Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/628af680-d4d2-3ef9-a215-322430bce35d.roa
File:                     628af680-d4d2-3ef9-a215-322430bce35d.roa (raw, json)
Hash identifier:          meWmasKQw1LSFFYnjZgCwdGulzfvHmzvI++VnuXp1Gk=
Subject key identifier:   22:27:E9:5E:CC:58:BB:36:BE:54:DF:DA:51:24:C3:20:55:76:3F:5E
Certificate issuer:       /CN=5dc32e87-d25f-444f-adc0-e3c94e9679db
Certificate serial:       010D0C9F4328584E81B83191C47D4E7CA33AF580
Authority key identifier: 9A:9A:36:11:68:63:DC:25:76:34:69:7C:7C:0B:BA:19:88:E5:4C:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/628af680-d4d2-3ef9-a215-322430bce35d.roa
Signing time:             Wed 15 Jul 2026 11:58:55 +0000
ROA not before:           Wed 15 Jul 2026 11:58:55 +0000
ROA not after:            Tue 13 Oct 2026 11:58:55 +0000
asID:                     400384
IP address blocks:        208.77.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/5dc32e87-d25f-444f-adc0-e3c94e9679db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/5dc32e87-d25f-444f-adc0-e3c94e9679db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:b8:31:91:c4:7d:4e:7c:a3:3a:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc32e87-d25f-444f-adc0-e3c94e9679db
        Validity
            Not Before: Jul 15 11:58:55 2026 GMT
            Not After : Oct 13 11:58:55 2026 GMT
        Subject: CN=f454219e-096d-4c27-94f8-20036fbe8867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bf:89:bc:8b:9c:d1:97:16:aa:ac:cb:aa:29:
                    aa:eb:1b:08:d8:08:c4:f6:82:14:34:41:6a:1b:8c:
                    6b:d4:b2:78:fb:12:80:33:2e:ef:50:56:83:55:26:
                    55:a3:ef:8e:76:9f:72:6f:c6:4e:33:c6:e2:ff:9a:
                    80:1e:b8:fc:f0:2d:6b:91:2f:c1:35:19:ad:d8:17:
                    a2:3a:ab:e2:6f:a0:53:12:b3:ed:5e:d7:76:7b:93:
                    e3:5e:ce:ea:8d:ed:e4:e4:13:8a:b9:71:8e:cf:14:
                    94:f8:98:64:09:e6:c1:06:96:01:59:6c:ec:50:b2:
                    b6:f3:bf:c1:38:6f:36:cd:94:af:7e:8e:9a:87:18:
                    7b:01:0a:b8:67:1b:cd:b9:de:53:b4:a6:7b:ca:ee:
                    33:95:bc:1b:34:ac:c1:1d:2a:fd:db:53:ad:74:13:
                    ae:80:e1:95:4c:d6:1b:71:18:e7:39:dc:80:57:4c:
                    a2:85:e7:b4:62:b3:ef:b1:5a:ee:e4:fb:0b:dd:1b:
                    e9:e3:7f:54:69:16:7e:78:4e:50:59:3b:3d:db:19:
                    79:c5:5a:a9:65:df:b3:92:df:23:92:cf:c8:56:84:
                    3c:09:89:3a:75:b3:57:ec:74:e8:52:1f:59:68:39:
                    9a:45:71:b1:6d:1a:1d:0a:34:4e:a7:76:6c:1c:cd:
                    7c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:27:E9:5E:CC:58:BB:36:BE:54:DF:DA:51:24:C3:20:55:76:3F:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/628af680-d4d2-3ef9-a215-322430bce35d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db/5dc32e87-d25f-444f-adc0-e3c94e9679db.crl

            X509v3 Authority Key Identifier:
