Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e1ceee22-63ce-3622-aac6-84da03183c53.roa
File:                     e1ceee22-63ce-3622-aac6-84da03183c53.roa (raw, json)
Hash identifier:          JhnU2eTCV1wr4Piaoqqt9erR18weMC5BsB8/Y2gA76s=
Subject key identifier:   D7:58:3E:0F:9D:42:FA:D7:D4:B7:D5:91:CA:8C:E9:F2:DC:9E:D7:2A
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EC23D24779DC8210CEC3C3580
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e1ceee22-63ce-3622-aac6-84da03183c53.roa
Signing time:             Fri 07 Aug 2026 14:38:32 +0000
ROA not before:           Fri 07 Aug 2026 14:38:32 +0000
ROA not after:            Thu 05 Nov 2026 15:38:32 +0000
asID:                     395954
IP address blocks:        173.208.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:3d:24:77:9d:c8:21:0c:ec:3c:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  7 14:38:32 2026 GMT
            Not After : Nov  5 15:38:32 2026 GMT
        Subject: CN=11f7772f-771b-4bee-a095-994d72d1a34a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e5:11:d0:fb:f6:e7:a8:09:ee:59:64:57:6e:
                    27:67:60:38:3b:5b:04:17:2c:48:7d:54:f9:22:a2:
                    c5:32:db:4f:05:c5:38:6f:cc:0a:a7:3f:b1:9a:ca:
                    8c:ae:75:fc:00:44:77:f6:93:2b:fc:55:d5:10:41:
                    cb:01:88:75:4b:52:d2:9f:ca:9c:7b:cb:80:ed:6e:
                    ea:ac:db:a1:45:c3:47:46:cb:28:ca:07:65:45:25:
                    ea:24:f8:9a:b9:1c:d3:33:ae:8d:fd:e6:54:8e:24:
                    8f:04:66:04:3e:9b:6d:73:fd:8f:59:f3:ca:9c:11:
                    30:aa:d2:c4:94:9d:33:a8:2d:99:e3:88:f8:11:08:
                    04:22:6e:d4:f2:fe:c5:e4:1b:62:50:cd:9c:52:dd:
                    a2:5a:b0:03:b5:89:2a:09:6b:f0:74:6e:17:7a:c5:
                    7f:fd:e7:fd:bc:d1:4f:bc:5f:88:f8:9f:64:c6:ef:
                    e1:df:90:ec:5f:ad:95:02:8a:97:62:c2:27:ca:85:
                    56:ea:d6:44:51:b2:ca:90:cd:4f:8e:1e:90:ec:61:
                    2f:42:0a:d5:4d:a3:19:71:38:69:63:4f:8f:4c:5c:
                    16:57:dd:6b:9a:05:27:c9:00:a9:af:54:5c:a3:96:
                    91:7c:41:41:53:a5:b3:b3:76:6a:35:45:65:c1:45:
                    98:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:58:3E:0F:9D:42:FA:D7:D4:B7:D5:91:CA:8C:E9:F2:DC:9E:D7:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e1ceee22-63ce-3622-aac6-84da03183c53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.208.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:70:0b:1d:c8:95:4b:0f:86:b9:09:d6:e1:e9:c8:77:7f:60:
         36:97:75:0f:ae:3e:20:37:23:aa:d1:71:0d:c5:dd:29:14:f4:
         fc:a3:45:6b:7b:ec:aa:25:a8:6a:62:37:56:85:69:3f:02:b0:
         f3:f2:eb:af:6e:4a:02:fc:2b:cb:cf:11:e4:fb:73:49:31:2f:
         8b:43:1c:d7:c5:45:3c:89:b7:34:26:79:41:f8:03:8c:aa:08:
         5e:13:ce:1b:19:25:16:e6:80:25:66:46:b1:3c:2c:5b:2b:cd:
         67:b9:5e:4e:91:75:86:b4:35:0e:f0:0f:6f:c2:ee:15:67:50:
         de:76:a7:a5:09:49:7f:51:42:32:1f:9c:f9:6e:f4:d6:a0:41:
         f9:90:23:07:1a:43:b3:c8:c7:d2:b8:1e:18:eb:86:63:b2:c8:
         a3:c4:d6:9c:cd:4f:8c:58:03:36:20:c4:30:a2:21:29:0e:2e:
         10:ef:a1:a6:19:f1:0d:db:0d:76:ac:89:01:70:7a:52:f3:cd:
         ea:a6:e3:40:86:3c:e3:60:ed:dd:50:b4:31:ec:a0:f4:d5:e0:
         8d:d9:10:39:45:c6:c7:36:30:b9:b8:86:2e:ef:d6:97:56:c9:
         bf:04:3a:07:62:80:08:41:5e:ef:6d:3e:7c:86:31:fa:f3:bf:
         f0:a3:5e:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CPSR3ncghDOw8NYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI2MDgwNzE0MzgzMloXDTI2MTEwNTE1MzgzMlowLzEtMCsGA1UEAxMk
MTFmNzc3MmYtNzcxYi00YmVlLWEwOTUtOTk0ZDcyZDFhMzRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eUR0Pv256gJ7llkV24nZ2A4O1sEFyxIfVT5
IqLFMttPBcU4b8wKpz+xmsqMrnX8AER39pMr/FXVEEHLAYh1S1LSn8qce8uA7W7q
rNuhRcNHRssoygdlRSXqJPiauRzTM66N/eZUjiSPBGYEPpttc/2PWfPKnBEwqtLE
lJ0zqC2Z44j4EQgEIm7U8v7F5BtiUM2cUt2iWrADtYkqCWvwdG4XesV//ef9vNFP
vF+I+J9kxu/h35DsX62VAoqXYsInyoVW6tZEUbLKkM1Pjh6Q7GEvQgrVTaMZcThp
Y0+PTFwWV91rmgUnyQCpr1Rco5aRfEFBU6Wzs3ZqNUVlwUWYtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNdYPg+dQvrX1LfVkcqM6fLcntcqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZTFjZWVlMjItNjNjZS0z
NjIyLWFhYzYtODRkYTAzMTgzYzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrdBsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALJwCx3IlUsPhrkJ1uHpyHd/YDaXdQ+uPiA3I6rRcQ3F3SkU9PyjRWt7
7KolqGpiN1aFaT8CsPPy669uSgL8K8vPEeT7c0kxL4tDHNfFRTyJtzQmeUH4A4yq
CF4TzhsZJRbmgCVmRrE8LFsrzWe5Xk6RdYa0NQ7wD2/C7hVnUN52p6UJSX9RQjIf
nPlu9NagQfmQIwcaQ7PIx9K4HhjrhmOyyKPE1pzNT4xYAzYgxDCiISkOLhDvoaYZ
8Q3bDXasiQFwelLzzeqm40CGPONg7d1QtDHsoPTV4I3ZEDlFxsc2MLm4hi7v1pdW
yb8EOgdigAhBXu9tPnyGMfrzv/CjXmU=
-----END CERTIFICATE-----
Generated at Thu Aug 27 18:19:51 2026 by rpki-client