Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/15ac278f-d2d1-32d3-9f09-43ac96b5c580.roa
File:                     15ac278f-d2d1-32d3-9f09-43ac96b5c580.roa (raw, json)
Hash identifier:          gZfhLuxF3VCy5AbRB5GT6b4GRaC1cmoz5EfohAbSb9M=
Subject key identifier:   AF:1C:0A:BE:44:F9:A5:CC:74:69:A4:E7:62:9C:CD:82:58:65:C6:93
Certificate issuer:       /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Certificate serial:       010D0C9F4328584EDDF743027F34BDB990174C80
Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/15ac278f-d2d1-32d3-9f09-43ac96b5c580.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     26383
IP address blocks:        207.90.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:43:02:7f:34:bd:b9:90:17:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=6151ff66-575e-4b06-a10f-56af01378163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:35:3a:d6:10:d8:51:94:7e:29:fc:e2:c1:76:
                    5c:36:23:a4:f0:e6:93:dd:66:9c:95:c8:85:d1:dd:
                    75:49:9c:4d:3f:dc:00:e2:15:25:79:45:f2:9b:c1:
                    e9:71:0c:04:21:08:73:59:4f:2a:f7:75:fa:38:cb:
                    c0:18:7b:c5:77:c4:bd:6f:81:9e:15:6a:e6:8c:27:
                    78:35:cf:1c:c0:77:70:df:1e:3e:2f:7c:a5:dc:c6:
                    9d:82:83:3c:8a:18:ef:33:51:05:d8:f1:5f:c8:05:
                    be:ce:93:aa:77:7b:85:66:fd:f9:42:1e:09:80:07:
                    4d:19:40:2d:20:2a:b0:44:c5:1a:ed:b9:96:01:7b:
                    95:5d:68:da:f3:c5:eb:71:ac:09:b5:c5:b9:86:e4:
                    51:b7:47:d3:46:e4:6b:ae:d5:7d:e2:ce:54:61:f4:
                    24:68:0c:7c:7a:f4:cb:68:b9:b2:9d:d4:3d:1c:f9:
                    60:51:40:56:85:e2:f2:4a:bd:68:23:21:18:aa:12:
                    6b:6d:29:6a:1a:a5:f7:bd:1b:75:87:0c:70:24:93:
                    a6:a5:7c:2e:cd:04:d4:8d:34:47:31:0a:e7:93:34:
                    93:d7:4a:1b:26:95:d5:1a:88:73:d4:65:9b:17:f3:
                    e6:97:51:38:c6:7e:4b:ed:02:51:97:f1:88:7a:6b:
                    7d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1C:0A:BE:44:F9:A5:CC:74:69:A4:E7:62:9C:CD:82:58:65:C6:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/15ac278f-d2d1-32d3-9f09-43ac96b5c580.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl

            X509v3 Authority Key Identifier:
                keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.90.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:bb:74:ca:94:fa:ae:93:13:54:a0:1e:9c:c4:6d:49:e6:1b:
         cf:f7:ae:f4:a0:12:dd:51:d7:f6:de:39:4c:da:84:1e:d0:2e:
         bf:a9:96:2b:74:86:b7:4a:e8:ba:d9:bb:55:fa:ec:68:83:d0:
         45:c3:61:00:a6:93:99:23:cf:d5:1f:ba:6c:5f:6c:59:7a:38:
         bd:88:e4:1f:58:19:77:31:40:02:ad:6a:a5:03:e6:b4:8e:ff:
         44:a7:9c:db:d1:7b:27:5f:d5:91:79:04:5a:0c:9b:a4:f7:9d:
         cf:e2:0a:0a:b1:53:99:39:e8:98:3a:96:cc:d6:59:f6:03:19:
         80:40:b2:39:fe:d0:75:b8:48:ca:11:e3:34:6d:db:84:d6:01:
         43:da:b0:dc:4a:11:10:2f:f3:11:c1:f4:7c:0c:b6:18:4c:70:
         ba:48:dc:16:98:0c:24:4d:ab:6c:10:b4:cb:d7:01:e0:28:21:
         78:5f:ea:14:c2:54:62:59:af:0f:b7:07:e9:e3:a4:72:a8:2f:
         b9:35:71:1e:67:38:62:80:51:74:0e:c7:f1:4c:b0:42:35:ed:
         5b:b6:ec:81:54:fd:1c:1d:82:f5:6b:64:05:5e:87:ed:7a:9f:
         58:d8:cb:4e:e3:75:20:d0:df:f3:a4:7c:f1:f2:fa:56:b2:5d:
         d3:05:04:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7d90MCfzS9uZAXTIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDgyY2EzYTItOWUyYi00OWRhLWFhZWUtMmIwMmQwODk4
ZjgxMB4XDTI2MDgxNzEzMDAxMVoXDTI2MTExNTE0MDAxMVowLzEtMCsGA1UEAxMk
NjE1MWZmNjYtNTc1ZS00YjA2LWExMGYtNTZhZjAxMzc4MTYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDU61hDYUZR+KfziwXZcNiOk8OaT3WaclciF
0d11SZxNP9wA4hUleUXym8HpcQwEIQhzWU8q93X6OMvAGHvFd8S9b4GeFWrmjCd4
Nc8cwHdw3x4+L3yl3MadgoM8ihjvM1EF2PFfyAW+zpOqd3uFZv35Qh4JgAdNGUAt
ICqwRMUa7bmWAXuVXWja88XrcawJtcW5huRRt0fTRuRrrtV94s5UYfQkaAx8evTL
aLmyndQ9HPlgUUBWheLySr1oIyEYqhJrbSlqGqX3vRt1hwxwJJOmpXwuzQTUjTRH
MQrnkzST10obJpXVGohz1GWbF/Pml1E4xn5L7QJRl/GIemt9jQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK8cCr5E+aXMdGmk52KczYJYZcaTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wODJj
YTNhMi05ZTJiLTQ5ZGEtYWFlZS0yYjAyZDA4OThmODEvMTVhYzI3OGYtZDJkMS0z
MmQzLTlmMDktNDNhYzk2YjVjNTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDgyY2EzYTItOWUyYi00OWRhLWFh
ZWUtMmIwMmQwODk4ZjgxLzA4MmNhM2EyLTllMmItNDlkYS1hYWVlLTJiMDJkMDg5
OGY4MS5jcmwwHwYDVR0jBBgwFoAUhbhudnk2OJYD9dqN3huu2bQfTDcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wODJjYTNhMi05ZTJiLTQ5ZGEtYWFlZS0yYjAy
ZDA4OThmODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz1rvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+7dMqU+q6TE1SgHpzEbUnmG8/3rvSgEt1R1/beOUzahB7QLr+plit0
hrdK6LrZu1X67GiD0EXDYQCmk5kjz9UfumxfbFl6OL2I5B9YGXcxQAKtaqUD5rSO
/0SnnNvReydf1ZF5BFoMm6T3nc/iCgqxU5k56Jg6lszWWfYDGYBAsjn+0HW4SMoR
4zRt24TWAUPasNxKERAv8xHB9HwMthhMcLpI3BaYDCRNq2wQtMvXAeAoIXhf6hTC
VGJZrw+3B+njpHKoL7k1cR5nOGKAUXQOx/FMsEI17Vu27IFU/RwdgvVrZAVeh+16
n1jYy07jdSDQ3/OkfPHy+layXdMFBD0=
-----END CERTIFICATE-----
Generated at Thu Aug 20 00:06:06 2026 by rpki-client