Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bdfe250d-7bfd-3ea2-85e9-4f9afee90bfe.roa
File:                     bdfe250d-7bfd-3ea2-85e9-4f9afee90bfe.roa (raw, json)
Hash identifier:          h45VvznUdCEDe9I4bWl+RVO1pIGeKe4v14SaHewe5X8=
Subject key identifier:   C8:F9:C3:42:26:62:C4:3D:28:D0:26:C8:48:B4:AC:2B:22:F7:FD:2A
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EBF7A67B30C89659515B1C8C0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bdfe250d-7bfd-3ea2-85e9-4f9afee90bfe.roa
Signing time:             Thu 06 Aug 2026 14:54:32 +0000
ROA not before:           Thu 06 Aug 2026 14:54:32 +0000
ROA not after:            Wed 04 Nov 2026 15:54:32 +0000
asID:                     394380
IP address blocks:        172.241.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bf:7a:67:b3:0c:89:65:95:15:b1:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  6 14:54:32 2026 GMT
            Not After : Nov  4 15:54:32 2026 GMT
        Subject: CN=c0b09aa9-9d67-4393-9590-32358e8cf9ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:79:bb:75:36:ac:e1:94:7b:07:dd:1b:34:6d:
                    37:bc:61:60:fb:22:40:26:7a:f5:35:3c:fa:23:a0:
                    c1:6a:4c:42:9d:cd:9c:b7:f6:3f:4b:9f:ab:86:be:
                    37:09:ef:53:90:39:e9:aa:87:33:d1:5f:d4:15:1e:
                    78:29:5c:af:ec:54:1c:9e:39:b9:2e:bd:13:f4:f9:
                    24:eb:c4:ac:c2:c7:4f:78:0b:7d:a3:39:a0:b8:e8:
                    d7:98:89:ad:72:ad:86:35:72:b7:d5:81:e7:5e:68:
                    83:2c:cf:8c:1a:74:70:a1:68:4f:96:6c:bd:77:27:
                    70:0d:aa:c4:3b:25:b0:b2:3d:02:ef:26:c8:16:13:
                    6b:47:a2:ef:d9:b2:36:b4:ee:58:eb:c4:85:2e:1a:
                    e5:42:77:e8:e9:05:c0:01:fb:13:51:00:af:1d:5a:
                    c0:53:81:42:d4:fa:3a:5d:28:81:06:29:75:9a:1b:
                    64:c1:c6:40:c4:1b:29:a8:d9:42:59:19:fa:83:3e:
                    64:49:78:cd:11:e5:94:74:bb:13:b2:a2:23:00:7f:
                    55:20:b6:a4:2e:f6:e3:ba:0a:74:dd:e2:25:f8:69:
                    26:a8:28:56:ca:42:ce:b9:9b:75:ac:73:29:16:c7:
                    5a:a5:89:69:f6:ac:21:f7:be:3d:0e:9a:1b:37:c8:
                    b6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F9:C3:42:26:62:C4:3D:28:D0:26:C8:48:B4:AC:2B:22:F7:FD:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bdfe250d-7bfd-3ea2-85e9-4f9afee90bfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.241.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:b2:ab:47:05:1f:26:15:c9:8b:9f:07:9f:5e:70:2a:58:12:
         98:9c:4b:e9:a3:e2:bd:95:6e:81:3d:76:cb:f2:e7:33:90:01:
         6a:8f:07:4d:ed:cb:31:4f:82:35:d4:a6:b1:ac:53:09:62:8d:
         8f:50:44:17:a9:ca:d2:ef:00:fd:9d:f6:5d:77:64:f3:86:29:
         72:21:4f:b3:12:7c:b6:17:57:86:02:b2:7b:b9:f3:db:a5:e7:
         57:a8:5d:03:e6:37:62:3b:77:ea:d5:9c:18:4d:00:d4:4d:36:
         d6:d6:6c:4c:35:03:41:f6:4c:da:ca:22:a6:32:4d:c6:76:96:
         08:ae:84:d1:14:1c:d4:44:3b:ee:68:ff:c6:20:57:60:93:d8:
         11:52:43:04:24:10:5c:4d:bc:2b:6c:47:fb:7a:dc:b0:f9:fd:
         88:ea:71:11:73:03:c8:92:45:f8:fd:cc:d8:f9:fe:04:1f:d9:
         40:6f:3f:9b:69:b6:28:d9:67:b5:50:53:85:8d:92:6c:73:67:
         54:50:b7:13:11:a3:6f:1c:e9:d8:aa:2a:35:f3:8a:b0:46:d5:
         9e:a0:9f:5a:a5:cd:44:0f:76:28:dc:0e:46:a8:26:54:a5:a2:
         84:8d:64:a1:d4:98:5e:99:e7:d1:36:af:1f:de:73:b6:68:16:
         94:70:28:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6/emezDIlllRWxyMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI2MDgwNjE0NTQzMloXDTI2MTEwNDE1NTQzMlowLzEtMCsGA1UEAxMk
YzBiMDlhYTktOWQ2Ny00MzkzLTk1OTAtMzIzNThlOGNmOWFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nm7dTas4ZR7B90bNG03vGFg+yJAJnr1NTz6
I6DBakxCnc2ct/Y/S5+rhr43Ce9TkDnpqocz0V/UFR54KVyv7FQcnjm5Lr0T9Pkk
68SswsdPeAt9ozmguOjXmImtcq2GNXK31YHnXmiDLM+MGnRwoWhPlmy9dydwDarE
OyWwsj0C7ybIFhNrR6Lv2bI2tO5Y68SFLhrlQnfo6QXAAfsTUQCvHVrAU4FC1Po6
XSiBBil1mhtkwcZAxBspqNlCWRn6gz5kSXjNEeWUdLsTsqIjAH9VILakLvbjugp0
3eIl+GkmqChWykLOuZt1rHMpFsdapYlp9qwh9749DpobN8i2NQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMj5w0ImYsQ9KNAmyEi0rCsi9/0qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvYmRmZTI1MGQtN2JmZC0z
ZWEyLTg1ZTktNGY5YWZlZTkwYmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrPHAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADuyq0cFHyYVyYufB59ecCpYEpicS+mj4r2VboE9dsvy5zOQAWqPB03t
yzFPgjXUprGsUwlijY9QRBepytLvAP2d9l13ZPOGKXIhT7MSfLYXV4YCsnu589ul
51eoXQPmN2I7d+rVnBhNANRNNtbWbEw1A0H2TNrKIqYyTcZ2lgiuhNEUHNREO+5o
/8YgV2CT2BFSQwQkEFxNvCtsR/t63LD5/YjqcRFzA8iSRfj9zNj5/gQf2UBvP5tp
tijZZ7VQU4WNkmxzZ1RQtxMRo28c6diqKjXzirBG1Z6gn1qlzUQPdijcDkaoJlSl
ooSNZKHUmF6Z59E2rx/ec7ZoFpRwKEs=
-----END CERTIFICATE-----
Generated at Thu Aug 27 19:04:28 2026 by rpki-client