Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/7e4d501d-1ec6-30fb-9360-2bd1cf325ee1.roa
File:                     7e4d501d-1ec6-30fb-9360-2bd1cf325ee1.roa (raw, json)
Hash identifier:          dpC/LkGOUFEsP7GsIUT8NQky09NJdoFtOMFCok5CllU=
Subject key identifier:   8B:7D:95:32:80:0E:CD:40:2B:D0:34:8F:2A:71:4A:72:5F:79:44:65
Certificate issuer:       /CN=529d57aa-cd56-41d8-b3ad-b413b968b610
Certificate serial:       010D0C9F4328584E4559D7B013DEA54EA2918900
Authority key identifier: 2A:26:48:3C:21:AD:AE:53:6A:32:BC:20:B3:A1:64:46:2C:5C:84:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/7e4d501d-1ec6-30fb-9360-2bd1cf325ee1.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        192.197.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/529d57aa-cd56-41d8-b3ad-b413b968b610.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/529d57aa-cd56-41d8-b3ad-b413b968b610.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:d7:b0:13:de:a5:4e:a2:91:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=529d57aa-cd56-41d8-b3ad-b413b968b610
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=e2851d72-54fa-43f1-91d8-afef9e80e090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:98:21:dc:47:01:ee:2d:08:d5:f6:90:69:27:
                    a6:2b:75:85:47:b0:0f:92:fd:32:37:f4:0f:2d:f7:
                    4d:fe:3c:90:60:fa:e3:da:99:b8:31:e3:c6:90:94:
                    39:22:d9:fb:72:84:52:07:ce:a7:dc:46:bb:9f:8f:
                    9b:04:37:a8:c8:7c:06:99:c1:82:a5:81:d0:e9:be:
                    41:b5:86:78:07:16:94:7d:d6:c5:22:b3:64:16:14:
                    56:bb:71:61:52:e5:a1:59:51:29:24:99:9c:84:0d:
                    58:16:a9:96:ac:f9:1d:36:68:c7:04:d9:ab:8c:02:
                    ee:ac:92:44:e1:34:7f:de:a4:46:c0:5e:eb:29:42:
                    07:f3:f3:64:c8:e4:de:c1:92:74:2d:e9:37:49:dd:
                    90:28:fc:75:4b:96:45:03:47:d7:99:c1:f6:14:9a:
                    15:a9:50:91:a8:1e:5f:a4:2c:d9:f8:13:ff:f7:a7:
                    65:39:68:4b:aa:4f:77:a9:30:57:e5:6e:c2:12:ef:
                    cd:34:06:be:b3:fc:87:fd:e9:80:f4:fb:ef:ac:dd:
                    34:76:05:d9:1f:c9:d4:23:6c:f7:3a:d8:c9:b8:f4:
                    c1:99:0a:55:a5:73:60:81:34:24:45:6d:cc:15:79:
                    62:f9:2f:6d:20:79:b2:f4:ad:2d:ab:cf:a4:78:d4:
                    d7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7D:95:32:80:0E:CD:40:2B:D0:34:8F:2A:71:4A:72:5F:79:44:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/7e4d501d-1ec6-30fb-9360-2bd1cf325ee1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610/529d57aa-cd56-41d8-b3ad-b413b968b610.crl

            X509v3 Authority Key Identifier:
