Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/7c8a4b99-283b-3234-b816-b4b5409f8a4d.roa
File:                     7c8a4b99-283b-3234-b816-b4b5409f8a4d.roa (raw, json)
Hash identifier:          yk0vERX3cNSiHQBp75AyQ1J1xHz/mff7XPxSMj+lhTg=
Subject key identifier:   58:D8:27:F1:CD:B7:1D:E4:01:CB:EE:0A:07:C8:12:F9:8F:BA:D3:88
Certificate issuer:       /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
Certificate serial:       010D0C9F4328584EAFE6F0CE63A319139D693F40
Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/7c8a4b99-283b-3234-b816-b4b5409f8a4d.roa
Signing time:             Sat 01 Aug 2026 01:00:12 +0000
ROA not before:           Sat 01 Aug 2026 01:00:12 +0000
ROA not after:            Fri 30 Oct 2026 01:00:12 +0000
asID:                     18934
IP address blocks:        162.208.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:e6:f0:ce:63:a3:19:13:9d:69:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
        Validity
            Not Before: Aug  1 01:00:12 2026 GMT
            Not After : Oct 30 01:00:12 2026 GMT
        Subject: CN=d7ca6af4-a47b-456d-9bc1-47f1a16f92b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:36:85:ef:34:1d:2d:c0:96:37:92:fc:d6:22:
                    2c:9d:c0:4d:d9:b4:07:75:b3:67:b0:3a:b1:9b:4b:
                    a8:ac:00:49:61:cf:d6:6a:3c:0f:43:30:e2:88:8b:
                    aa:6b:c2:c3:db:ce:31:b2:a2:ce:b7:ea:3e:4b:a6:
                    21:2e:bd:d4:51:26:7e:fa:f4:a8:4b:4e:4c:d8:84:
                    1b:81:2e:1c:43:0b:de:af:1d:97:3a:a3:db:a4:c0:
                    a0:81:4b:5d:4d:96:5b:e7:14:0a:db:5f:8f:76:8a:
                    41:e3:06:91:32:83:fb:dc:7f:32:21:ba:6e:3d:31:
                    c6:15:85:36:29:6e:4a:b8:75:fb:00:4d:aa:5c:3f:
                    d0:0c:97:46:67:c0:b3:5f:2c:da:9e:5c:98:3b:01:
                    2e:d4:b6:46:8a:0e:04:fd:8a:ab:f5:b6:88:28:14:
                    55:39:56:cd:6e:cf:b1:79:1a:99:60:5a:1c:31:ee:
                    ab:a7:fe:36:a0:75:78:19:e5:b4:f0:3a:95:ae:c4:
                    ac:3d:f1:f8:8d:fc:71:e9:06:e6:ac:39:c1:36:7d:
                    5a:e2:8a:ab:44:78:6a:30:9f:ee:61:75:cd:ec:f7:
                    25:64:6d:be:db:89:a2:51:59:cc:b2:0a:88:4e:38:
                    08:4f:1e:f3:ab:1b:bc:1b:d0:18:10:2a:ea:68:ed:
                    d1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D8:27:F1:CD:B7:1D:E4:01:CB:EE:0A:07:C8:12:F9:8F:BA:D3:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/7c8a4b99-283b-3234-b816-b4b5409f8a4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl

            X509v3 Authority Key Identifier:
                keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:80:f8:35:cf:01:47:f3:54:19:72:f5:27:d7:c6:a1:3a:3d:
         54:1c:e9:6b:bb:d5:1f:99:1e:6b:bb:22:5d:49:15:4c:a6:82:
         e1:fc:f6:b0:96:6e:fa:dd:dc:34:0a:e9:98:25:98:47:e6:ad:
         0f:21:f3:67:3d:b1:38:8d:c5:9f:89:c3:5d:1c:7f:f4:38:7d:
         06:bd:8a:b0:2d:07:5a:9c:5c:1e:66:3a:e3:36:0c:a0:de:6b:
         86:8d:80:da:2a:1e:97:f9:c4:76:c9:4b:98:9c:30:57:6c:86:
         73:01:e0:27:0c:87:4a:b0:74:77:b6:31:d3:c9:cf:fa:49:4e:
         f5:2c:ad:70:e8:45:96:5e:d7:d9:a0:ac:1b:ad:e0:fd:05:e5:
         53:d3:08:6a:36:89:2a:57:7a:2e:16:57:08:f1:1f:8c:eb:d7:
         9d:9b:51:54:43:4c:2d:f4:14:e5:f7:6f:4e:86:9b:cd:e9:3d:
         9d:59:c2:30:3d:5c:1a:72:28:95:85:9e:30:65:18:83:fb:bc:
         20:84:3b:17:ba:eb:36:91:82:df:1d:43:a9:de:ab:3d:2c:de:
         22:64:4f:71:e2:3c:8a:04:0b:26:c5:41:cd:b9:5b:e1:e5:1f:
         2e:e3:f0:98:75:4a:ef:03:d9:19:38:fa:ab:39:50:c9:36:58:
         00:24:fb:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5vDOY6MZE51pP0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQ5MjEzZjctMjhlMi00ZmExLTg0OTEtNzhlMzU4MGNk
YjdmMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk
ZDdjYTZhZjQtYTQ3Yi00NTZkLTliYzEtNDdmMWExNmY5MmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjaF7zQdLcCWN5L81iIsncBN2bQHdbNnsDqx
m0uorABJYc/WajwPQzDiiIuqa8LD284xsqLOt+o+S6YhLr3UUSZ++vSoS05M2IQb
gS4cQwverx2XOqPbpMCggUtdTZZb5xQK21+PdopB4waRMoP73H8yIbpuPTHGFYU2
KW5KuHX7AE2qXD/QDJdGZ8CzXyzanlyYOwEu1LZGig4E/Yqr9baIKBRVOVbNbs+x
eRqZYFocMe6rp/42oHV4GeW08DqVrsSsPfH4jfxx6QbmrDnBNn1a4oqrRHhqMJ/u
YXXN7PclZG2+24miUVnMsgqITjgITx7zqxu8G9AYECrqaO3R/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFjYJ/HNtx3kAcvuCgfIEvmPutOIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zNDky
MTNmNy0yOGUyLTRmYTEtODQ5MS03OGUzNTgwY2RiN2YvN2M4YTRiOTktMjgzYi0z
MjM0LWI4MTYtYjRiNTQwOWY4YTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzQ5MjEzZjctMjhlMi00ZmExLTg0
OTEtNzhlMzU4MGNkYjdmLzM0OTIxM2Y3LTI4ZTItNGZhMS04NDkxLTc4ZTM1ODBj
ZGI3Zi5jcmwwHwYDVR0jBBgwFoAUl16fqcxh1Y3cB+3gRH1f3Ykt9AMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8zNDkyMTNmNy0yOGUyLTRmYTEtODQ5MS03OGUz
NTgwY2RiN2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotBpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAuA+DXPAUfzVBly9SfXxqE6PVQc6Wu71R+ZHmu7Il1JFUymguH89rCW
bvrd3DQK6ZglmEfmrQ8h82c9sTiNxZ+Jw10cf/Q4fQa9irAtB1qcXB5mOuM2DKDe
a4aNgNoqHpf5xHbJS5icMFdshnMB4CcMh0qwdHe2MdPJz/pJTvUsrXDoRZZe19mg
rBut4P0F5VPTCGo2iSpXei4WVwjxH4zr152bUVRDTC30FOX3b06Gm83pPZ1ZwjA9
XBpyKJWFnjBlGIP7vCCEOxe66zaRgt8dQ6neqz0s3iJkT3HiPIoECybFQc25W+Hl
Hy7j8Jh1Su8D2Rk4+qs5UMk2WAAk+6M=
-----END CERTIFICATE-----
Generated at Sat Aug 22 20:20:41 2026 by rpki-client