Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8bc24f30-bed9-35fd-8cbf-9492fbd82409.roa
File:                     8bc24f30-bed9-35fd-8cbf-9492fbd82409.roa (raw, json)
Hash identifier:          m8jyYdquJ2fY+Wbk+O3rS8cu/jdzH4nfbY5lFUp8qjo=
Subject key identifier:   F3:45:05:B5:72:21:19:CD:8C:0A:03:19:58:28:1F:BA:6B:69:F1:69
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584E8B24F4962C73166A21DAA080
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8bc24f30-bed9-35fd-8cbf-9492fbd82409.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     14618
IP address blocks:        207.202.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:f4:96:2c:73:16:6a:21:da:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=86d3fd64-5f34-4804-9c8b-39555230e7e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:87:ef:09:92:9c:89:ad:69:c2:94:68:5c:9c:
                    54:11:1e:1f:13:40:af:cd:6a:87:ef:f5:ee:44:93:
                    74:4a:f2:ca:dd:e8:f7:18:a1:9b:4f:b5:07:cf:3e:
                    9a:80:06:19:72:c2:c4:42:55:25:7e:22:2f:cb:1d:
                    4e:02:f7:b2:88:15:ae:05:2d:ff:9c:06:d2:e9:74:
                    df:5d:4c:da:3d:08:28:c4:96:e0:70:03:de:6d:fc:
                    22:e7:2f:63:2a:a0:f6:12:4e:a9:e6:5c:7d:77:0d:
                    0e:c1:4f:89:a2:37:e4:90:ea:81:47:af:96:10:e5:
                    f5:a9:07:f9:aa:5c:35:8f:71:3c:de:90:92:e6:b6:
                    8f:ec:a4:ba:a9:77:a7:b6:8a:7b:88:c3:81:46:ba:
                    ce:25:49:ce:cc:34:05:ee:a4:6b:91:2d:4c:74:b4:
                    7f:51:97:75:ef:b5:42:f9:be:b8:86:15:12:3c:c1:
                    fe:4c:e4:45:32:af:6e:a2:8a:c6:43:3e:95:5c:51:
                    61:7f:c3:50:ab:18:d7:25:32:03:b0:bd:be:3a:81:
                    d4:61:26:06:75:75:38:a9:f6:43:4a:a2:d6:46:b3:
                    82:7b:61:e9:07:2c:2d:0b:80:f8:10:4f:93:78:94:
                    0e:9d:17:f0:3c:ec:54:7c:51:1a:61:73:ef:9c:25:
                    0c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:45:05:B5:72:21:19:CD:8C:0A:03:19:58:28:1F:BA:6B:69:F1:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8bc24f30-bed9-35fd-8cbf-9492fbd82409.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:1e:55:81:b5:5d:18:56:98:99:bc:60:cb:00:f2:7c:cf:84:
         f9:2d:41:24:c1:a7:b0:e0:08:1d:21:fe:58:74:ea:2f:57:0f:
         89:97:0d:fa:62:20:be:99:8f:86:a2:91:0f:8b:54:e9:51:88:
         89:b2:ba:9a:ba:d5:13:3b:ec:36:6e:39:28:9e:a6:40:38:f2:
         3c:a4:be:bc:90:e9:0f:70:de:da:ce:b2:73:8e:52:7f:1e:64:
         08:e0:b3:ab:32:ef:27:a9:53:3a:84:73:92:59:d8:8d:12:7f:
         c7:2a:f9:7f:78:90:7d:5b:fa:6f:3e:52:d2:38:93:86:39:62:
         90:cd:d1:6b:21:98:f0:60:e4:55:51:c5:0a:2a:29:f8:6b:2b:
         48:78:c7:56:97:6a:5f:ed:7a:40:a7:08:c7:41:06:9a:83:c2:
         b9:d7:87:a7:dc:90:d9:63:7d:9f:3a:6d:aa:d6:62:54:84:06:
         32:4d:8b:03:6c:4c:b1:9c:46:bb:95:c5:f5:69:d1:fb:99:46:
         60:9f:84:f2:75:4b:60:30:72:83:21:73:eb:23:f8:53:af:df:
         58:1a:15:3f:81:a2:de:05:08:70:57:14:a7:1f:f7:7d:45:95:
         0f:bb:23:cb:f4:12:9a:3f:e1:98:3e:10:40:8a:d8:3c:65:f2:
         6e:93:01:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6LJPSWLHMWaiHaoIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3
NzNlMB4XDTI2MDcxODIxMDAxMVoXDTI2MTAxNjIxMDAxMVowLzEtMCsGA1UEAxMk
ODZkM2ZkNjQtNWYzNC00ODA0LTljOGItMzk1NTUyMzBlN2U2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4fvCZKcia1pwpRoXJxUER4fE0CvzWqH7/Xu
RJN0SvLK3ej3GKGbT7UHzz6agAYZcsLEQlUlfiIvyx1OAveyiBWuBS3/nAbS6XTf
XUzaPQgoxJbgcAPebfwi5y9jKqD2Ek6p5lx9dw0OwU+JojfkkOqBR6+WEOX1qQf5
qlw1j3E83pCS5raP7KS6qXentop7iMOBRrrOJUnOzDQF7qRrkS1MdLR/UZd177VC
+b64hhUSPMH+TORFMq9uoorGQz6VXFFhf8NQqxjXJTIDsL2+OoHUYSYGdXU4qfZD
SqLWRrOCe2HpBywtC4D4EE+TeJQOnRfwPOxUfFEaYXPvnCUMrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPNFBbVyIRnNjAoDGVgoH7prafFpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl
ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvOGJjMjRmMzAtYmVkOS0z
NWZkLThjYmYtOTQ5MmZiZDgyNDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4
YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj
NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1
MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8pAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF8eVYG1XRhWmJm8YMsA8nzPhPktQSTBp7DgCB0h/lh06i9XD4mXDfpi
IL6Zj4aikQ+LVOlRiImyupq61RM77DZuOSiepkA48jykvryQ6Q9w3trOsnOOUn8e
ZAjgs6sy7yepUzqEc5JZ2I0Sf8cq+X94kH1b+m8+UtI4k4Y5YpDN0WshmPBg5FVR
xQoqKfhrK0h4x1aXal/tekCnCMdBBpqDwrnXh6fckNljfZ86barWYlSEBjJNiwNs
TLGcRruVxfVp0fuZRmCfhPJ1S2AwcoMhc+sj+FOv31gaFT+Bot4FCHBXFKcf931F
lQ+7I8v0Epo/4Zg+EECK2Dxl8m6TAbE=
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:48:41 2026 by rpki-client