Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/11fa8e1a-35b7-354e-8b62-fd190bda6c98.roa
File:                     11fa8e1a-35b7-354e-8b62-fd190bda6c98.roa (raw, json)
Hash identifier:          /Vw2D9VHbWDHzByxhsu8Uhr76/oBV6uWzJhKuaV38Po=
Subject key identifier:   8E:AF:67:1D:35:CB:E4:D5:0A:98:4B:E5:5A:C6:B1:F7:B3:EF:82:A9
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584EF181FCB4FC1A3BCA45CAC580
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/11fa8e1a-35b7-354e-8b62-fd190bda6c98.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        152.67.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:81:fc:b4:fc:1a:3b:ca:45:ca:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=7635ab30-b6b5-4bf7-af36-d3d66b9ad91b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:05:7b:df:97:7b:4e:58:ac:fe:20:3a:91:5d:
                    ec:30:bb:35:ad:4e:dc:51:42:31:7e:7a:18:2d:84:
                    95:86:01:e0:9b:b7:f1:7e:5c:1e:ab:ae:8a:8a:74:
                    7c:57:60:4c:56:d9:ae:dd:81:d9:92:67:60:15:d7:
                    1a:6f:99:79:dc:6d:ee:52:6f:3a:2f:57:03:d8:97:
                    31:33:80:14:06:f7:2f:bb:da:02:84:93:89:e7:a1:
                    2e:30:e1:f0:05:86:2e:14:32:6a:6e:0d:b6:4e:c0:
                    8a:95:bd:37:41:d2:c2:bf:b8:0c:3c:a5:70:c3:a4:
                    9e:b7:55:e3:4b:74:00:7a:95:17:39:46:a4:dc:db:
                    b3:83:07:74:d4:2b:41:41:92:c1:d4:6d:68:06:01:
                    1c:f8:b9:71:1c:67:b4:0f:e3:c5:95:2a:ca:db:c1:
                    7f:09:c2:7f:cd:1b:c8:a7:1f:f7:e3:2b:92:51:90:
                    64:d5:d9:46:f1:53:63:90:3d:11:63:dd:1e:56:04:
                    93:75:14:09:80:1e:00:d0:bb:b4:20:db:ca:0e:4c:
                    25:34:3b:3b:4c:ab:3a:f1:ac:bd:8a:62:0b:2c:9b:
                    99:3a:fb:6a:04:28:70:53:8c:c0:12:5c:aa:41:c2:
                    88:a6:97:e5:bb:4c:b4:43:c7:17:9b:92:8f:aa:29:
                    05:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AF:67:1D:35:CB:E4:D5:0A:98:4B:E5:5A:C6:B1:F7:B3:EF:82:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/11fa8e1a-35b7-354e-8b62-fd190bda6c98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.67.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:61:04:dc:f7:f1:79:5b:65:f9:e7:f3:1b:8b:ac:11:70:86:
         5b:43:b0:84:00:ad:29:12:75:a7:9b:ae:e9:73:28:5e:d2:ac:
         57:b5:92:b2:cf:b2:5c:8e:84:bf:70:69:07:2f:da:ff:ef:77:
         6f:8d:de:d0:64:4e:6f:26:c6:86:51:b0:ed:b1:a3:54:f9:a2:
         4d:72:f0:63:75:6f:b9:66:c8:e8:db:d6:7e:bf:b5:f0:c1:43:
         15:6f:4a:b6:0d:68:ff:44:83:35:42:61:5d:43:88:14:df:08:
         53:ef:6c:40:fd:29:c1:48:5a:b1:61:60:6a:62:b7:b7:82:46:
         92:66:e3:4d:81:ad:b6:f8:eb:d0:48:b0:5c:dc:0d:4b:d6:a2:
         c3:49:5e:59:4f:33:03:e0:36:77:2b:61:78:20:57:bd:fb:de:
         68:8e:1c:fd:09:84:da:50:f7:fd:c3:e2:45:8d:85:ad:2b:1b:
         4a:db:4b:11:0f:52:d6:14:e7:a5:09:e3:17:c2:3b:f0:6a:29:
         f7:c5:ec:b4:cd:37:c6:c2:08:3a:90:9c:d2:a7:37:91:f3:58:
         f3:64:26:3e:82:17:31:4b:79:9e:f3:59:6f:ef:8e:1b:e8:74:
         a3:7a:87:92:3e:b4:42:90:06:61:b7:21:7e:74:da:e9:70:3f:
         38:7b:80:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xgfy0/Bo7ykXKxYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk
NzYzNWFiMzAtYjZiNS00YmY3LWFmMzYtZDNkNjZiOWFkOTFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogV735d7Tlis/iA6kV3sMLs1rU7cUUIxfnoY
LYSVhgHgm7fxflweq66KinR8V2BMVtmu3YHZkmdgFdcab5l53G3uUm86L1cD2Jcx
M4AUBvcvu9oChJOJ56EuMOHwBYYuFDJqbg22TsCKlb03QdLCv7gMPKVww6Set1Xj
S3QAepUXOUak3Nuzgwd01CtBQZLB1G1oBgEc+LlxHGe0D+PFlSrK28F/CcJ/zRvI
px/34yuSUZBk1dlG8VNjkD0RY90eVgSTdRQJgB4A0Lu0INvKDkwlNDs7TKs68ay9
imILLJuZOvtqBChwU4zAElyqQcKIppflu0y0Q8cXm5KPqikF5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI6vZx01y+TVCphL5VrGsfez74KpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTFmYThlMWEtMzViNy0z
NTRlLThiNjItZmQxOTBiZGE2Yzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmEOAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJdhBNz38XlbZfnn8xuLrBFwhltDsIQArSkSdaebrulzKF7SrFe1krLP
slyOhL9waQcv2v/vd2+N3tBkTm8mxoZRsO2xo1T5ok1y8GN1b7lmyOjb1n6/tfDB
QxVvSrYNaP9EgzVCYV1DiBTfCFPvbED9KcFIWrFhYGpit7eCRpJm402Brbb469BI
sFzcDUvWosNJXllPMwPgNncrYXggV7373miOHP0JhNpQ9/3D4kWNha0rG0rbSxEP
UtYU56UJ4xfCO/BqKffF7LTNN8bCCDqQnNKnN5HzWPNkJj6CFzFLeZ7zWW/vjhvo
dKN6h5I+tEKQBmG3IX502ulwPzh7gFw=
-----END CERTIFICATE-----
Generated at Thu Aug 27 07:10:02 2026 by rpki-client