                keyid:9A:9A:36:11:68:63:DC:25:76:34:69:7C:7C:0B:BA:19:88:E5:4C:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5dc32e87-d25f-444f-adc0-e3c94e9679db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.77.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:ed:6a:ce:6c:5c:05:dd:46:dc:db:d1:19:24:a4:d6:95:ad:
         40:05:06:19:45:0a:90:7c:77:a4:08:14:24:79:d4:d9:55:9b:
         d2:fa:08:b4:13:39:38:b3:94:a6:c4:3b:1c:03:33:bf:6a:af:
         7c:f2:de:bd:67:d5:46:0b:78:99:b7:59:ed:90:bf:6f:38:37:
         b5:92:7b:39:c2:b2:94:c6:ae:be:ba:b7:2c:82:12:29:94:b6:
         79:24:1f:1f:8f:32:4d:3d:ea:ee:8b:24:f2:52:b0:f9:ac:fb:
         4a:3f:b1:0f:77:a8:79:93:71:0b:51:d7:80:2d:89:02:8e:f6:
         31:5d:a6:67:ed:bf:18:ed:af:cc:b2:dd:87:6d:a5:c7:96:97:
         3b:fb:a9:f2:ba:aa:0a:46:a1:21:97:04:76:ae:17:8f:ba:1f:
         25:56:9c:66:dc:7f:9d:35:93:ac:07:a9:57:3d:3f:eb:66:f2:
         da:e3:1e:61:c7:e4:c9:3f:9b:1e:74:18:20:4d:e7:ad:6b:82:
         d3:6e:72:f4:48:41:fe:ed:ca:98:bf:6b:42:8e:67:2a:b1:34:
         58:cd:a4:d2:12:60:e1:a5:18:30:0c:2d:b2:da:a1:77:18:65:
         e3:cf:ba:d0:d0:d3:58:12:ee:4a:d1:42:89:0f:83:88:cd:e0:
         b5:d5:06:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6BuDGRxH1OfKM69YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRjMzJlODctZDI1Zi00NDRmLWFkYzAtZTNjOTRlOTY3
OWRiMB4XDTI2MDcxNTExNTg1NVoXDTI2MTAxMzExNTg1NVowLzEtMCsGA1UEAxMk
ZjQ1NDIxOWUtMDk2ZC00YzI3LTk0ZjgtMjAwMzZmYmU4ODY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7+JvIuc0ZcWqqzLqimq6xsI2AjE9oIUNEFq
G4xr1LJ4+xKAMy7vUFaDVSZVo++Odp9yb8ZOM8bi/5qAHrj88C1rkS/BNRmt2Bei
Oqvib6BTErPtXtd2e5PjXs7qje3k5BOKuXGOzxSU+JhkCebBBpYBWWzsULK287/B
OG82zZSvfo6ahxh7AQq4ZxvNud5TtKZ7yu4zlbwbNKzBHSr921OtdBOugOGVTNYb
cRjnOdyAV0yihee0YrPvsVru5PsL3Rvp439UaRZ+eE5QWTs92xl5xVqpZd+zkt8j
ks/IVoQ8CYk6dbNX7HToUh9ZaDmaRXGxbRodCjROp3ZsHM18uwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCIn6V7MWLs2vlTf2lEkwyBVdj9eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81ZGMz
MmU4Ny1kMjVmLTQ0NGYtYWRjMC1lM2M5NGU5Njc5ZGIvNjI4YWY2ODAtZDRkMi0z
ZWY5LWEyMTUtMzIyNDMwYmNlMzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNWRjMzJlODctZDI1Zi00NDRmLWFk
YzAtZTNjOTRlOTY3OWRiLzVkYzMyZTg3LWQyNWYtNDQ0Zi1hZGMwLWUzYzk0ZTk2
NzlkYi5jcmwwHwYDVR0jBBgwFoAUmpo2EWhj3CV2NGl8fAu6GYjlTEowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi81ZGMzMmU4Ny1kMjVmLTQ0NGYtYWRjMC1lM2M5
NGU5Njc5ZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0E2kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADntas5sXAXdRtzb0RkkpNaVrUAFBhlFCpB8d6QIFCR51NlVm9L6CLQT
OTizlKbEOxwDM79qr3zy3r1n1UYLeJm3We2Qv284N7WSeznCspTGrr66tyyCEimU
tnkkHx+PMk096u6LJPJSsPms+0o/sQ93qHmTcQtR14AtiQKO9jFdpmftvxjtr8yy
3YdtpceWlzv7qfK6qgpGoSGXBHauF4+6HyVWnGbcf501k6wHqVc9P+tm8trjHmHH
5Mk/mx50GCBN561rgtNucvRIQf7typi/a0KOZyqxNFjNpNISYOGlGDAMLbLaoXcY
ZePPutDQ01gS7krRQokPg4jN4LXVBqE=
-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:20 2026 by rpki-client