Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f467dc5d-cac5-3f22-9330-b5232a177618.roa
File:                     f467dc5d-cac5-3f22-9330-b5232a177618.roa (raw, json)
Hash identifier:          9lVXQk0sYvTTUzjQeSX3Evl/aFjhqKDYkJBqkVpmblQ=
Subject key identifier:   DD:C2:94:E9:7E:4C:2D:C7:9D:EF:D7:F8:CD:E0:FB:DA:D8:AC:67:4F
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EBC287FD86D777E068B7651B0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f467dc5d-cac5-3f22-9330-b5232a177618.roa
Signing time:             Wed 05 Aug 2026 10:22:05 +0000
ROA not before:           Wed 05 Aug 2026 10:22:05 +0000
ROA not after:            Tue 03 Nov 2026 11:22:05 +0000
asID:                     27411
IP address blocks:        173.208.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:28:7f:d8:6d:77:7e:06:8b:76:51:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  5 10:22:05 2026 GMT
            Not After : Nov  3 11:22:05 2026 GMT
        Subject: CN=d12b3935-ea3d-478d-b86b-82ccc3b130c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dc:04:91:f3:a5:a8:10:12:e0:7a:0b:7e:17:
                    0a:76:a8:df:65:b0:a9:55:2e:ee:5f:25:d4:3f:0f:
                    3c:f9:17:f3:1e:b3:3f:4e:12:90:9c:e0:87:c2:3e:
                    b5:67:2c:90:64:43:fd:40:3b:f0:a6:18:f1:96:aa:
                    9c:0d:95:4f:79:18:45:7e:20:84:84:63:e7:b7:5a:
                    11:cd:61:13:8e:8f:73:41:3a:55:51:03:aa:13:9f:
                    7d:c5:4e:c3:1c:b8:84:94:c5:aa:7c:45:e6:6a:75:
                    ff:ae:2b:79:83:e9:44:f9:74:ce:4d:d1:7d:ae:fe:
                    08:fe:06:48:43:84:d0:ab:e5:ff:5e:e0:ce:cd:84:
                    37:18:fe:48:77:29:97:de:4c:5b:55:fb:4b:60:3e:
                    31:45:5b:48:92:93:e0:cb:01:7e:35:72:17:2e:2a:
                    a3:b8:c2:c7:2d:29:ea:d2:f5:01:88:c0:6d:f2:b1:
                    ac:8e:16:09:19:91:1a:ae:96:37:7a:8c:51:27:53:
                    4f:4e:74:47:75:bc:fd:3a:04:9a:ee:fc:03:1f:c2:
                    5b:f4:39:56:4d:c9:9f:5f:49:31:d4:a3:f9:1b:8b:
                    61:97:93:76:74:7b:71:09:95:2d:39:4a:76:eb:6e:
                    35:67:43:a8:4c:23:8f:5d:09:59:74:5c:fa:7c:4d:
                    7c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C2:94:E9:7E:4C:2D:C7:9D:EF:D7:F8:CD:E0:FB:DA:D8:AC:67:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f467dc5d-cac5-3f22-9330-b5232a177618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.208.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:33:63:93:03:4c:c1:c0:a0:28:14:a2:83:e4:4b:31:6e:77:
         20:4a:6d:b0:0c:31:1a:c5:c8:f6:ef:43:c7:ba:74:52:ee:97:
         dc:3c:1e:b9:c6:61:da:3a:af:8e:ad:8e:be:ba:83:e4:38:c9:
         a4:fa:3b:27:79:63:79:e9:82:e2:35:80:e4:fa:bc:75:46:ae:
         83:a9:9d:c6:2d:bc:91:50:34:49:fa:9f:97:45:e0:c6:86:ae:
         19:25:af:40:73:18:cc:77:d5:c0:79:86:9f:98:36:37:e1:e6:
         c7:54:59:cb:57:1d:bf:46:df:44:70:b3:b5:8e:a9:ba:44:14:
         91:45:08:06:99:ea:d1:f8:96:8f:1d:da:94:b8:1d:a2:52:28:
         ef:e5:fd:13:54:05:7b:40:11:89:60:a9:d4:94:5b:27:93:d2:
         58:3a:8f:1a:9d:95:0f:8b:30:e8:4b:e3:03:58:87:2e:c0:8c:
         ce:dc:33:9a:3c:3e:6e:e7:ab:7e:d6:22:2f:55:d9:b4:c6:60:
         20:4e:bb:a2:5f:52:b3:55:22:69:d9:b0:8a:d1:49:41:eb:09:
         11:71:ab:67:30:36:7e:c9:92:fd:fc:c1:72:67:07:03:c9:4a:
         b8:41:4a:ad:d9:df:2b:29:e8:31:db:6f:04:29:c4:13:c4:1f:
         6d:f1:9b:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE68KH/YbXd+Bot2UbAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI2MDgwNTEwMjIwNVoXDTI2MTEwMzExMjIwNVowLzEtMCsGA1UEAxMk
ZDEyYjM5MzUtZWEzZC00NzhkLWI4NmItODJjY2MzYjEzMGM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtwEkfOlqBAS4HoLfhcKdqjfZbCpVS7uXyXU
Pw88+RfzHrM/ThKQnOCHwj61ZyyQZEP9QDvwphjxlqqcDZVPeRhFfiCEhGPnt1oR
zWETjo9zQTpVUQOqE599xU7DHLiElMWqfEXmanX/rit5g+lE+XTOTdF9rv4I/gZI
Q4TQq+X/XuDOzYQ3GP5IdymX3kxbVftLYD4xRVtIkpPgywF+NXIXLiqjuMLHLSnq
0vUBiMBt8rGsjhYJGZEarpY3eoxRJ1NPTnRHdbz9OgSa7vwDH8Jb9DlWTcmfX0kx
1KP5G4thl5N2dHtxCZUtOUp26241Z0OoTCOPXQlZdFz6fE18jQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN3ClOl+TC3Hne/X+M3g+9rYrGdPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvZjQ2N2RjNWQtY2FjNS0z
ZjIyLTkzMzAtYjUyMzJhMTc3NjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdB4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIszY5MDTMHAoCgUooPkSzFudyBKbbAMMRrFyPbvQ8e6dFLul9w8HrnG
Ydo6r46tjr66g+Q4yaT6Oyd5Y3npguI1gOT6vHVGroOpncYtvJFQNEn6n5dF4MaG
rhklr0BzGMx31cB5hp+YNjfh5sdUWctXHb9G30Rws7WOqbpEFJFFCAaZ6tH4lo8d
2pS4HaJSKO/l/RNUBXtAEYlgqdSUWyeT0lg6jxqdlQ+LMOhL4wNYhy7AjM7cM5o8
Pm7nq37WIi9V2bTGYCBOu6JfUrNVImnZsIrRSUHrCRFxq2cwNn7Jkv38wXJnBwPJ
SrhBSq3Z3ysp6DHbbwQpxBPEH23xm3k=
-----END CERTIFICATE-----
Generated at Thu Aug 27 16:53:35 2026 by rpki-client