Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5/003152e0-02c5-3e64-9428-54f29de222c2.roa
File:                     003152e0-02c5-3e64-9428-54f29de222c2.roa (raw, json)
Hash identifier:          T5wfMW9XzVkef6arl/tRQQ4jMY0k6PCIL3I+TscJqi8=
Subject key identifier:   B3:BF:42:41:6C:4E:5F:6F:8C:04:3F:3A:F0:4E:70:78:56:E0:17:B5
Certificate issuer:       /CN=7672a82f-eb52-44bf-b38f-f09fc313d7d5
Certificate serial:       010D0C9F4328584ECBD1EBA51E32797E50AFFAE8
Authority key identifier: 36:13:56:11:E6:98:E6:D8:AC:4C:BD:DF:F3:EE:DA:FB:19:AC:6D:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5/003152e0-02c5-3e64-9428-54f29de222c2.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     46920
IP address blocks:        74.113.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5/7672a82f-eb52-44bf-b38f-f09fc313d7d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5/7672a82f-eb52-44bf-b38f-f09fc313d7d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:eb:a5:1e:32:79:7e:50:af:fa:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7672a82f-eb52-44bf-b38f-f09fc313d7d5
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=5fd2e95f-4564-4931-81bd-fc5c870d44f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fb:3e:ee:d5:f8:3d:a1:0f:35:f2:43:e0:35:
                    e5:4c:f8:a1:be:17:e1:d1:f7:ac:9c:b4:85:9c:89:
                    b1:9c:ca:71:21:db:c0:ec:0d:b0:af:76:90:60:20:
                    1c:8f:48:41:65:51:47:db:f6:81:6e:54:ff:99:c0:
                    74:a3:42:97:31:32:6e:79:5c:69:8c:9a:7c:c6:a1:
                    81:ee:b0:a1:20:84:d9:c0:05:38:d0:b2:93:99:ed:
                    59:10:d6:08:09:1a:99:f7:b4:29:39:f2:90:e8:9a:
                    10:c3:ff:df:eb:0d:a5:7b:ef:49:87:1a:e4:bd:45:
                    ab:15:0d:38:04:b6:d8:64:b8:c4:ac:53:e6:dd:40:
                    f5:e0:ec:3f:ed:d5:e7:a9:6c:4d:33:d9:79:c0:d8:
                    21:e5:ed:b7:19:56:03:f4:78:5b:a5:81:28:7f:7c:
                    64:48:12:34:b4:c1:85:3c:b0:aa:dd:ac:bd:3c:9d:
                    d4:81:21:de:bc:87:c2:6d:90:7b:bf:1f:d2:9a:83:
                    03:aa:6a:e1:ec:66:cd:bc:a8:d0:dc:54:52:5b:4b:
                    54:79:f9:66:16:98:13:07:f8:47:c8:a9:7f:19:5c:
                    ae:37:b0:78:d8:e3:a4:77:85:7e:f1:2a:69:cb:15:
                    3e:22:37:60:1a:cc:80:66:4b:b7:09:59:1b:ec:50:
                    6f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BF:42:41:6C:4E:5F:6F:8C:04:3F:3A:F0:4E:70:78:56:E0:17:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5/003152e0-02c5-3e64-9428-54f29de222c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5/7672a82f-eb52-44bf-b38f-f09fc313d7d5.crl

            X509v3 Authority Key Identifier:
