18:37 2026 by rpki-client