Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c173b81a-8a70-4ca8-8517-24722a315838/1d3b3f4c-f89d-31fe-821e-570beee917c1.roa
File:                     1d3b3f4c-f89d-31fe-821e-570beee917c1.roa (raw, json)
Hash identifier:          A9MNJ2i2sWed5X9ZTPZ52HiiwqO+Z407wr48i9SbgCY=
Subject key identifier:   70:55:E1:B4:65:37:E0:57:00:FE:4D:9F:4B:1A:39:7F:39:A9:2B:DC
Certificate issuer:       /CN=c173b81a-8a70-4ca8-8517-24722a315838
Certificate serial:       010D0C9F4328584EE921F7EE5D85BD6CD2A89628
Authority key identifier: CB:64:8F:4C:77:80:6B:12:99:88:84:6E:07:3A:64:17:BF:FA:8B:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c173b81a-8a70-4ca8-8517-24722a315838.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c173b81a-8a70-4ca8-8517-24722a315838/1d3b3f4c-f89d-31fe-821e-570beee917c1.roa
Signing time:             Fri 21 Aug 2026 13:00:11 +0000
ROA not before:           Fri 21 Aug 2026 13:00:11 +0000
ROA not after:            Thu 19 Nov 2026 14:00:11 +0000
asID:                     26377
IP address blocks:        192.67.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c173b81a-8a70-4ca8-8517-24722a315838/c173b81a-8a70-4ca8-8517-24722a315838.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c173b81a-8a70-4ca8-8517-24722a315838/c173b81a-8a70-4ca8-8517-24722a315838.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c173b81a-8a70-4ca8-8517-24722a315838.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e9:21:f7:ee:5d:85:bd:6c:d2:a8:96:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c173b81a-8a70-4ca8-8517-24722a315838
        Validity
            Not Before: Aug 21 13:00:11 2026 GMT
            Not After : Nov 19 14:00:11 2026 GMT
        Subject: CN=7fd8e776-c606-4d5b-a5f5-3f35bab3b36c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f8:b2:9f:7d:4e:42:44:dc:ed:7f:2d:9c:9c:
                    3a:e4:cb:6e:78:de:bc:f5:e1:1c:58:71:de:d4:75:
                    b4:94:ee:1c:2c:34:18:ef:4e:bf:86:78:86:bc:d4:
                    1b:02:a7:8e:fb:4c:20:5b:5f:d1:3f:7a:53:1b:45:
                    43:9c:1a:51:a2:e2:e8:e5:2d:11:8d:0a:33:8a:9f:
                    23:a8:aa:47:ea:0d:a7:23:7e:68:d0:42:d1:9b:15:
                    70:eb:eb:41:e1:5c:8a:55:3b:c3:af:54:1c:0a:c4:
                    87:e2:bf:e8:b4:ac:f9:5f:84:92:14:80:df:e9:93:
                    1a:84:e0:18:00:a8:12:66:b8:d2:1e:e1:a6:05:6d:
                    ef:01:02:60:48:45:f0:d5:4f:68:6d:31:e1:60:c2:
                    55:cb:63:53:d7:86:52:8c:0b:b7:8e:43:92:4e:bb:
                    cd:5d:c3:4b:18:50:68:d3:a1:f8:79:b6:37:a0:bc:
                    f1:cd:a4:9d:7f:d0:87:9d:3c:1f:6b:b8:88:7f:63:
                    e6:d8:eb:f7:7e:e5:ef:53:3d:3a:c4:f1:2c:60:cb:
                    e4:df:3c:47:2d:61:c4:d0:d8:3e:97:c9:fb:9a:09:
                    68:d1:7a:31:43:7a:61:e9:7b:c1:6a:ec:d4:a2:9d:
                    f3:c1:03:34:31:03:10:22:b2:89:b4:9a:8f:f0:11:
                    fc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:55:E1:B4:65:37:E0:57:00:FE:4D:9F:4B:1A:39:7F:39:A9:2B:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c173b81a-8a70-4ca8-8517-24722a315838/1d3b3f4c-f89d-31fe-821e-570beee917c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c173b81a-8a70-4ca8-8517-24722a315838/c173b81a-8a70-4ca8-8517-24722a315838.crl

