Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/602d7cc7-f29b-3359-976d-bdf4ae2bce19.roa
File:                     602d7cc7-f29b-3359-976d-bdf4ae2bce19.roa (raw, json)
Hash identifier:          Av+CGHzwlXyGYPxqwS7y+odRmM+LOLG35s5rKCqKJgk=
Subject key identifier:   70:0A:49:21:39:59:20:02:B5:DB:E2:F9:BD:6A:D4:D5:94:5A:B3:7C
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EC23D82AB0006161922D9A980
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/602d7cc7-f29b-3359-976d-bdf4ae2bce19.roa
Signing time:             Fri 07 Aug 2026 14:39:16 +0000
ROA not before:           Fri 07 Aug 2026 14:39:16 +0000
ROA not after:            Thu 05 Nov 2026 15:39:16 +0000
asID:                     395954
IP address blocks:        173.208.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:3d:82:ab:00:06:16:19:22:d9:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  7 14:39:16 2026 GMT
            Not After : Nov  5 15:39:16 2026 GMT
        Subject: CN=15ea90e5-9555-4831-8785-7badf1cf6ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:85:1e:bb:34:c9:af:eb:f9:e0:ca:b7:34:22:
                    9d:f1:3c:e7:f9:14:47:82:d1:1a:68:83:cb:b8:82:
                    e7:2a:cd:a6:03:dd:f9:1d:91:4e:2f:b1:b4:d9:37:
                    0c:69:b6:85:d6:90:47:26:86:63:31:4d:67:c7:2f:
                    f6:44:07:e2:fd:d1:6c:ab:ad:28:37:1d:bf:d2:4e:
                    3d:ce:97:5a:60:73:e4:13:e4:c4:55:8a:0a:30:46:
                    49:56:a3:d4:98:ae:83:e0:c6:96:4a:9c:10:90:85:
                    f4:de:40:03:0b:9e:98:ec:99:d7:85:aa:fb:9e:e1:
                    8e:91:0a:55:7f:63:9c:26:32:67:d4:89:ae:73:72:
                    3e:5c:cb:a7:ec:c3:e2:c6:f3:36:1c:c4:2b:e7:50:
                    fe:52:db:e3:c2:6d:59:bf:08:4c:bf:36:4c:09:51:
                    14:a9:62:f2:23:ff:80:57:00:20:4a:79:fc:10:d4:
                    a3:55:11:09:0f:64:54:90:4a:6b:8a:5d:a8:e4:47:
                    a4:f6:4a:18:a3:f8:0a:f0:d7:5a:3d:ca:36:95:fa:
                    ab:d9:82:ad:78:90:b0:cd:10:da:82:cf:b3:9e:0f:
                    98:79:45:a4:91:40:7e:a9:b2:be:a7:ee:8c:9e:70:
                    df:20:ce:a8:ee:af:10:db:bf:3b:4d:f7:24:32:f2:
                    e8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0A:49:21:39:59:20:02:B5:DB:E2:F9:BD:6A:D4:D5:94:5A:B3:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/602d7cc7-f29b-3359-976d-bdf4ae2bce19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.208.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:50:1c:61:00:06:4b:4e:88:59:e3:78:9f:f9:23:d9:93:e1:
         65:c7:9f:05:dd:04:66:56:46:ee:67:08:d7:66:80:ea:cd:f7:
         21:7c:ca:a8:52:8b:84:21:a5:87:51:b7:0f:1c:df:ba:d9:7d:
         a0:52:39:b2:34:7c:3c:07:29:25:e0:89:d5:d1:6b:5e:77:f7:
         37:d5:3d:0f:4b:68:cf:f9:ce:c2:ef:7f:09:0d:39:5f:f5:54:
         3e:a4:4d:bf:2b:81:9b:08:79:d5:e9:6b:dc:d4:d3:c6:d7:94:
         26:05:32:5b:d0:85:eb:da:ae:cc:12:07:a1:1a:ac:45:5c:f0:
         7b:a7:7c:e8:f0:55:81:c8:ff:90:fe:77:94:00:57:67:9f:b6:
         cb:a3:cf:d7:f3:6d:74:5b:04:fe:74:f4:c2:51:9e:9e:13:ab:
         33:4c:0e:4d:35:8f:14:a3:d8:79:8e:0f:0f:5a:85:29:98:b6:
         ef:11:79:51:84:54:54:fc:b6:b3:38:2d:3a:39:d3:72:e9:da:
         ec:cb:58:bd:51:40:09:48:1a:b3:9e:5d:3a:92:69:88:cf:21:
         00:dc:10:2a:3d:73:f5:39:58:aa:6a:8a:94:d8:bd:c6:dd:50:
         58:86:00:4f:76:a0:58:20:75:f9:75:f6:81:bc:1b:d8:cb:11:
         b6:76:2b:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CPYKrAAYWGSLZqYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI2MDgwNzE0MzkxNloXDTI2MTEwNTE1MzkxNlowLzEtMCsGA1UEAxMk
MTVlYTkwZTUtOTU1NS00ODMxLTg3ODUtN2JhZGYxY2Y2Y2EyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4UeuzTJr+v54Mq3NCKd8Tzn+RRHgtEaaIPL
uILnKs2mA935HZFOL7G02TcMabaF1pBHJoZjMU1nxy/2RAfi/dFsq60oNx2/0k49
zpdaYHPkE+TEVYoKMEZJVqPUmK6D4MaWSpwQkIX03kADC56Y7JnXhar7nuGOkQpV
f2OcJjJn1Imuc3I+XMun7MPixvM2HMQr51D+Utvjwm1ZvwhMvzZMCVEUqWLyI/+A
VwAgSnn8ENSjVREJD2RUkEpril2o5Eek9koYo/gK8NdaPco2lfqr2YKteJCwzRDa
gs+zng+YeUWkkUB+qbK+p+6MnnDfIM6o7q8Q2787TfckMvLojwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHAKSSE5WSACtdvi+b1q1NWUWrN8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNjAyZDdjYzctZjI5Yi0z
MzU5LTk3NmQtYmRmNGFlMmJjZTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrdBMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIpQHGEABktOiFnjeJ/5I9mT4WXHnwXdBGZWRu5nCNdmgOrN9yF8yqhS
i4QhpYdRtw8c37rZfaBSObI0fDwHKSXgidXRa1539zfVPQ9LaM/5zsLvfwkNOV/1
VD6kTb8rgZsIedXpa9zU08bXlCYFMlvQhevarswSB6EarEVc8HunfOjwVYHI/5D+
d5QAV2eftsujz9fzbXRbBP509MJRnp4TqzNMDk01jxSj2HmODw9ahSmYtu8ReVGE
VFT8trM4LTo503Lp2uzLWL1RQAlIGrOeXTqSaYjPIQDcECo9c/U5WKpqipTYvcbd
UFiGAE92oFggdfl19oG8G9jLEbZ2KwY=
-----END CERTIFICATE-----
Generated at Thu Aug 27 18:19:48 2026 by rpki-client