Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/1c0970c7-6818-3f17-a6be-abb3ae87972c.roa
File:                     1c0970c7-6818-3f17-a6be-abb3ae87972c.roa (raw, json)
Hash identifier:          5sz/Jim2FfoO8D9jHzbuezur5aBF+yqw1Y3nrtXicIA=
Subject key identifier:   12:B6:8F:05:4F:4B:95:CE:5C:75:57:5A:0F:10:72:23:9D:7B:4F:01
Certificate issuer:       /CN=0041a013-cdb7-4c1b-ac0a-02acf19215f1
Certificate serial:       010D0C9F4328584EA8EC3C80D8D1B6C65012AE00
Authority key identifier: CC:17:88:2C:05:97:88:D4:29:E7:C8:15:F1:D8:CE:E5:0C:32:FB:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/1c0970c7-6818-3f17-a6be-abb3ae87972c.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     393397
IP address blocks:        173.195.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/0041a013-cdb7-4c1b-ac0a-02acf19215f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/0041a013-cdb7-4c1b-ac0a-02acf19215f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:3c:80:d8:d1:b6:c6:50:12:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0041a013-cdb7-4c1b-ac0a-02acf19215f1
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=323e5482-2873-4e17-a450-071af0dfbef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8e:1c:a0:6e:56:c7:7b:de:26:c0:13:84:db:
                    f2:ad:1e:75:f0:89:f8:2e:ae:65:d6:77:8c:b6:fc:
                    5b:41:ab:7c:5b:a1:f6:ac:37:ef:23:91:e9:ba:97:
                    7d:c0:56:0c:04:76:b0:f7:03:0a:05:0a:a8:0f:64:
                    f7:22:c5:47:f6:6a:b6:a1:82:b0:76:f5:c2:c8:e3:
                    92:08:4a:e1:84:4f:c3:24:73:04:f7:9c:a4:22:8e:
                    9c:22:54:5b:2c:cc:af:24:2b:78:81:d6:b8:46:36:
                    a1:0f:54:ff:40:9d:0b:7c:eb:35:a9:22:17:46:cb:
                    c9:af:75:a8:8a:b3:dc:61:53:47:a8:55:ff:b5:5f:
                    af:78:3a:aa:80:30:2c:6f:6e:d7:58:fe:23:e3:72:
                    29:81:e7:1b:ba:1f:3f:02:45:92:78:1b:57:37:6f:
                    ef:0f:a0:a5:e9:e0:40:1d:70:e0:8e:65:87:7d:ea:
                    5a:76:e4:32:9d:ac:5e:a8:2a:b7:9c:99:a4:f6:0a:
                    66:17:ed:9a:7f:fc:57:2a:3e:38:4f:6d:14:d4:c0:
                    f6:59:d4:2e:bb:f8:c8:f4:0a:ca:df:b6:38:63:63:
                    cb:aa:24:8a:9c:b2:09:72:29:18:1b:00:da:c2:1f:
                    32:98:c0:34:4d:5a:9d:0e:76:ed:5e:2f:22:e8:62:
                    08:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B6:8F:05:4F:4B:95:CE:5C:75:57:5A:0F:10:72:23:9D:7B:4F:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/1c0970c7-6818-3f17-a6be-abb3ae87972c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/0041a013-cdb7-4c1b-ac0a-02acf19215f1.crl

            X509v3 Authority Key Identifier:
