Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a/18a44674-eb0c-3dce-b03a-171f9c3759f2.roa
File:                     18a44674-eb0c-3dce-b03a-171f9c3759f2.roa (raw, json)
Hash identifier:          Oj0TOxSjCAst+0ExuyJFRsSD3GPWZF472/VEXdzaCkc=
Subject key identifier:   4F:3F:D3:96:CF:01:F7:0F:D8:26:55:03:EA:01:14:22:6C:B8:6C:0D
Certificate issuer:       /CN=a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a
Certificate serial:       010D0C9F4328584EB9AC4DB4A3E3126381B0FB00
Authority key identifier: 5F:C7:CC:D2:E6:77:18:6A:01:93:E4:67:69:83:D6:E0:B6:23:9F:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a/18a44674-eb0c-3dce-b03a-171f9c3759f2.roa
Signing time:             Tue 04 Aug 2026 13:00:12 +0000
ROA not before:           Tue 04 Aug 2026 13:00:12 +0000
ROA not after:            Mon 02 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        68.67.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b9:ac:4d:b4:a3:e3:12:63:81:b0:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a
        Validity
            Not Before: Aug  4 13:00:12 2026 GMT
            Not After : Nov  2 14:00:12 2026 GMT
        Subject: CN=a6ba33f8-f219-42ab-a563-8265205395eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:db:a0:d3:a9:e7:ae:cc:7b:e3:31:a8:50:f0:
                    1d:b2:b4:d9:9a:52:1f:81:f0:c2:16:f6:ac:0d:1f:
                    0e:52:3f:3d:a6:bc:89:a4:76:fc:30:3c:e4:b5:d9:
                    60:d7:64:8a:2a:f2:65:78:38:c6:f3:24:37:8e:08:
                    50:29:c9:bf:a3:68:53:81:3c:c6:42:6b:28:51:6a:
                    9c:fc:12:d0:c0:42:da:36:80:44:41:f5:a6:5c:aa:
                    3d:81:6d:df:0d:cc:7b:e5:6c:06:50:87:db:93:d5:
                    4d:d8:ab:9a:ef:b6:b0:10:4c:38:55:7a:10:fd:80:
                    74:5d:41:55:7c:b2:33:8f:f7:a3:ed:20:f6:7a:ee:
                    bd:c5:90:67:1e:d2:b4:fd:17:db:78:d5:e9:dd:09:
                    e7:7c:8f:ce:a3:0f:e1:06:b3:6d:d6:09:8c:80:75:
                    7e:31:67:31:30:42:ed:56:2b:64:1e:3f:e1:94:4c:
                    4d:cc:cd:57:5c:05:b1:ed:5f:9b:aa:8e:28:52:91:
                    11:4e:45:0a:ec:2b:23:8c:ea:1e:06:fc:86:aa:5d:
                    79:c0:bd:5f:b9:cc:0d:15:a9:15:4d:68:5d:8f:95:
                    ee:e0:50:17:ab:1e:6f:ac:c8:a3:5f:23:9e:0b:cd:
                    46:11:40:5e:44:95:68:bc:e8:3e:ae:96:2c:ea:1f:
                    58:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3F:D3:96:CF:01:F7:0F:D8:26:55:03:EA:01:14:22:6C:B8:6C:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a/18a44674-eb0c-3dce-b03a-171f9c3759f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a.crl

            X509v3 Authority Key Identifier:
