Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/145e6030-4340-4419-bc76-7b3e844b2b1a/a775ed88-08ec-3937-9f31-71af3698d80b.roa
File:                     a775ed88-08ec-3937-9f31-71af3698d80b.roa (raw, json)
Hash identifier:          kqYvegScFnfMGo8pr7okVuTB1BscJnnrFrU5JdfK5gw=
Subject key identifier:   CB:4F:E7:AB:D1:CE:B5:3A:C4:20:E2:59:9D:94:EE:A2:B4:69:E1:50
Certificate issuer:       /CN=145e6030-4340-4419-bc76-7b3e844b2b1a
Certificate serial:       010D0C9F4328584E4129E7CF05CEBD4291D54800
Authority key identifier: 2B:FA:95:93:46:3A:BA:FA:98:E0:B1:65:B4:0A:DC:7D:63:D4:A2:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/145e6030-4340-4419-bc76-7b3e844b2b1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/145e6030-4340-4419-bc76-7b3e844b2b1a/a775ed88-08ec-3937-9f31-71af3698d80b.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     13760
IP address blocks:        167.179.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/145e6030-4340-4419-bc76-7b3e844b2b1a/145e6030-4340-4419-bc76-7b3e844b2b1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/145e6030-4340-4419-bc76-7b3e844b2b1a/145e6030-4340-4419-bc76-7b3e844b2b1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/145e6030-4340-4419-bc76-7b3e844b2b1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:e7:cf:05:ce:bd:42:91:d5:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=145e6030-4340-4419-bc76-7b3e844b2b1a
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=d16fabf5-0b52-4dda-bf04-052c974ac760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d7:4c:8f:06:9c:39:b3:0f:02:3c:f0:c2:7a:
                    af:28:55:64:d3:a1:87:4e:9c:6b:a1:f4:b9:c5:a6:
                    76:d1:6c:97:75:a3:c5:3c:04:4d:63:c2:9a:c5:48:
                    28:ea:37:28:e2:63:bb:cd:c5:05:58:17:76:40:7a:
                    f6:f9:8f:db:1d:7c:fc:d0:b0:e3:0b:44:fb:4f:0e:
                    1f:43:c8:22:6b:6e:a9:a2:c1:51:0a:17:27:84:63:
                    eb:0b:0d:e9:0a:25:22:28:b4:6b:55:4d:4c:83:5a:
                    33:b6:67:d7:ed:8e:b3:2e:5d:1d:9f:0f:77:2b:7b:
                    28:56:7d:f5:3e:8f:4f:64:78:a4:d9:72:10:0d:b5:
                    5f:63:78:da:4b:a1:ef:0f:21:a3:27:a5:f3:49:a8:
                    5a:5f:04:61:3a:6d:51:94:5b:85:5c:bb:cd:ba:34:
                    7d:b5:c9:b9:16:c0:38:28:9b:54:8d:c4:c5:fd:d8:
                    67:da:31:bd:49:de:ab:55:b7:26:ac:28:de:08:dd:
                    dc:a1:7d:57:e8:41:1a:99:6e:86:62:ec:a6:5a:74:
                    bf:23:8c:3c:2e:51:13:10:ad:ba:d7:4f:80:27:0c:
                    7f:a5:93:a8:c3:24:23:26:07:03:97:dc:2a:b6:7c:
                    2d:3f:ec:83:a6:b4:9c:49:1a:85:0f:d2:e0:e6:6d:
                    82:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4F:E7:AB:D1:CE:B5:3A:C4:20:E2:59:9D:94:EE:A2:B4:69:E1:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/145e6030-4340-4419-bc76-7b3e844b2b1a/a775ed88-08ec-3937-9f31-71af3698d80b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/145e6030-4340-4419-bc76-7b3e844b2b1a/145e6030-4340-4419-bc76-7b3e844b2b1a.crl

