Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/140c76e7-c79a-30b2-87f8-53314cf773e8.roa
File:                     140c76e7-c79a-30b2-87f8-53314cf773e8.roa (raw, json)
Hash identifier:          p+SXig320ABK4Tuan/Cyk5HAQgzUfDMi+lS4iIER+Gw=
Subject key identifier:   13:21:B1:DB:F4:5E:59:77:59:64:12:FE:85:C1:5A:FC:E8:C0:30:4D
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584ECDB685A1D391B951C6741F40
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/140c76e7-c79a-30b2-87f8-53314cf773e8.roa
Signing time:             Tue 11 Aug 2026 17:16:59 +0000
ROA not before:           Tue 11 Aug 2026 17:16:59 +0000
ROA not after:            Mon 09 Nov 2026 18:16:59 +0000
asID:                     27411
IP address blocks:        173.208.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:b6:85:a1:d3:91:b9:51:c6:74:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug 11 17:16:59 2026 GMT
            Not After : Nov  9 18:16:59 2026 GMT
        Subject: CN=d2baf3c9-5fe9-440e-8357-576c60b479b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:41:6b:2b:d7:77:87:f9:7c:12:d2:cf:f7:87:
                    b8:d0:da:2e:13:94:d0:2f:9c:15:1d:a2:7f:f2:81:
                    98:76:e7:9d:9a:96:37:c3:fb:3e:65:bc:a7:8b:c2:
                    b1:22:86:8f:0f:92:c3:07:4d:6c:29:52:28:86:d8:
                    7b:41:8a:40:df:0a:34:0d:87:2d:e0:33:76:7d:f8:
                    16:30:20:96:0f:53:ec:fd:ba:8c:e8:9b:d6:7f:13:
                    15:50:93:20:16:6d:d4:b6:2f:48:a9:cb:22:94:5e:
                    04:92:d7:fe:8c:ad:71:a3:2c:04:be:4e:33:47:c4:
                    2a:4d:af:50:da:c2:ac:ee:c0:9a:3e:eb:07:ec:9f:
                    f3:bc:ef:1f:f0:09:ca:46:66:94:22:ae:10:87:a6:
                    aa:fd:f7:7f:43:a5:d4:ad:9a:0d:9a:98:3d:9e:c4:
                    4c:1d:da:6a:d7:a6:22:47:52:d4:98:94:20:28:c6:
                    2b:38:de:b2:8b:ef:6f:6a:8a:30:4d:05:89:dc:f9:
                    22:3a:ea:5b:3d:1e:df:f0:2d:dc:7d:02:18:36:75:
                    11:e8:d1:65:f9:ac:3d:37:7c:cf:26:18:a1:95:32:
                    f4:ff:12:bd:1b:7e:57:dd:0e:80:7d:b5:86:9c:d2:
                    9d:cc:c1:e0:01:1d:4c:ee:eb:82:03:51:6f:d5:42:
                    ae:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:21:B1:DB:F4:5E:59:77:59:64:12:FE:85:C1:5A:FC:E8:C0:30:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/140c76e7-c79a-30b2-87f8-53314cf773e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.208.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:99:b5:5a:df:a6:82:1a:c4:1c:21:9f:a1:2b:c9:76:36:af:
         00:c5:0a:04:b0:2e:38:39:91:05:ce:83:a0:28:f7:3b:d0:c7:
         13:80:6b:89:42:f4:63:55:04:b1:22:50:89:82:f7:91:0b:d1:
         fe:11:4e:ee:87:85:19:64:a1:6f:9e:53:68:b3:cd:50:dc:25:
         98:ac:97:3c:f4:3b:67:11:74:14:80:75:06:41:c4:9b:b9:85:
         61:07:06:49:af:09:6c:bf:95:2e:97:8e:2d:b9:ee:48:7e:72:
         01:f4:5e:cc:a8:e2:19:15:98:76:a6:4f:b0:60:cd:c2:6d:92:
         8d:6c:2c:d9:fa:3f:92:24:ac:0a:ee:f4:32:42:61:02:aa:a4:
         7b:06:7a:7d:87:34:5d:d5:0a:a1:70:47:2f:bd:1e:3d:4b:2f:
         3a:db:ae:ad:2b:5b:8a:96:dc:09:4a:57:cc:80:03:66:12:22:
         be:5a:94:ef:d8:15:a3:be:ad:e2:66:9d:3c:fc:42:46:6f:78:
         24:31:1c:e2:ce:5e:2a:37:81:04:98:c5:b4:18:6c:9c:c0:61:
         60:fe:0a:67:c1:4e:f0:2f:e7:e5:d3:4b:c9:eb:06:a5:a0:01:
         cb:8e:42:5d:16:75:66:d9:ce:e5:a6:aa:d1:6f:9c:bd:92:06:
         ef:fc:1b:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NtoWh05G5UcZ0H0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI2MDgxMTE3MTY1OVoXDTI2MTEwOTE4MTY1OVowLzEtMCsGA1UEAxMk
ZDJiYWYzYzktNWZlOS00NDBlLTgzNTctNTc2YzYwYjQ3OWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUFrK9d3h/l8EtLP94e40NouE5TQL5wVHaJ/
8oGYduedmpY3w/s+Zbyni8KxIoaPD5LDB01sKVIohth7QYpA3wo0DYct4DN2ffgW
MCCWD1Ps/bqM6JvWfxMVUJMgFm3Uti9IqcsilF4Ektf+jK1xoywEvk4zR8QqTa9Q
2sKs7sCaPusH7J/zvO8f8AnKRmaUIq4Qh6aq/fd/Q6XUrZoNmpg9nsRMHdpq16Yi
R1LUmJQgKMYrON6yi+9vaoowTQWJ3PkiOupbPR7f8C3cfQIYNnUR6NFl+aw9N3zP
JhihlTL0/xK9G35X3Q6AfbWGnNKdzMHgAR1M7uuCA1Fv1UKuNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBMhsdv0Xll3WWQS/oXBWvzowDBNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMTQwYzc2ZTctYzc5YS0z
MGIyLTg3ZjgtNTMzMTRjZjc3M2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrdBQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK6ZtVrfpoIaxBwhn6EryXY2rwDFCgSwLjg5kQXOg6Ao9zvQxxOAa4lC
9GNVBLEiUImC95EL0f4RTu6HhRlkoW+eU2izzVDcJZislzz0O2cRdBSAdQZBxJu5
hWEHBkmvCWy/lS6Xji257kh+cgH0Xsyo4hkVmHamT7BgzcJtko1sLNn6P5IkrAru
9DJCYQKqpHsGen2HNF3VCqFwRy+9Hj1LLzrbrq0rW4qW3AlKV8yAA2YSIr5alO/Y
FaO+reJmnTz8QkZveCQxHOLOXio3gQSYxbQYbJzAYWD+CmfBTvAv5+XTS8nrBqWg
AcuOQl0WdWbZzuWmqtFvnL2SBu/8G+A=
-----END CERTIFICATE-----
Generated at Thu Aug 27 16:53:38 2026 by rpki-client