Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/25b77b27-f3d3-3b1c-b67f-cfade2e87e68.roa
File:                     25b77b27-f3d3-3b1c-b67f-cfade2e87e68.roa (raw, json)
Hash identifier:          PaKkgcImMEnCLEtTT7OJPmPCxFPVX13SRbXIWDkTGIM=
Subject key identifier:   D6:08:4B:FE:84:19:D2:7E:46:BC:FF:7E:0D:27:30:E9:A0:16:BA:2F
Certificate issuer:       /CN=7d6bea32-db4c-4326-93a0-713364b8aa44
Certificate serial:       010D0C9F4328584E779A21725818F242546A7D00
Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/25b77b27-f3d3-3b1c-b67f-cfade2e87e68.roa
Signing time:             Sat 11 Jul 2026 21:00:11 +0000
ROA not before:           Sat 11 Jul 2026 21:00:11 +0000
ROA not after:            Fri 09 Oct 2026 21:00:11 +0000
asID:                     22351
IP address blocks:        64.88.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:77:9a:21:72:58:18:f2:42:54:6a:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44
        Validity
            Not Before: Jul 11 21:00:11 2026 GMT
            Not After : Oct  9 21:00:11 2026 GMT
        Subject: CN=c8905037-5a7a-4292-bd62-fa38f0c16407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c2:70:0a:27:a2:1c:87:09:f7:8b:e3:f2:5b:
                    e4:ed:41:3d:69:cf:03:48:13:4f:0e:d7:2e:1a:72:
                    5a:dd:df:9b:ec:d8:e6:2f:9d:9c:35:78:f8:81:a8:
                    98:9d:35:4c:b7:10:c9:46:de:f0:43:53:b9:ef:02:
                    04:40:0e:42:d5:e8:7a:16:9d:8c:86:71:a4:53:40:
                    d1:3c:51:38:8e:6f:0d:56:9e:5b:33:7e:19:bf:02:
                    34:c6:6b:68:24:65:2c:3d:d0:d6:15:cc:77:7a:91:
                    fd:13:cd:d3:67:5e:17:88:a7:34:ec:79:7f:96:f9:
                    3d:43:30:5d:30:f9:85:01:7d:24:a8:ea:c2:55:8e:
                    ea:1d:ce:17:31:7e:96:27:c4:63:01:d8:40:43:6e:
                    c4:3b:d5:74:45:92:ee:21:30:88:1e:5b:ef:97:a9:
                    a9:9f:8a:61:0d:f4:e1:8f:70:4d:5d:ec:31:93:5d:
                    9b:6f:7c:2b:2b:c0:27:d7:f3:ec:c6:a1:8e:4b:9b:
                    b7:a0:0a:8e:91:f6:e4:4d:c5:74:28:fe:8a:0e:86:
                    6a:bd:06:a1:7c:0a:4a:e4:fd:43:fe:e6:ad:a4:18:
                    27:81:00:be:d1:13:20:02:a9:05:c2:b1:c5:35:21:
                    c1:db:24:02:64:56:03:10:da:32:c5:1f:00:f2:56:
                    64:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:08:4B:FE:84:19:D2:7E:46:BC:FF:7E:0D:27:30:E9:A0:16:BA:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/25b77b27-f3d3-3b1c-b67f-cfade2e87e68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl

            X509v3 Authority Key Identifier:
                keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.88.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:51:f0:b3:89:60:18:1a:85:7d:00:16:d9:a5:d0:cf:95:2d:
         18:aa:1b:3d:76:7e:f4:b0:22:07:47:4e:23:50:1c:0c:bb:85:
         d7:3c:54:fa:bb:66:df:cf:46:12:e5:f0:a7:ed:2c:36:c5:ea:
         bf:fb:c9:3e:78:9f:49:84:81:ec:b4:cd:60:80:fd:f9:10:ba:
         78:ff:e9:9c:5a:f6:81:c8:5c:b3:a7:e5:52:67:41:39:a4:85:
         c5:41:35:89:dd:05:e4:0a:01:1a:12:cc:8d:0b:00:2a:ee:53:
         2f:b4:60:5c:4a:5a:03:0e:a4:19:1c:1a:b9:9d:64:18:36:d3:
         fc:93:b4:8f:8c:3c:0b:a9:1a:94:51:7e:21:f4:7e:7a:b0:62:
         fe:b8:cb:e0:d5:e5:03:16:be:08:c0:29:b4:94:ee:9f:29:a9:
         08:08:9e:bc:9a:c4:54:cb:c4:7d:ba:4e:d5:ba:ad:f7:d4:e2:
         e2:89:6f:97:b5:2e:5e:8e:a8:e4:d4:48:71:53:1e:70:74:a9:
         7d:e0:31:f8:3b:bd:c6:30:1c:f2:f9:47:01:7c:9e:cb:2c:4c:
         d8:b6:b0:5e:3e:78:24:bc:4e:78:bc:59:bc:a4:3c:91:11:3c:
         49:4d:81:8b:f6:68:32:9b:c1:5b:56:4b:c7:e5:28:08:14:70:
         d6:07:9c:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE53miFyWBjyQlRqfQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2Q2YmVhMzItZGI0Yy00MzI2LTkzYTAtNzEzMzY0Yjhh
YTQ0MB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk
Yzg5MDUwMzctNWE3YS00MjkyLWJkNjItZmEzOGYwYzE2NDA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcJwCieiHIcJ94vj8lvk7UE9ac8DSBNPDtcu
GnJa3d+b7NjmL52cNXj4gaiYnTVMtxDJRt7wQ1O57wIEQA5C1eh6Fp2MhnGkU0DR
PFE4jm8NVp5bM34ZvwI0xmtoJGUsPdDWFcx3epH9E83TZ14XiKc07Hl/lvk9QzBd
MPmFAX0kqOrCVY7qHc4XMX6WJ8RjAdhAQ27EO9V0RZLuITCIHlvvl6mpn4phDfTh
j3BNXewxk12bb3wrK8An1/PsxqGOS5u3oAqOkfbkTcV0KP6KDoZqvQahfApK5P1D
/uatpBgngQC+0RMgAqkFwrHFNSHB2yQCZFYDENoyxR8A8lZktQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNYIS/6EGdJ+Rrz/fg0nMOmgFrovMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83ZDZi
ZWEzMi1kYjRjLTQzMjYtOTNhMC03MTMzNjRiOGFhNDQvMjViNzdiMjctZjNkMy0z
YjFjLWI2N2YtY2ZhZGUyZTg3ZTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvN2Q2YmVhMzItZGI0Yy00MzI2LTkz
YTAtNzEzMzY0YjhhYTQ0LzdkNmJlYTMyLWRiNGMtNDMyNi05M2EwLTcxMzM2NGI4
YWE0NC5jcmwwHwYDVR0jBBgwFoAU13vCe9o3Nfdsvxl4cDowOSWIciMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83ZDZiZWEzMi1kYjRjLTQzMjYtOTNhMC03MTMz
NjRiOGFhNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFjiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABVR8LOJYBgahX0AFtml0M+VLRiqGz12fvSwIgdHTiNQHAy7hdc8VPq7
Zt/PRhLl8KftLDbF6r/7yT54n0mEgey0zWCA/fkQunj/6Zxa9oHIXLOn5VJnQTmk
hcVBNYndBeQKARoSzI0LACruUy+0YFxKWgMOpBkcGrmdZBg20/yTtI+MPAupGpRR
fiH0fnqwYv64y+DV5QMWvgjAKbSU7p8pqQgInryaxFTLxH26TtW6rffU4uKJb5e1
Ll6OqOTUSHFTHnB0qX3gMfg7vcYwHPL5RwF8nsssTNi2sF4+eCS8Tni8WbykPJER
PElNgYv2aDKbwVtWS8flKAgUcNYHnN0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:28:46 2026 by rpki-client