                keyid:36:13:56:11:E6:98:E6:D8:AC:4C:BD:DF:F3:EE:DA:FB:19:AC:6D:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.113.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:21:a9:2e:56:f2:f1:e3:21:3a:a5:da:70:64:51:b1:a9:d5:
         d4:3d:61:2d:6a:31:ab:b1:da:1a:0f:9b:e1:18:19:69:c0:c1:
         e5:c6:d6:86:65:83:3f:73:2d:bb:7e:9f:e8:7f:24:55:6a:dc:
         28:4d:22:87:47:ff:55:19:fd:ad:d5:8c:84:0f:86:9e:e5:1c:
         26:bd:ff:99:68:81:99:28:5e:19:c1:5d:0a:9f:3f:2e:a9:ac:
         87:9c:c1:fc:de:20:1b:e0:4c:52:4c:06:aa:5c:a6:89:a3:93:
         6c:03:ee:55:6c:69:2e:7f:c2:d9:07:ef:48:cf:dd:3f:4c:3a:
         a6:c1:ca:bb:69:1e:7f:2c:80:28:8f:9d:9e:fb:7b:ad:28:32:
         76:91:7e:9c:b8:26:fa:9f:bf:e6:22:dd:93:d4:1f:87:bf:06:
         4b:53:4e:f2:bb:8c:9d:b6:90:36:31:cf:e4:d4:4d:4d:92:d9:
         fa:b2:3b:4e:b0:8c:62:6a:3f:e9:6b:8b:50:ff:0c:27:65:54:
         c2:52:ca:d9:e4:de:74:c4:7d:7e:22:92:10:69:fb:58:d6:5b:
         24:95:48:e0:61:8f:1d:35:b0:06:8b:18:8d:2b:5c:d0:e0:17:
         e7:6b:6b:61:55:ef:59:a3:c7:71:f6:95:a5:f2:e6:67:5b:69:
         9d:e0:8b:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0eulHjJ5flCv+ugwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3MmE4MmYtZWI1Mi00NGJmLWIzOGYtZjA5ZmMzMTNk
N2Q1MB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk
NWZkMmU5NWYtNDU2NC00OTMxLTgxYmQtZmM1Yzg3MGQ0NGYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvs+7tX4PaEPNfJD4DXlTPihvhfh0fesnLSF
nImxnMpxIdvA7A2wr3aQYCAcj0hBZVFH2/aBblT/mcB0o0KXMTJueVxpjJp8xqGB
7rChIITZwAU40LKTme1ZENYICRqZ97QpOfKQ6JoQw//f6w2le+9JhxrkvUWrFQ04
BLbYZLjErFPm3UD14Ow/7dXnqWxNM9l5wNgh5e23GVYD9HhbpYEof3xkSBI0tMGF
PLCq3ay9PJ3UgSHevIfCbZB7vx/SmoMDqmrh7GbNvKjQ3FRSW0tUeflmFpgTB/hH
yKl/GVyuN7B42OOkd4V+8SppyxU+IjdgGsyAZku3CVkb7FBvSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLO/QkFsTl9vjAQ/OvBOcHhW4Be1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83Njcy
YTgyZi1lYjUyLTQ0YmYtYjM4Zi1mMDlmYzMxM2Q3ZDUvMDAzMTUyZTAtMDJjNS0z
ZTY0LTk0MjgtNTRmMjlkZTIyMmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNzY3MmE4MmYtZWI1Mi00NGJmLWIz
OGYtZjA5ZmMzMTNkN2Q1Lzc2NzJhODJmLWViNTItNDRiZi1iMzhmLWYwOWZjMzEz
ZDdkNS5jcmwwHwYDVR0jBBgwFoAUNhNWEeaY5tisTL3f8+7a+xmsbQ0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83NjcyYTgyZi1lYjUyLTQ0YmYtYjM4Zi1mMDlm
YzMxM2Q3ZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSnGwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGwhqS5W8vHjITql2nBkUbGp1dQ9YS1qMaux2hoPm+EYGWnAweXG1oZl
gz9zLbt+n+h/JFVq3ChNIodH/1UZ/a3VjIQPhp7lHCa9/5logZkoXhnBXQqfPy6p
rIecwfzeIBvgTFJMBqpcpomjk2wD7lVsaS5/wtkH70jP3T9MOqbByrtpHn8sgCiP
nZ77e60oMnaRfpy4Jvqfv+Yi3ZPUH4e/BktTTvK7jJ22kDYxz+TUTU2S2fqyO06w
jGJqP+lri1D/DCdlVMJSytnk3nTEfX4ikhBp+1jWWySVSOBhjx01sAaLGI0rXNDg
F+dra2FV71mjx3H2laXy5mdbaZ3gi40=
-----END CERTIFICATE-----
Generated at Sat Aug 22 06:18:44 2026 by rpki-client