Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de4590cf-394f-3e3c-8f36-96ebdde5c984.roa
File:                     de4590cf-394f-3e3c-8f36-96ebdde5c984.roa (raw, json)
Hash identifier:          oocrZq0Lu6YKhDR09IT4qty3f8El0bP0eSau6ak4pOk=
Subject key identifier:   57:94:8C:BC:95:BE:36:05:F1:BD:2F:4B:8B:B3:A2:21:C9:53:A8:A7
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584EA5AA88867ECBE350E7A86F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de4590cf-394f-3e3c-8f36-96ebdde5c984.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     6167
IP address blocks:        75.205.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:88:86:7e:cb:e3:50:e7:a8:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=3eb389ab-ad31-426b-819e-346c2d7f8869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2f:63:fd:e8:03:49:24:3f:8e:07:55:27:9c:
                    81:8b:b2:1d:56:3e:0a:e2:e8:7e:36:a0:33:1d:86:
                    5d:69:a4:9b:d4:09:9f:73:0f:c7:86:2c:c9:46:5e:
                    ad:15:2c:d4:af:de:09:fe:7d:42:9e:d7:a9:ae:1b:
                    9c:51:af:73:71:22:94:0d:6f:65:d9:df:cb:73:28:
                    51:c5:64:eb:ce:f3:2f:bb:50:d0:79:03:18:4f:cc:
                    c3:b5:11:8c:50:66:11:3b:ee:18:27:f1:19:cf:68:
                    c6:52:a8:1e:cb:a4:10:79:5c:32:6a:b8:f2:13:d4:
                    94:c0:c7:3a:8d:43:3b:31:c9:d2:4d:97:66:2f:0d:
                    90:6a:ea:00:91:34:5b:01:04:4c:5e:d8:8f:1d:86:
                    f2:30:7c:ce:59:96:24:09:17:ef:5f:9a:b7:db:03:
                    4e:fc:c1:0a:ca:7a:b5:64:d2:19:82:65:92:ff:69:
                    84:fb:69:ff:c7:da:a2:8b:0c:e1:38:45:48:3a:87:
                    f2:bd:17:f9:3c:5b:87:6a:53:af:45:5c:5c:23:cb:
                    f4:04:e6:c5:6b:6b:0a:a4:df:64:44:7a:be:b4:53:
                    44:8d:40:86:91:40:9c:fb:2b:7d:0a:94:a1:08:9d:
                    78:30:47:52:ed:c7:88:16:07:8c:12:72:f4:a0:b5:
                    6d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:94:8C:BC:95:BE:36:05:F1:BD:2F:4B:8B:B3:A2:21:C9:53:A8:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/de4590cf-394f-3e3c-8f36-96ebdde5c984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.205.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:aa:ef:87:c4:4f:b1:03:d3:3a:35:d4:70:29:b9:26:43:4d:
         ab:93:fd:51:77:c7:8e:d3:5d:15:2f:79:2a:21:3a:18:d0:78:
         06:d9:59:c7:c3:3d:9a:69:c9:1a:fd:d9:78:f2:64:eb:ed:72:
         18:ad:9d:d3:b6:d3:ae:7c:f6:e9:98:2a:60:5f:43:d7:04:0c:
         8d:a8:b9:2e:aa:ed:73:25:49:72:64:26:bf:2d:5a:ac:53:94:
         da:90:12:62:87:8d:76:6f:b0:d3:de:cb:bf:11:d5:f7:35:90:
         c7:58:b6:1a:9e:47:df:70:4c:00:f5:15:ff:c9:0e:29:c6:cc:
         ba:22:b0:18:ef:ff:44:ac:44:d2:5e:f6:4a:a4:6c:c1:32:cf:
         da:2c:89:e5:d3:0b:65:7b:2a:a7:75:3f:74:cf:e1:e7:1d:d1:
         85:ac:0f:c3:fd:ef:27:42:1a:77:0d:54:87:02:a5:5b:0a:3d:
         af:36:c0:d8:8c:ca:6f:8d:b2:fd:2b:32:3a:4c:3d:d5:49:4e:
         3e:03:01:34:73:ae:1f:ac:69:ab:60:b3:25:95:97:6a:13:13:
         10:f1:fc:cb:34:66:a4:0e:b8:ee:09:79:af:f8:b9:8c:ef:5a:
         4d:f1:a6:72:f3:d5:11:36:f9:e4:82:3c:e5:df:9e:22:48:00:
         cd:5a:a4:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqoiGfsvjUOeobwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk
M2ViMzg5YWItYWQzMS00MjZiLTgxOWUtMzQ2YzJkN2Y4ODY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5S9j/egDSSQ/jgdVJ5yBi7IdVj4K4uh+NqAz
HYZdaaSb1Amfcw/HhizJRl6tFSzUr94J/n1CnteprhucUa9zcSKUDW9l2d/LcyhR
xWTrzvMvu1DQeQMYT8zDtRGMUGYRO+4YJ/EZz2jGUqgey6QQeVwyarjyE9SUwMc6
jUM7McnSTZdmLw2QauoAkTRbAQRMXtiPHYbyMHzOWZYkCRfvX5q32wNO/MEKynq1
ZNIZgmWS/2mE+2n/x9qiiwzhOEVIOofyvRf5PFuHalOvRVxcI8v0BObFa2sKpN9k
RHq+tFNEjUCGkUCc+yt9CpShCJ14MEdS7ceIFgeMEnL0oLVtoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFeUjLyVvjYF8b0vS4uzoiHJU6inMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGU0NTkwY2YtMzk0Zi0z
ZTNjLThmMzYtOTZlYmRkZTVjOTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS81QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJeq74fET7ED0zo11HApuSZDTauT/VF3x47TXRUveSohOhjQeAbZWcfD
PZppyRr92XjyZOvtchitndO206589umYKmBfQ9cEDI2ouS6q7XMlSXJkJr8tWqxT
lNqQEmKHjXZvsNPey78R1fc1kMdYthqeR99wTAD1Ff/JDinGzLoisBjv/0SsRNJe
9kqkbMEyz9osieXTC2V7Kqd1P3TP4ecd0YWsD8P97ydCGncNVIcCpVsKPa82wNiM
ym+Nsv0rMjpMPdVJTj4DATRzrh+saatgsyWVl2oTExDx/Ms0ZqQOuO4Jea/4uYzv
Wk3xpnLz1RE2+eSCPOXfniJIAM1apBA=
-----END CERTIFICATE-----
Generated at Sat Aug 22 09:32:13 2026 by rpki-client