            X509v3 Authority Key Identifier:
                keyid:2B:FA:95:93:46:3A:BA:FA:98:E0:B1:65:B4:0A:DC:7D:63:D4:A2:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/145e6030-4340-4419-bc76-7b3e844b2b1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.179.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:d5:84:91:da:b5:9a:2c:a9:1d:94:bf:65:c7:05:20:4f:db:
         a8:59:50:09:50:d9:56:22:59:dc:da:00:81:d1:25:57:26:d9:
         37:07:62:6e:a6:ca:7c:05:31:e6:8d:16:9b:2e:a3:37:18:48:
         c0:01:ed:07:c9:4a:bb:94:15:87:d5:42:e6:60:60:8e:5a:90:
         63:26:2c:fb:33:44:dc:c5:43:c9:b8:9d:83:77:29:9d:66:db:
         82:09:31:69:da:86:9d:6f:d4:5f:8a:88:73:20:72:ba:e1:10:
         cb:6e:8e:1e:55:77:f2:10:ed:0a:ca:4b:fb:f8:74:4d:46:81:
         c3:be:b2:da:07:07:9e:06:b7:d4:3e:c8:31:7c:d0:9f:71:66:
         d1:bc:c9:42:3f:00:db:ea:6a:88:58:42:14:96:ee:54:6f:87:
         52:b5:01:81:b5:ab:f3:0b:1f:af:cb:40:24:e6:af:d0:82:07:
         66:35:1a:41:22:15:a7:88:9d:de:60:2e:78:cb:14:bd:18:df:
         38:54:e9:f3:d0:03:07:45:4f:b2:ec:0d:1a:75:0d:09:92:79:
         fc:73:a5:8e:a6:51:69:15:5e:40:1d:18:88:e5:44:9e:12:34:
         a9:3b:71:72:35:d5:d2:87:ac:fa:02:87:32:5f:98:98:18:87:
         50:b9:97:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKefPBc69QpHVSAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQ1ZTYwMzAtNDM0MC00NDE5LWJjNzYtN2IzZTg0NGIy
YjFhMB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk
ZDE2ZmFiZjUtMGI1Mi00ZGRhLWJmMDQtMDUyYzk3NGFjNzYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNdMjwacObMPAjzwwnqvKFVk06GHTpxrofS5
xaZ20WyXdaPFPARNY8KaxUgo6jco4mO7zcUFWBd2QHr2+Y/bHXz80LDjC0T7Tw4f
Q8gia26posFRChcnhGPrCw3pCiUiKLRrVU1Mg1oztmfX7Y6zLl0dnw93K3soVn31
Po9PZHik2XIQDbVfY3jaS6HvDyGjJ6XzSahaXwRhOm1RlFuFXLvNujR9tcm5FsA4
KJtUjcTF/dhn2jG9Sd6rVbcmrCjeCN3coX1X6EEamW6GYuymWnS/I4w8LlETEK26
10+AJwx/pZOowyQjJgcDl9wqtnwtP+yDprScSRqFD9Lg5m2CZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMtP56vRzrU6xCDiWZ2U7qK0aeFQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xNDVl
NjAzMC00MzQwLTQ0MTktYmM3Ni03YjNlODQ0YjJiMWEvYTc3NWVkODgtMDhlYy0z
OTM3LTlmMzEtNzFhZjM2OThkODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMTQ1ZTYwMzAtNDM0MC00NDE5LWJj
NzYtN2IzZTg0NGIyYjFhLzE0NWU2MDMwLTQzNDAtNDQxOS1iYzc2LTdiM2U4NDRi
MmIxYS5jcmwwHwYDVR0jBBgwFoAUK/qVk0Y6uvqY4LFltArcfWPUoq0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8xNDVlNjAzMC00MzQwLTQ0MTktYmM3Ni03YjNl
ODQ0YjJiMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp7MWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEHVhJHatZosqR2Uv2XHBSBP26hZUAlQ2VYiWdzaAIHRJVcm2TcHYm6m
ynwFMeaNFpsuozcYSMAB7QfJSruUFYfVQuZgYI5akGMmLPszRNzFQ8m4nYN3KZ1m
24IJMWnahp1v1F+KiHMgcrrhEMtujh5Vd/IQ7QrKS/v4dE1GgcO+stoHB54Gt9Q+
yDF80J9xZtG8yUI/ANvqaohYQhSW7lRvh1K1AYG1q/MLH6/LQCTmr9CCB2Y1GkEi
FaeInd5gLnjLFL0Y3zhU6fPQAwdFT7LsDRp1DQmSefxzpY6mUWkVXkAdGIjlRJ4S
NKk7cXI11dKHrPoChzJfmJgYh1C5lxQ=
-----END CERTIFICATE-----
Generated at Mon Jul 13 08:39:29 2026 by rpki-client