Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/5bcda128-65ee-3f94-9d49-1472c8093380.roa
File:                     5bcda128-65ee-3f94-9d49-1472c8093380.roa (raw, json)
Hash identifier:          Plhe+MdW7FDvNK1TJ4y74q1YYZ+A04HiyTUxihW86JI=
Subject key identifier:   B7:93:D2:13:B5:BC:1C:54:00:E6:1E:61:41:E2:67:5B:11:20:BA:17
Certificate issuer:       /CN=40b39b2a-cdef-4445-ace8-bb39d43cda5d
Certificate serial:       010D0C9F4328584E8DEF9EBEFDB4C5095FBD8180
Authority key identifier: DA:82:75:7B:6B:78:B8:76:D7:46:CA:D8:81:7A:BF:9A:0B:16:5B:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/5bcda128-65ee-3f94-9d49-1472c8093380.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     31776
IP address blocks:        204.8.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:9e:be:fd:b4:c5:09:5f:bd:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40b39b2a-cdef-4445-ace8-bb39d43cda5d
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=9467ed8a-9575-4870-9427-b8589e79cf06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dd:1e:8d:b9:72:4b:bb:8e:8d:42:48:27:2a:
                    57:94:39:22:37:f3:26:10:4a:a5:e9:b4:3d:00:03:
                    da:bf:29:1a:9c:01:76:5b:f5:7f:a8:b5:5a:f0:a0:
                    cb:cb:fb:3a:1f:4e:ef:30:fa:23:e0:49:13:a6:08:
                    e4:3e:14:49:2d:84:b4:07:ff:e1:25:37:3f:a7:39:
                    79:74:57:70:52:fc:3f:0b:48:07:7d:2b:66:b5:c5:
                    c4:ef:b5:ca:9b:3b:06:0b:55:18:e0:fc:eb:4b:8a:
                    12:f5:93:cd:0a:60:0a:c2:14:95:9f:57:81:43:be:
                    56:a8:f9:7e:6b:71:47:a9:93:a1:13:e2:0f:49:08:
                    85:6f:0f:a6:e7:99:96:d3:2e:da:78:36:19:7c:ae:
                    94:3f:22:c4:d3:18:c7:31:c2:37:da:58:cb:8b:37:
                    77:dc:2b:d4:42:b4:18:1f:1e:1b:f0:92:7b:40:a6:
                    36:fc:a7:6e:41:71:ea:6c:cd:17:84:4f:5d:72:02:
                    b0:fc:8f:38:c1:62:2a:1f:4c:f6:52:a6:4c:3d:c1:
                    2a:d6:27:21:97:db:70:34:4c:15:24:da:cf:fe:a1:
                    aa:40:9e:84:81:83:bb:2e:a6:e6:17:d2:76:3f:4c:
                    c5:e2:67:39:0e:89:76:4d:a8:85:0a:8a:4f:ea:be:
                    02:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:93:D2:13:B5:BC:1C:54:00:E6:1E:61:41:E2:67:5B:11:20:BA:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/5bcda128-65ee-3f94-9d49-1472c8093380.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d/40b39b2a-cdef-4445-ace8-bb39d43cda5d.crl

            X509v3 Authority Key Identifier:
                keyid:DA:82:75:7B:6B:78:B8:76:D7:46:CA:D8:81:7A:BF:9A:0B:16:5B:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40b39b2a-cdef-4445-ace8-bb39d43cda5d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:85:a6:03:8a:49:76:c1:60:ff:8d:5f:94:ef:e0:e2:e5:8c:
