Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1505e028-fa61-3136-b572-5d3487ba895a.roa
File:                     1505e028-fa61-3136-b572-5d3487ba895a.roa (raw, json)
Hash identifier:          UIrOlcg3O7FRHBu7aCZNi4kmSpnuhkTKYJro7oeNZnA=
Subject key identifier:   22:DA:F6:A6:47:22:AE:3B:30:80:C6:49:7D:F5:A8:4A:82:58:B8:2C
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F5E62DA04D359328E10FE2800
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1505e028-fa61-3136-b572-5d3487ba895a.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     19148
IP address blocks:        108.62.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:da:04:d3:59:32:8e:10:fe:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=ebbbe0ef-e32b-44df-8ec7-5a605840abb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:28:c6:3a:d8:47:b2:27:1e:7d:86:f7:22:85:
                    7c:a8:12:c5:e3:b6:8d:c9:57:e3:3e:ff:d3:dd:ee:
                    18:dd:c1:cd:16:53:fc:c9:f7:e1:c9:5c:9c:53:c9:
                    57:42:47:08:27:4c:3c:ad:98:74:e9:0d:6a:ff:9b:
                    3b:21:ac:49:94:1c:fb:6c:11:a8:df:ef:74:1d:e8:
                    9e:d5:a4:36:2d:19:de:ef:df:17:70:e7:64:92:09:
                    94:c6:8f:c5:49:64:d9:a6:94:5f:3a:a6:70:79:d1:
                    17:f6:a3:6b:73:c0:73:39:bb:85:22:c6:c3:77:e8:
                    10:ea:f0:68:83:36:b9:f8:19:d1:c8:9e:0c:8a:20:
                    d8:f7:97:44:e8:61:c6:9e:de:70:e4:c0:70:4c:95:
                    46:45:d8:9a:95:3f:50:c4:ef:5b:c2:82:25:78:6a:
                    9d:1f:39:18:98:ca:c6:09:d5:27:8a:07:93:15:0b:
                    0a:d6:aa:ac:5b:b1:bf:1a:d9:0e:c7:c0:00:bd:0a:
                    99:c9:85:e0:30:63:f7:b8:ad:a8:5a:80:e2:39:5b:
                    a4:52:22:51:a1:39:bf:c7:7a:87:6c:5b:a3:b5:d1:
                    33:b1:28:cf:59:c6:15:69:ba:87:aa:10:40:f2:fc:
                    c6:31:16:c2:a1:a9:da:93:fe:25:c0:3c:93:8a:cf:
                    8d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DA:F6:A6:47:22:AE:3B:30:80:C6:49:7D:F5:A8:4A:82:58:B8:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1505e028-fa61-3136-b572-5d3487ba895a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.62.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:b5:1c:b6:e8:89:ba:4e:38:8a:56:9d:68:64:77:a0:bb:c6:
         05:7b:07:06:70:10:d2:78:df:1c:41:38:7e:9c:f7:6e:fc:70:
         10:b4:ae:1e:7a:a6:b0:7e:8a:68:af:a7:4e:f7:c1:76:f0:97:
         e8:25:a9:0d:86:01:ba:88:71:cc:8b:ab:c9:af:a4:a5:72:4d:
         29:00:1f:2b:d8:d2:55:1d:43:c6:a8:4f:82:37:e4:b1:8f:46:
         f8:8d:76:93:e3:ad:dd:f4:ea:41:3c:1e:ce:c5:14:3e:1a:bb:
         fe:7b:66:09:c1:c6:0a:f5:77:5f:23:97:4e:5b:f9:50:74:5b:
         19:23:c0:35:bb:dc:a6:df:73:04:27:9b:f4:b7:5e:90:a2:35:
         97:eb:db:10:f4:c2:54:9a:3c:6a:e4:d9:86:ce:94:1e:7c:47:
         cb:8b:64:1f:37:d7:b2:30:c2:32:ad:57:39:d0:00:5e:f5:ef:
         64:89:a1:6e:ec:2d:f4:87:f3:58:c6:64:13:78:12:d9:29:84:
         5b:99:d1:6d:41:8f:fb:c2:4d:c0:50:3b:40:6b:47:5a:66:4e:
         02:e0:63:18:53:38:09:e7:72:bf:94:69:df:c9:29:99:3a:7b:
         7a:7c:d5:4a:bb:4b:36:d7:e4:60:81:bb:e8:64:e2:77:b2:84:
         3b:1e:c5:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYtoE01kyjhD+KAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk
ZWJiYmUwZWYtZTMyYi00NGRmLThlYzctNWE2MDU4NDBhYmI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvijGOthHsicefYb3IoV8qBLF47aNyVfjPv/T
3e4Y3cHNFlP8yffhyVycU8lXQkcIJ0w8rZh06Q1q/5s7IaxJlBz7bBGo3+90Heie
1aQ2LRne798XcOdkkgmUxo/FSWTZppRfOqZwedEX9qNrc8BzObuFIsbDd+gQ6vBo
gza5+BnRyJ4MiiDY95dE6GHGnt5w5MBwTJVGRdialT9QxO9bwoIleGqdHzkYmMrG
CdUnigeTFQsK1qqsW7G/GtkOx8AAvQqZyYXgMGP3uK2oWoDiOVukUiJRoTm/x3qH
bFujtdEzsSjPWcYVabqHqhBA8vzGMRbCoanak/4lwDyTis+NRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCLa9qZHIq47MIDGSX31qEqCWLgsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMTUwNWUwMjgtZmE2MS0z
MTM2LWI1NzItNWQzNDg3YmE4OTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbD7gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHS1HLboibpOOIpWnWhkd6C7xgV7BwZwENJ43xxBOH6c9278cBC0rh56
prB+imivp073wXbwl+glqQ2GAbqIccyLq8mvpKVyTSkAHyvY0lUdQ8aoT4I35LGP
RviNdpPjrd306kE8Hs7FFD4au/57ZgnBxgr1d18jl05b+VB0WxkjwDW73KbfcwQn
m/S3XpCiNZfr2xD0wlSaPGrk2YbOlB58R8uLZB8317IwwjKtVznQAF7172SJoW7s
LfSH81jGZBN4EtkphFuZ0W1Bj/vCTcBQO0BrR1pmTgLgYxhTOAnncr+Uad/JKZk6
e3p81Uq7SzbX5GCBu+hk4neyhDsexTs=
-----END CERTIFICATE-----
Generated at Wed Oct 14 03:12:12 2026 by rpki-client