            X509v3 Authority Key Identifier:
                keyid:CB:64:8F:4C:77:80:6B:12:99:88:84:6E:07:3A:64:17:BF:FA:8B:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c173b81a-8a70-4ca8-8517-24722a315838.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:71:7b:2d:6f:85:21:21:57:b6:10:ed:17:bc:5d:da:32:78:
         98:9e:7c:1e:60:ca:a0:3a:4d:d0:92:c9:0c:53:95:09:9d:87:
         0d:fc:38:09:f2:2a:82:d2:74:a0:90:8a:f9:2e:d1:7f:59:47:
         c4:52:1c:34:07:56:68:40:b2:2e:91:d8:12:74:3c:52:a4:1b:
         74:20:75:ad:18:e1:8b:8c:e5:99:8e:8c:a5:46:61:e2:8e:84:
         f2:8a:16:b5:9b:ed:b9:fd:0b:b3:3b:a4:af:4c:c9:fb:0e:51:
         ce:c1:20:5b:a1:27:a0:f9:ab:62:ad:04:7c:28:65:a7:41:06:
         f8:40:57:4a:26:4c:7f:ed:a9:69:cc:66:c3:3a:02:d5:f6:66:
         98:f4:0a:c9:87:a3:16:06:e2:f9:72:36:67:96:75:a6:b4:13:
         36:b8:e2:7d:0f:4f:84:a9:d0:f9:01:1d:e6:e8:2f:5c:dc:ad:
         07:20:55:94:e3:9c:b7:c2:c1:d1:0d:24:b6:27:42:9c:63:e5:
         73:b0:c2:5b:c5:bb:59:27:1f:22:39:d3:6c:27:97:04:67:c9:
         e5:fc:e0:8b:7d:08:fe:8f:d5:a0:4b:96:7f:3a:42:6b:6e:d0:
         24:28:9b:1b:6c:5f:4f:17:00:fc:6c:b5:f6:37:f6:02:dd:af:
         72:27:f7:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7pIffuXYW9bNKoligwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzE3M2I4MWEtOGE3MC00Y2E4LTg1MTctMjQ3MjJhMzE1
ODM4MB4XDTI2MDgyMTEzMDAxMVoXDTI2MTExOTE0MDAxMVowLzEtMCsGA1UEAxMk
N2ZkOGU3NzYtYzYwNi00ZDViLWE1ZjUtM2YzNWJhYjNiMzZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/iyn31OQkTc7X8tnJw65MtueN689eEcWHHe
1HW0lO4cLDQY706/hniGvNQbAqeO+0wgW1/RP3pTG0VDnBpRouLo5S0RjQozip8j
qKpH6g2nI35o0ELRmxVw6+tB4VyKVTvDr1QcCsSH4r/otKz5X4SSFIDf6ZMahOAY
AKgSZrjSHuGmBW3vAQJgSEXw1U9obTHhYMJVy2NT14ZSjAu3jkOSTrvNXcNLGFBo
06H4ebY3oLzxzaSdf9CHnTwfa7iIf2Pm2Ov3fuXvUz06xPEsYMvk3zxHLWHE0Ng+
l8n7mglo0XoxQ3ph6XvBauzUop3zwQM0MQMQIrKJtJqP8BH85wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHBV4bRlN+BXAP5Nn0saOX85qSvcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMTcz
YjgxYS04YTcwLTRjYTgtODUxNy0yNDcyMmEzMTU4MzgvMWQzYjNmNGMtZjg5ZC0z
MWZlLTgyMWUtNTcwYmVlZTkxN2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzE3M2I4MWEtOGE3MC00Y2E4LTg1
MTctMjQ3MjJhMzE1ODM4L2MxNzNiODFhLThhNzAtNGNhOC04NTE3LTI0NzIyYTMx
NTgzOC5jcmwwHwYDVR0jBBgwFoAUy2SPTHeAaxKZiIRuBzpkF7/6i8IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMTczYjgxYS04YTcwLTRjYTgtODUxNy0yNDcy
MmEzMTU4MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEPeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAElxey1vhSEhV7YQ7Re8XdoyeJiefB5gyqA6TdCSyQxTlQmdhw38OAny
KoLSdKCQivku0X9ZR8RSHDQHVmhAsi6R2BJ0PFKkG3Qgda0Y4YuM5ZmOjKVGYeKO
hPKKFrWb7bn9C7M7pK9MyfsOUc7BIFuhJ6D5q2KtBHwoZadBBvhAV0omTH/tqWnM
ZsM6AtX2Zpj0CsmHoxYG4vlyNmeWdaa0Eza44n0PT4Sp0PkBHeboL1zcrQcgVZTj
nLfCwdENJLYnQpxj5XOwwlvFu1knHyI502wnlwRnyeX84It9CP6P1aBLln86Qmtu
0CQomxtsX08XAPxstfY39gLdr3In9wU=
-----END CERTIFICATE-----
Generated at Thu Aug 27 08:54:35 2026 by rpki-client