         99:b5:19:bb:57:85:b6:9e:a8:de:e1:50:20:2a:39:5e:ec:57:
         1a:3d:75:d1:87:bd:ce:96:16:e5:be:e0:81:ca:d2:a8:45:f9:
         51:27:0b:76:55:62:71:89:e5:b9:13:68:ac:8a:89:2b:e5:0f:
         dc:61:4f:7b:3d:f6:26:29:42:1c:b8:b0:d7:1a:d8:9e:e5:5e:
         bd:89:33:0c:38:72:7b:be:9f:14:2d:83:37:a9:4b:ba:f5:81:
         90:4a:e7:47:08:bf:78:be:a4:17:d5:bc:a8:6e:56:56:b3:a8:
         a3:bb:77:06:c8:1e:fd:78:ab:b1:df:31:f8:5c:02:f1:11:b2:
         8a:90:81:97:22:47:fa:68:59:13:99:ff:d2:d2:ad:10:cf:7f:
         fa:73:59:7e:e7:09:d0:c8:e7:06:a4:f7:ee:05:30:d4:bd:c0:
         74:f2:86:7d:56:e1:f9:40:8c:4d:23:91:89:e3:45:ce:b5:7e:
         60:a1:a1:c6:79:3e:1f:a2:86:01:d0:4f:0d:ae:80:fb:15:0f:
         38:e1:d7:36:17:74:e5:9c:91:c5:7e:1b:ba:e2:72:a5:22:7e:
         0e:41:7d:d0:5e:bb:9a:44:ce:90:cf:1d:a6:21:36:a2:c6:41:
         5a:4f:98:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N756+/bTFCV+9gYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDBiMzliMmEtY2RlZi00NDQ1LWFjZTgtYmIzOWQ0M2Nk
YTVkMB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk
OTQ2N2VkOGEtOTU3NS00ODcwLTk0MjctYjg1ODllNzljZjA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu90ejblyS7uOjUJIJypXlDkiN/MmEEql6bQ9
AAPavykanAF2W/V/qLVa8KDLy/s6H07vMPoj4EkTpgjkPhRJLYS0B//hJTc/pzl5
dFdwUvw/C0gHfStmtcXE77XKmzsGC1UY4PzrS4oS9ZPNCmAKwhSVn1eBQ75WqPl+
a3FHqZOhE+IPSQiFbw+m55mW0y7aeDYZfK6UPyLE0xjHMcI32ljLizd33CvUQrQY
Hx4b8JJ7QKY2/KduQXHqbM0XhE9dcgKw/I84wWIqH0z2UqZMPcEq1ichl9twNEwV
JNrP/qGqQJ6EgYO7LqbmF9J2P0zF4mc5Dol2TaiFCopP6r4CEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLeT0hO1vBxUAOYeYUHiZ1sRILoXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80MGIz
OWIyYS1jZGVmLTQ0NDUtYWNlOC1iYjM5ZDQzY2RhNWQvNWJjZGExMjgtNjVlZS0z
Zjk0LTlkNDktMTQ3MmM4MDkzMzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDBiMzliMmEtY2RlZi00NDQ1LWFj
ZTgtYmIzOWQ0M2NkYTVkLzQwYjM5YjJhLWNkZWYtNDQ0NS1hY2U4LWJiMzlkNDNj
ZGE1ZC5jcmwwHwYDVR0jBBgwFoAU2oJ1e2t4uHbXRsrYgXq/mgsWW2IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80MGIzOWIyYS1jZGVmLTQ0NDUtYWNlOC1iYjM5
ZDQzY2RhNWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAitMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEKFpgOKSXbBYP+NX5Tv4OLljJm1GbtXhbaeqN7hUCAqOV7sVxo9ddGH
vc6WFuW+4IHK0qhF+VEnC3ZVYnGJ5bkTaKyKiSvlD9xhT3s99iYpQhy4sNca2J7l
Xr2JMww4cnu+nxQtgzepS7r1gZBK50cIv3i+pBfVvKhuVlazqKO7dwbIHv14q7Hf
MfhcAvERsoqQgZciR/poWROZ/9LSrRDPf/pzWX7nCdDI5wak9+4FMNS9wHTyhn1W
4flAjE0jkYnjRc61fmChocZ5Ph+ihgHQTw2ugPsVDzjh1zYXdOWckcV+G7ricqUi
fg5BfdBeu5pEzpDPHaYhNqLGQVpPmF8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:43:03 2026 by rpki-client