Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/c7ad1741-148a-37a7-bc3b-bb1f5db943b4.roa
File:                     c7ad1741-148a-37a7-bc3b-bb1f5db943b4.roa (raw, json)
Hash identifier:          ETAxGjLtvqYnWyHV+V7+Ux6ZGT+55I0bZxISVfotMq4=
Subject key identifier:   31:D3:9F:77:10:D3:BC:5D:C4:C1:BF:EA:39:A0:81:3E:16:85:91:13
Certificate issuer:       /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
Certificate serial:       010D0C9F4328584F093D0C14F23DE5840241A5C0
Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/c7ad1741-148a-37a7-bc3b-bb1f5db943b4.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     62874
IP address blocks:        167.160.40.0/22 maxlen: 23
                          167.160.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:0c:14:f2:3d:e5:84:02:41:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=88141e09-a06f-4b72-80e0-81c6cde60ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:21:fb:8d:e4:fc:95:13:92:e4:f5:13:00:c1:
                    97:09:fd:c3:ec:2c:bc:fa:41:75:4a:06:45:fc:91:
                    5d:85:24:9a:b6:e6:25:b4:d3:4d:d1:4e:70:a5:4d:
                    3d:fd:fd:0e:79:d0:d8:7b:b7:54:d1:f2:32:d5:04:
                    37:9d:93:86:09:a1:d8:1b:3c:45:02:28:22:91:2c:
                    d4:e8:94:76:67:e6:38:14:28:1f:53:00:a8:57:f2:
                    1a:14:5d:0a:e1:0a:53:90:d5:79:16:6b:44:d5:fe:
                    38:68:60:0e:f5:1e:26:9e:c2:3f:5f:29:2c:c4:3a:
                    09:6a:11:5d:b2:50:0f:60:91:1d:2b:1d:5a:ea:15:
                    92:43:14:dc:b9:7e:df:f5:db:02:85:2b:fa:c2:43:
                    fc:c8:9f:67:59:3a:c7:34:9c:4c:2e:bd:6b:4c:41:
                    3f:14:aa:de:a1:b0:b7:a2:2c:1a:f6:87:3a:dd:67:
                    8f:ce:88:d7:50:9e:fa:d8:05:96:7d:da:d1:60:0c:
                    ab:b8:ef:d1:a5:87:df:00:89:66:bc:1b:e4:55:6e:
                    74:5d:70:97:5a:26:79:8c:b4:85:f4:06:35:df:54:
                    07:95:fb:e1:df:ca:71:0c:9e:36:68:c1:25:10:1d:
                    ac:fc:c5:65:b4:9c:8f:d6:ac:a0:ed:00:9e:72:88:
                    8a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D3:9F:77:10:D3:BC:5D:C4:C1:BF:EA:39:A0:81:3E:16:85:91:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/c7ad1741-148a-37a7-bc3b-bb1f5db943b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl

            X509v3 Authority Key Identifier:
                keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.160.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:5b:5f:13:b7:73:57:6e:84:75:4a:8a:29:ab:31:50:07:5d:
         60:62:81:29:85:91:85:1b:56:37:86:04:b4:19:3a:80:c6:85:
         ca:26:4c:a3:5b:db:d7:b5:74:09:4c:ab:23:dc:80:40:0e:e6:
         7b:ec:01:f0:80:e7:ae:38:3e:d0:3e:eb:73:4c:06:4d:f1:37:
         e7:13:67:84:6a:ad:82:de:e6:d3:5f:52:80:80:e2:95:9a:d8:
         49:51:64:f1:90:57:86:95:e9:1e:35:98:e9:bc:e5:cb:d3:42:
         ea:74:d9:1e:89:cf:51:b5:68:b1:5f:fa:be:bd:32:7a:d9:f8:
         78:2e:88:49:3e:9a:fb:ed:d8:51:e9:10:2f:dc:b3:84:35:64:
         18:9f:2e:93:ef:4d:24:de:eb:e9:34:1a:9e:c3:12:bb:cc:66:
         5b:36:55:58:54:20:6b:6c:46:11:06:bb:89:c7:ea:8e:7f:4b:
         00:0c:48:36:d4:d3:44:d6:4a:08:a2:59:56:f1:03:15:c5:a9:
         1e:c3:c4:18:ff:fd:e1:51:06:ab:a3:b0:23:35:8b:8a:1e:d9:
         93:81:c6:9f:ef:64:4a:e2:88:54:22:6b:7e:c3:29:31:46:0e:
         d7:84:0b:8e:eb:2b:cb:b0:ab:7c:d0:ea:23:0a:79:e3:fc:2c:
         e1:ef:63:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPQwU8j3lhAJBpcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGY3OTk5YzgtZTRhNS00NWZjLTljYzItYzRmZTdmMThi
ZmUyMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk
ODgxNDFlMDktYTA2Zi00YjcyLTgwZTAtODFjNmNkZTYwZmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiH7jeT8lROS5PUTAMGXCf3D7Cy8+kF1SgZF
/JFdhSSatuYltNNN0U5wpU09/f0OedDYe7dU0fIy1QQ3nZOGCaHYGzxFAigikSzU
6JR2Z+Y4FCgfUwCoV/IaFF0K4QpTkNV5FmtE1f44aGAO9R4mnsI/XyksxDoJahFd
slAPYJEdKx1a6hWSQxTcuX7f9dsChSv6wkP8yJ9nWTrHNJxMLr1rTEE/FKreobC3
oiwa9oc63WePzojXUJ762AWWfdrRYAyruO/RpYffAIlmvBvkVW50XXCXWiZ5jLSF
9AY131QHlfvh38pxDJ42aMElEB2s/MVltJyP1qyg7QCecoiKZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDHTn3cQ07xdxMG/6jmggT4WhZETMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5
OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZlN2YxOGJmZTIvYzdhZDE3NDEtMTQ4YS0z
N2E3LWJjM2ItYmIxZjVkYjk0M2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZGY3OTk5YzgtZTRhNS00NWZjLTlj
YzItYzRmZTdmMThiZmUyL2RmNzk5OWM4LWU0YTUtNDVmYy05Y2MyLWM0ZmU3ZjE4
YmZlMi5jcmwwHwYDVR0jBBgwFoAUGekERPSo9doFk24jLmU0Yzeeu6swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kZjc5OTljOC1lNGE1LTQ1ZmMtOWNjMi1jNGZl
N2YxOGJmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDp6AoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIRbXxO3c1duhHVKiimrMVAHXWBigSmFkYUbVjeGBLQZOoDGhcomTKNb
29e1dAlMqyPcgEAO5nvsAfCA5644PtA+63NMBk3xN+cTZ4RqrYLe5tNfUoCA4pWa
2ElRZPGQV4aV6R41mOm85cvTQup02R6Jz1G1aLFf+r69MnrZ+HguiEk+mvvt2FHp
EC/cs4Q1ZBifLpPvTSTe6+k0Gp7DErvMZls2VVhUIGtsRhEGu4nH6o5/SwAMSDbU
00TWSgiiWVbxAxXFqR7DxBj//eFRBqujsCM1i4oe2ZOBxp/vZEriiFQia37DKTFG
DteEC47rK8uwq3zQ6iMKeeP8LOHvY6E=
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:24:33 2026 by rpki-client