Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/7b4cebea-3564-3ced-b43f-9712c6e282a5.roa
File:                     7b4cebea-3564-3ced-b43f-9712c6e282a5.roa (raw, json)
Hash identifier:          7cofB9yYx9z1OaBgDSkJE9k45oImZKqKivU7Bl2eqBw=
Subject key identifier:   B8:ED:AB:BF:FA:E6:15:FF:47:C5:2A:31:E1:87:7B:F8:CC:B8:9D:55
Certificate issuer:       /CN=553f7a6d-a8af-4a8d-94c5-858b0b23ab9a
Certificate serial:       010D0C9F4328584EC7A1B9059ADA4E3E4032D400
Authority key identifier: 2E:15:F5:D4:69:C6:E2:78:C0:E1:5D:15:43:02:AF:9C:83:71:BA:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/7b4cebea-3564-3ced-b43f-9712c6e282a5.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     1054
IP address blocks:        216.40.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:b9:05:9a:da:4e:3e:40:32:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553f7a6d-a8af-4a8d-94c5-858b0b23ab9a
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=96a34f7d-6fa9-4dd1-acac-999bfec2d102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6b:92:bc:0c:af:28:06:f2:ef:c8:87:09:4f:
                    58:85:ed:f9:09:74:35:53:19:60:32:82:65:5d:b2:
                    9a:a8:11:f2:72:43:a0:b4:52:a7:d8:43:cf:ce:a6:
                    51:3f:5b:8a:6f:86:03:b0:77:fa:5f:97:18:67:c9:
                    50:60:14:26:0f:11:03:7f:81:93:88:f2:fd:52:6d:
                    f1:c1:61:e5:05:b9:45:70:fb:9c:9b:86:fb:f7:55:
                    98:b3:6e:16:3a:ab:aa:40:cc:3d:a7:8a:08:1b:c6:
                    a6:77:3a:ce:5d:18:fb:0c:d6:65:83:50:ad:93:b0:
                    d2:af:18:04:73:48:32:03:e5:58:26:5a:9d:5b:a6:
                    1c:97:c4:40:54:1b:a2:33:61:8e:6b:a6:81:5a:b2:
                    31:03:87:81:16:73:91:5a:e6:26:e8:c1:ef:2a:e5:
                    31:21:78:25:f0:75:98:da:15:17:6b:4b:5d:b6:70:
                    53:46:ed:99:00:ac:90:d6:e7:86:ea:95:84:c9:5c:
                    5a:a6:b9:7b:1e:14:d7:36:e5:e2:b3:e2:2f:ae:aa:
                    b0:97:cb:6e:91:71:02:81:58:1e:5b:94:f5:3e:51:
                    99:2d:28:84:68:5f:fd:f0:24:6f:97:6a:41:3e:44:
                    92:a3:cb:61:5e:da:da:8a:1d:82:13:db:5e:c6:6d:
                    08:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:ED:AB:BF:FA:E6:15:FF:47:C5:2A:31:E1:87:7B:F8:CC:B8:9D:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/7b4cebea-3564-3ced-b43f-9712c6e282a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.crl

            X509v3 Authority Key Identifier:
                keyid:2E:15:F5:D4:69:C6:E2:78:C0:E1:5D:15:43:02:AF:9C:83:71:BA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/553f7a6d-a8af-4a8d-94c5-858b0b23ab9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.40.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:06:f3:77:37:c0:8b:70:95:27:c0:ec:9c:60:81:2d:20:1d:
         8b:1b:b3:20:10:7d:6b:53:b6:3a:37:ed:a6:07:b3:03:fc:fc:
         4d:08:dd:35:b0:32:fd:5d:79:58:7a:11:f6:98:29:2d:84:fb:
         14:70:f0:9a:6a:18:30:bb:64:60:17:d0:21:0a:18:51:35:50:
         6c:84:57:24:43:15:ae:6e:e9:ad:0e:f2:7b:88:18:4d:d3:6c:
         d5:be:45:77:84:16:a6:93:b8:35:fd:a6:8b:dc:2e:b1:3e:d2:
         87:c6:85:6c:f7:19:a8:ec:5f:1b:6c:83:e0:0b:57:ac:85:8f:
         fd:e6:85:3e:d9:27:46:9f:69:3f:cc:fd:b5:95:89:52:d1:7c:
         49:66:1f:02:f5:9b:50:a5:de:03:4c:95:80:1c:df:1f:44:53:
         65:9f:b8:21:dd:73:0a:cc:50:44:69:13:e4:07:e0:18:31:fb:
         95:08:41:a7:40:88:3e:c0:42:09:68:1d:c1:19:6a:6b:d9:78:
         74:3b:2f:30:47:bb:ce:fb:ae:ce:2b:c7:d9:ec:e8:cb:84:41:
         8f:f6:fb:6f:f1:b4:f4:19:df:45:32:f3:63:23:2f:86:8b:5a:
         bf:a9:50:9f:1b:fd:d5:97:73:61:43:ac:d7:83:11:ee:85:e3:
         2c:7d:ea:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HobkFmtpOPkAy1AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTUzZjdhNmQtYThhZi00YThkLTk0YzUtODU4YjBiMjNh
YjlhMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk
OTZhMzRmN2QtNmZhOS00ZGQxLWFjYWMtOTk5YmZlYzJkMTAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWuSvAyvKAby78iHCU9Yhe35CXQ1UxlgMoJl
XbKaqBHyckOgtFKn2EPPzqZRP1uKb4YDsHf6X5cYZ8lQYBQmDxEDf4GTiPL9Um3x
wWHlBblFcPucm4b791WYs24WOquqQMw9p4oIG8amdzrOXRj7DNZlg1Ctk7DSrxgE
c0gyA+VYJlqdW6Ycl8RAVBuiM2GOa6aBWrIxA4eBFnORWuYm6MHvKuUxIXgl8HWY
2hUXa0tdtnBTRu2ZAKyQ1ueG6pWEyVxaprl7HhTXNuXis+Ivrqqwl8tukXECgVge
W5T1PlGZLSiEaF/98CRvl2pBPkSSo8thXtraih2CE9texm0IfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLjtq7/65hX/R8UqMeGHe/jMuJ1VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81NTNm
N2E2ZC1hOGFmLTRhOGQtOTRjNS04NThiMGIyM2FiOWEvN2I0Y2ViZWEtMzU2NC0z
Y2VkLWI0M2YtOTcxMmM2ZTI4MmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTUzZjdhNmQtYThhZi00YThkLTk0
YzUtODU4YjBiMjNhYjlhLzU1M2Y3YTZkLWE4YWYtNGE4ZC05NGM1LTg1OGIwYjIz
YWI5YS5jcmwwHwYDVR0jBBgwFoAULhX11GnG4njA4V0VQwKvnINxuvEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS81NTNmN2E2ZC1hOGFmLTRhOGQtOTRjNS04NThi
MGIyM2FiOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ChWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADUG83c3wItwlSfA7JxggS0gHYsbsyAQfWtTtjo37aYHswP8/E0I3TWw
Mv1deVh6EfaYKS2E+xRw8JpqGDC7ZGAX0CEKGFE1UGyEVyRDFa5u6a0O8nuIGE3T
bNW+RXeEFqaTuDX9povcLrE+0ofGhWz3GajsXxtsg+ALV6yFj/3mhT7ZJ0afaT/M
/bWViVLRfElmHwL1m1Cl3gNMlYAc3x9EU2WfuCHdcwrMUERpE+QH4Bgx+5UIQadA
iD7AQgloHcEZamvZeHQ7LzBHu877rs4rx9ns6MuEQY/2+2/xtPQZ30Uy82MjL4aL
Wr+pUJ8b/dWXc2FDrNeDEe6F4yx96kE=
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:28:46 2026 by rpki-client