Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/7c301402-5357-3ef4-8091-f1e5458c4b20.roa
File:                     7c301402-5357-3ef4-8091-f1e5458c4b20.roa (raw, json)
Hash identifier:          N15Jt/rA3v3IA9X4SyLHlj/+glMRFj63N5Q0Z5hdB2o=
Subject key identifier:   E7:5D:A7:0A:26:5C:D3:0B:2D:79:4B:29:2A:CD:A7:D8:A7:7E:23:D2
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584E8B24F766A4C55301868D2580
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/7c301402-5357-3ef4-8091-f1e5458c4b20.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     203724
IP address blocks:        208.81.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:f7:66:a4:c5:53:01:86:8d:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=c8627355-50b2-4aa9-bec5-f83429e8ae4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ae:40:bc:e5:9a:e0:f4:8f:8e:d7:ab:90:71:
                    36:aa:b2:6d:35:a8:a5:44:ad:d3:80:6d:a4:b7:b7:
                    7d:12:76:4f:81:14:49:08:32:52:2d:ef:56:7e:f6:
                    51:b9:75:6b:00:8a:6a:c8:06:7b:b5:71:ca:78:e4:
                    cd:1c:5b:c5:70:c8:8e:76:54:20:b6:78:9e:c3:c8:
                    55:0b:0d:62:03:0b:bf:b2:a7:25:16:aa:0a:87:10:
                    14:af:a1:a2:e9:01:eb:3b:78:d7:23:77:4b:88:77:
                    a8:dc:24:0c:25:39:17:bd:85:40:3e:3d:e4:0e:06:
                    f8:5e:e0:33:d3:b2:d5:b3:08:02:9e:1c:47:02:f3:
                    ab:c3:c6:7b:25:8c:7a:ff:5f:f0:c3:d6:b7:d2:43:
                    03:f5:a7:47:3a:16:b7:01:0f:5f:d9:66:74:5e:79:
                    fe:5e:84:3b:3a:17:76:20:ed:6f:3a:bc:27:49:e0:
                    f3:3f:a5:ab:2d:83:22:56:87:d7:ab:e4:35:c4:cd:
                    aa:3c:26:59:91:d3:ac:83:ce:e5:20:a6:f7:7a:59:
                    1a:1f:9a:a0:89:ec:41:ef:77:c6:ab:26:76:cc:87:
                    6a:f8:5f:21:8b:e5:95:c1:41:60:a2:ce:eb:f7:c7:
                    3f:ec:18:5d:dd:68:ec:8e:08:a9:77:96:c6:9b:6a:
                    34:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5D:A7:0A:26:5C:D3:0B:2D:79:4B:29:2A:CD:A7:D8:A7:7E:23:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/7c301402-5357-3ef4-8091-f1e5458c4b20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.81.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:5a:5b:da:13:79:92:2f:8a:e7:49:b2:f7:d6:1b:41:02:01:
         85:81:95:8c:e6:96:06:33:54:44:f9:1e:db:94:cf:1b:f3:5a:
         cb:11:7e:48:f8:a4:90:e9:f8:a7:1a:c3:15:76:c2:e2:63:9a:
         0e:75:6c:2f:a2:1c:44:1e:06:63:ce:04:c8:9a:73:6a:5f:95:
         1c:ea:46:71:45:d3:ee:24:34:ef:ec:07:16:91:d1:00:e9:b8:
         90:58:b7:09:55:4e:c0:5d:3a:34:0a:3e:ed:81:9a:05:77:34:
         5e:e8:1d:77:d7:7a:38:14:9d:27:6d:1c:72:6a:ec:37:f5:2c:
         02:ad:19:ef:7b:38:d5:ef:f2:4e:ac:7d:d1:64:14:d8:bc:43:
         a5:71:54:8a:e9:9e:49:31:0c:43:f4:64:ca:35:ae:7c:0f:45:
         10:31:3b:25:c7:b2:83:16:ca:4a:dc:19:6d:18:47:a0:ec:16:
         41:a7:7c:97:36:c8:cc:bd:34:27:f8:bb:69:7f:85:2b:11:3b:
         46:cd:90:38:99:20:2d:88:6a:17:76:87:08:94:3d:16:3b:3e:
         c8:86:c8:6e:54:86:08:af:d2:c1:44:e9:29:62:95:0f:c3:35:
         cb:3e:4d:c8:f3:7d:e2:4d:26:8e:28:7f:87:30:94:39:55:99:
         14:b3:b8:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6LJPdmpMVTAYaNJYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3
Yjc0MB4XDTI2MDcxODIxMDAxMVoXDTI2MTAxNjIxMDAxMVowLzEtMCsGA1UEAxMk
Yzg2MjczNTUtNTBiMi00YWE5LWJlYzUtZjgzNDI5ZThhZTRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh65AvOWa4PSPjterkHE2qrJtNailRK3TgG2k
t7d9EnZPgRRJCDJSLe9WfvZRuXVrAIpqyAZ7tXHKeOTNHFvFcMiOdlQgtniew8hV
Cw1iAwu/sqclFqoKhxAUr6Gi6QHrO3jXI3dLiHeo3CQMJTkXvYVAPj3kDgb4XuAz
07LVswgCnhxHAvOrw8Z7JYx6/1/ww9a30kMD9adHOha3AQ9f2WZ0Xnn+XoQ7Ohd2
IO1vOrwnSeDzP6WrLYMiVofXq+Q1xM2qPCZZkdOsg87lIKb3elkaH5qgiexB73fG
qyZ2zIdq+F8hi+WVwUFgos7r98c/7Bhd3Wjsjgipd5bGm2o0vQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOddpwomXNMLLXlLKSrNp9infiPSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5
MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvN2MzMDE0MDItNTM1Ny0z
ZWY0LTgwOTEtZjFlNTQ1OGM0YjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl
ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5
N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll
OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FFAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFBaW9oTeZIviudJsvfWG0ECAYWBlYzmlgYzVET5HtuUzxvzWssRfkj4
pJDp+KcawxV2wuJjmg51bC+iHEQeBmPOBMiac2pflRzqRnFF0+4kNO/sBxaR0QDp
uJBYtwlVTsBdOjQKPu2BmgV3NF7oHXfXejgUnSdtHHJq7Df1LAKtGe97ONXv8k6s
fdFkFNi8Q6VxVIrpnkkxDEP0ZMo1rnwPRRAxOyXHsoMWykrcGW0YR6DsFkGnfJc2
yMy9NCf4u2l/hSsRO0bNkDiZIC2Iahd2hwiUPRY7PsiGyG5Uhgiv0sFE6SlilQ/D
Ncs+TcjzfeJNJo4of4cwlDlVmRSzuCc=
-----END CERTIFICATE-----
Generated at Mon Jul 20 01:30:59 2026 by rpki-client