                keyid:5F:C7:CC:D2:E6:77:18:6A:01:93:E4:67:69:83:D6:E0:B6:23:9F:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a1b7b328-ddd7-4280-b3a9-8e5c7bbf862a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:8f:54:6f:16:83:1c:90:77:ef:28:2e:da:4f:e3:79:ef:c8:
         3d:46:be:37:8e:87:7b:ff:a7:9f:d4:b7:0c:de:8f:26:39:af:
         75:bc:81:19:85:45:e0:07:de:fe:81:30:5c:1e:d3:cc:e1:1d:
         03:e7:fe:01:a4:f4:33:fc:b5:cc:30:82:a4:af:0e:76:0b:df:
         c2:0f:1d:ee:a9:cc:4a:ed:05:cb:af:be:24:8c:04:bd:81:58:
         11:95:a3:91:93:13:8e:de:0a:a5:b7:91:2a:9e:55:0c:2e:1e:
         04:66:ea:c4:93:45:d4:b8:fe:8d:ec:c8:62:06:51:50:a3:17:
         1d:59:0b:96:85:35:0a:ae:1b:6d:85:9b:01:62:f6:f4:f6:ff:
         56:f8:5f:bb:3e:fb:d8:7a:73:3b:66:12:30:f3:8b:37:a0:14:
         8e:6d:bb:dd:a4:a7:86:82:0a:fa:83:f5:c5:2e:a2:7a:9c:d9:
         62:1c:a9:f2:d3:1e:6b:a0:e4:20:a0:13:ca:5b:8b:bf:95:6a:
         e8:90:90:65:35:06:f2:e6:e6:16:62:c6:80:37:58:b4:ea:eb:
         55:21:4d:0e:75:04:23:39:fc:61:5b:b2:73:51:07:5f:fe:01:
         4d:d8:2a:52:4d:2b:35:21:ac:e2:a0:5c:74:15:e4:b3:45:f6:
         78:5e:cb:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE65rE20o+MSY4Gw+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTFiN2IzMjgtZGRkNy00MjgwLWIzYTktOGU1YzdiYmY4
NjJhMB4XDTI2MDgwNDEzMDAxMloXDTI2MTEwMjE0MDAxMlowLzEtMCsGA1UEAxMk
YTZiYTMzZjgtZjIxOS00MmFiLWE1NjMtODI2NTIwNTM5NWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNug06nnrsx74zGoUPAdsrTZmlIfgfDCFvas
DR8OUj89pryJpHb8MDzktdlg12SKKvJleDjG8yQ3jghQKcm/o2hTgTzGQmsoUWqc
/BLQwELaNoBEQfWmXKo9gW3fDcx75WwGUIfbk9VN2Kua77awEEw4VXoQ/YB0XUFV
fLIzj/ej7SD2eu69xZBnHtK0/RfbeNXp3QnnfI/Oow/hBrNt1gmMgHV+MWcxMELt
VitkHj/hlExNzM1XXAWx7V+bqo4oUpERTkUK7CsjjOoeBvyGql15wL1fucwNFakV
TWhdj5Xu4FAXqx5vrMijXyOeC81GEUBeRJVovOg+rpYs6h9YdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE8/05bPAfcP2CZVA+oBFCJsuGwNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9hMWI3
YjMyOC1kZGQ3LTQyODAtYjNhOS04ZTVjN2JiZjg2MmEvMThhNDQ2NzQtZWIwYy0z
ZGNlLWIwM2EtMTcxZjljMzc1OWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYTFiN2IzMjgtZGRkNy00MjgwLWIz
YTktOGU1YzdiYmY4NjJhL2ExYjdiMzI4LWRkZDctNDI4MC1iM2E5LThlNWM3YmJm
ODYyYS5jcmwwHwYDVR0jBBgwFoAUX8fM0uZ3GGoBk+RnaYPW4LYjn4owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9hMWI3YjMyOC1kZGQ3LTQyODAtYjNhOS04ZTVj
N2JiZjg2MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARENwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADyPVG8WgxyQd+8oLtpP43nvyD1GvjeOh3v/p5/UtwzejyY5r3W8gRmF
ReAH3v6BMFwe08zhHQPn/gGk9DP8tcwwgqSvDnYL38IPHe6pzErtBcuvviSMBL2B
WBGVo5GTE47eCqW3kSqeVQwuHgRm6sSTRdS4/o3syGIGUVCjFx1ZC5aFNQquG22F
mwFi9vT2/1b4X7s++9h6cztmEjDzizegFI5tu92kp4aCCvqD9cUuonqc2WIcqfLT
Hmug5CCgE8pbi7+VauiQkGU1BvLm5hZixoA3WLTq61UhTQ51BCM5/GFbsnNRB1/+
AU3YKlJNKzUhrOKgXHQV5LNF9nhey3s=
-----END CERTIFICATE-----
Generated at Fri Aug 21 02:02:04 2026 by rpki-client