                keyid:CC:17:88:2C:05:97:88:D4:29:E7:C8:15:F1:D8:CE:E5:0C:32:FB:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:46:10:e5:16:9c:0a:22:8e:a0:5d:09:af:63:15:35:e6:24:
         01:f3:c1:ca:b4:35:92:58:59:2e:29:eb:a6:6f:99:64:80:16:
         26:87:dc:76:31:27:25:b2:df:21:fb:6d:6a:fe:2c:45:07:17:
         6b:cf:83:66:dc:06:1c:b9:26:8a:d1:e5:6f:1d:0b:21:29:94:
         c5:9f:8a:c8:85:a2:58:73:cc:16:c4:7f:64:15:49:88:23:32:
         86:13:45:01:a6:31:0d:5d:94:19:e2:42:c0:74:01:84:ed:2e:
         9f:97:1d:37:0c:9e:5c:9d:21:91:0d:7d:31:1a:af:f4:d2:48:
         72:3d:4c:15:b4:82:cf:92:56:a7:3e:3e:07:e6:9e:e8:40:90:
         60:05:cc:76:22:82:aa:34:e3:9a:23:43:01:cd:ad:c2:66:75:
         94:13:a7:aa:71:e9:65:52:c6:04:36:4a:45:a2:66:53:54:9f:
         6f:26:d2:ad:e1:67:64:41:6e:5d:a5:81:3c:d6:5d:4c:3b:34:
         80:1b:37:b5:2a:90:b0:dd:1e:3b:db:14:75:e2:7a:dd:8a:3d:
         b6:f5:da:b5:06:b7:a7:18:ba:ba:95:aa:49:f7:84:90:9e:9d:
         8e:f0:3a:85:e9:ee:92:79:e2:62:dd:ed:2c:05:c0:45:d2:64:
         3f:2b:40:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6o7DyA2NG2xlASrgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA0MWEwMTMtY2RiNy00YzFiLWFjMGEtMDJhY2YxOTIx
NWYxMB4XDTI2MDcyOTEzMDAxMloXDTI2MTAyNzEzMDAxMlowLzEtMCsGA1UEAxMk
MzIzZTU0ODItMjg3My00ZTE3LWE0NTAtMDcxYWYwZGZiZWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo4coG5Wx3veJsAThNvyrR518In4Lq5l1neM
tvxbQat8W6H2rDfvI5Hpupd9wFYMBHaw9wMKBQqoD2T3IsVH9mq2oYKwdvXCyOOS
CErhhE/DJHME95ykIo6cIlRbLMyvJCt4gda4RjahD1T/QJ0LfOs1qSIXRsvJr3Wo
irPcYVNHqFX/tV+veDqqgDAsb27XWP4j43Ipgecbuh8/AkWSeBtXN2/vD6Cl6eBA
HXDgjmWHfepaduQynaxeqCq3nJmk9gpmF+2af/xXKj44T20U1MD2WdQuu/jI9ArK
37Y4Y2PLqiSKnLIJcikYGwDawh8ymMA0TVqdDnbtXi8i6GII1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBK2jwVPS5XOXHVXWg8QciOde08BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMDQx
YTAxMy1jZGI3LTRjMWItYWMwYS0wMmFjZjE5MjE1ZjEvMWMwOTcwYzctNjgxOC0z
ZjE3LWE2YmUtYWJiM2FlODc5NzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDA0MWEwMTMtY2RiNy00YzFiLWFj
MGEtMDJhY2YxOTIxNWYxLzAwNDFhMDEzLWNkYjctNGMxYi1hYzBhLTAyYWNmMTky
MTVmMS5jcmwwHwYDVR0jBBgwFoAUzBeILAWXiNQp58gV8djO5Qwy+4IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wMDQxYTAxMy1jZGI3LTRjMWItYWMwYS0wMmFj
ZjE5MjE1ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrcOEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAxGEOUWnAoijqBdCa9jFTXmJAHzwcq0NZJYWS4p66ZvmWSAFiaH3HYx
JyWy3yH7bWr+LEUHF2vPg2bcBhy5JorR5W8dCyEplMWfisiFolhzzBbEf2QVSYgj
MoYTRQGmMQ1dlBniQsB0AYTtLp+XHTcMnlydIZENfTEar/TSSHI9TBW0gs+SVqc+
PgfmnuhAkGAFzHYigqo045ojQwHNrcJmdZQTp6px6WVSxgQ2SkWiZlNUn28m0q3h
Z2RBbl2lgTzWXUw7NIAbN7UqkLDdHjvbFHXiet2KPbb12rUGt6cYurqVqkn3hJCe
nY7wOoXp7pJ54mLd7SwFwEXSZD8rQEg=
-----END CERTIFICATE-----
Generated at Thu Aug 20 00:08:17 2026 by rpki-client