                keyid:2A:26:48:3C:21:AD:AE:53:6A:32:BC:20:B3:A1:64:46:2C:5C:84:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/529d57aa-cd56-41d8-b3ad-b413b968b610.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:a3:68:c2:54:58:47:97:0c:9a:f9:98:fc:6c:34:b2:27:fb:
         96:2f:7c:1a:28:19:a0:79:0a:c9:10:04:03:10:77:27:e0:73:
         eb:76:b8:68:a9:fb:31:76:15:a5:fa:f8:0b:64:65:64:59:d8:
         58:0b:ed:f2:a8:ad:d6:be:dd:87:bd:be:36:3b:65:64:48:9c:
         02:94:bf:62:0d:c6:ea:fc:72:17:6a:a1:42:d2:bc:88:ac:ef:
         b6:30:45:64:cf:fc:95:10:d2:09:dd:bb:90:35:e0:45:7f:84:
         57:49:75:a8:60:16:61:81:1c:aa:84:f0:11:86:d8:67:09:fb:
         58:77:e2:b5:7a:9e:f3:b5:2f:cd:92:07:fc:ea:a0:07:42:e9:
         a6:a0:07:47:df:a9:07:12:9c:de:c5:ce:0b:f3:19:20:87:96:
         8b:f2:49:e1:77:f8:4e:15:fb:b4:33:1e:40:4f:b0:1d:e9:72:
         80:78:e5:6a:31:74:33:fa:66:8a:bf:cb:b3:a7:48:43:55:6e:
         4e:9b:df:bf:52:99:a2:c3:af:47:55:89:91:f5:f5:d9:65:06:
         02:af:2c:eb:e7:55:f7:5f:0f:0d:2c:f9:fe:4c:9e:32:de:57:
         96:b9:6b:bc:e6:26:be:e1:cd:87:39:d8:52:17:dd:7b:9a:83:
         3a:e8:fd:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWdewE96lTqKRiQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTI5ZDU3YWEtY2Q1Ni00MWQ4LWIzYWQtYjQxM2I5Njhi
NjEwMB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk
ZTI4NTFkNzItNTRmYS00M2YxLTkxZDgtYWZlZjllODBlMDkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpgh3EcB7i0I1faQaSemK3WFR7APkv0yN/QP
LfdN/jyQYPrj2pm4MePGkJQ5Itn7coRSB86n3Ea7n4+bBDeoyHwGmcGCpYHQ6b5B
tYZ4BxaUfdbFIrNkFhRWu3FhUuWhWVEpJJmchA1YFqmWrPkdNmjHBNmrjALurJJE
4TR/3qRGwF7rKUIH8/NkyOTewZJ0Lek3Sd2QKPx1S5ZFA0fXmcH2FJoVqVCRqB5f
pCzZ+BP/96dlOWhLqk93qTBX5W7CEu/NNAa+s/yH/emA9PvvrN00dgXZH8nUI2z3
OtjJuPTBmQpVpXNggTQkRW3MFXli+S9tIHmy9K0tq8+keNTXYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIt9lTKADs1AK9A0jypxSnJfeURlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81Mjlk
NTdhYS1jZDU2LTQxZDgtYjNhZC1iNDEzYjk2OGI2MTAvN2U0ZDUwMWQtMWVjNi0z
MGZiLTkzNjAtMmJkMWNmMzI1ZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTI5ZDU3YWEtY2Q1Ni00MWQ4LWIz
YWQtYjQxM2I5NjhiNjEwLzUyOWQ1N2FhLWNkNTYtNDFkOC1iM2FkLWI0MTNiOTY4
YjYxMC5jcmwwHwYDVR0jBBgwFoAUKiZIPCGtrlNqMrwgs6FkRixchFQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS81MjlkNTdhYS1jZDU2LTQxZDgtYjNhZC1iNDEz
Yjk2OGI2MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMXPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJujaMJUWEeXDJr5mPxsNLIn+5YvfBooGaB5CskQBAMQdyfgc+t2uGip
+zF2FaX6+AtkZWRZ2FgL7fKorda+3Ye9vjY7ZWRInAKUv2INxur8chdqoULSvIis
77YwRWTP/JUQ0gndu5A14EV/hFdJdahgFmGBHKqE8BGG2GcJ+1h34rV6nvO1L82S
B/zqoAdC6aagB0ffqQcSnN7FzgvzGSCHlovySeF3+E4V+7QzHkBPsB3pcoB45Wox
dDP6Zoq/y7OnSENVbk6b379SmaLDr0dViZH19dllBgKvLOvnVfdfDw0s+f5MnjLe
V5a5a7zmJr7hzYc52FIX3Xuagzro/Xc=
-----END CERTIFICATE-----
Generated at Wed Jun 24 22:32:56 2026 by rpki-client