Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae/d26d690a-1fe5-3d3d-a3f3-fb9792684635.roa
File:                     d26d690a-1fe5-3d3d-a3f3-fb9792684635.roa (raw, json)
Hash identifier:          z7fm0gmlWOk+6FtUo6ieGnGgCaV/BF0ShNkfS7mV91s=
Subject key identifier:   A7:C4:85:5E:06:3C:EB:47:38:B2:89:99:FB:13:65:F4:B0:59:77:1D
Certificate issuer:       /CN=8cd8b5a8-2c0e-4d74-ac62-73293f8780ae
Certificate serial:       010D0C9F4328584E94EA86C6655658B3086CAE60
Authority key identifier: FB:1D:9E:DB:74:4B:13:B7:D6:F5:66:25:0D:85:09:12:8D:22:70:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae/d26d690a-1fe5-3d3d-a3f3-fb9792684635.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     394382
IP address blocks:        192.139.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:86:c6:65:56:58:b3:08:6c:ae:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cd8b5a8-2c0e-4d74-ac62-73293f8780ae
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=27643aab-29e7-49a1-b1ed-403ec8155bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:16:a2:cf:16:de:ce:e1:02:03:52:a5:4c:a3:
                    07:60:74:0e:7a:a4:de:bc:18:0d:16:ed:2b:2e:a2:
                    db:cb:a1:58:79:ae:ea:a3:7d:25:3d:2e:ba:c6:f0:
                    d2:c7:e8:05:b4:78:10:26:8b:e0:25:55:65:f7:ec:
                    3f:72:d2:dd:cc:a1:c6:58:c2:b3:0c:d0:a5:15:4f:
                    d4:0f:e8:04:49:e8:06:3c:c4:f0:1f:06:49:cc:c6:
                    d5:b0:27:c0:c3:83:fd:31:84:bd:6e:ad:a8:a6:9a:
                    eb:cf:b2:a1:9a:36:eb:da:21:d8:90:54:77:fa:0c:
                    26:ce:93:13:24:a0:5f:c8:7b:a4:b9:90:25:e6:a9:
                    40:c0:a3:d2:d9:72:4f:7d:dc:c9:6e:ce:fe:ac:9c:
                    d2:87:67:e2:8f:06:06:0a:75:1e:74:b9:aa:01:04:
                    83:a5:8f:55:c2:e3:5f:b8:9c:b4:d1:4c:68:62:09:
                    bc:98:73:ae:fa:4e:41:e8:a3:09:c0:47:a4:f1:51:
                    d0:7d:ec:1b:fb:fd:ec:23:78:90:76:fb:9b:4f:ac:
                    71:d3:a9:5c:27:d9:f2:12:b1:9e:b4:7e:7d:56:9a:
                    58:66:05:2e:25:4a:17:42:8d:7f:23:35:59:f4:2b:
                    25:f8:7b:81:13:db:2f:f7:14:6b:78:68:6d:0d:36:
                    9c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C4:85:5E:06:3C:EB:47:38:B2:89:99:FB:13:65:F4:B0:59:77:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae/d26d690a-1fe5-3d3d-a3f3-fb9792684635.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae.crl

            X509v3 Authority Key Identifier:
                keyid:FB:1D:9E:DB:74:4B:13:B7:D6:F5:66:25:0D:85:09:12:8D:22:70:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cd8b5a8-2c0e-4d74-ac62-73293f8780ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.139.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:52:80:bb:15:7d:bb:f2:9f:41:c2:19:9f:b1:9f:34:4a:99:
         07:43:6b:03:af:fd:d1:e4:08:dd:7b:17:7f:8d:02:a4:5e:98:
         d0:31:a9:c4:51:16:16:17:af:ba:21:ba:a8:13:d5:51:7b:64:
         be:07:43:31:35:ba:33:89:3c:cf:c4:ed:e3:bd:7f:9e:09:94:
         58:19:fe:95:5c:4b:e7:6c:19:d9:b9:fb:ba:0d:17:08:4b:37:
         ce:a5:53:b9:33:77:6b:a4:6f:99:68:c1:e3:3c:42:cd:bc:fc:
         18:75:0f:7e:60:a1:33:57:2d:8a:2a:c4:f3:00:b1:20:ff:e2:
         8c:59:bd:cb:5c:95:02:62:19:36:30:c7:f0:2d:b3:18:cf:01:
         b8:5f:0a:24:35:cc:9d:43:1d:bf:63:79:3e:17:40:97:18:12:
         b5:89:18:f3:73:83:4d:6d:b9:f3:72:e4:d3:06:65:fa:44:91:
         9b:5c:a0:14:68:90:e8:ca:59:8f:d2:0f:fe:dd:bf:fd:e1:0e:
         32:63:84:1a:a1:07:29:a6:ff:b1:25:27:8c:85:51:73:10:0b:
         d5:16:d6:2f:be:59:12:cf:e3:84:9a:ae:e1:8c:23:40:30:34:
         6f:97:de:db:2b:a8:32:20:73:5f:54:c5:fd:ce:92:25:cf:8e:
         2c:e2:55:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6U6obGZVZYswhsrmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGNkOGI1YTgtMmMwZS00ZDc0LWFjNjItNzMyOTNmODc4
MGFlMB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk
Mjc2NDNhYWItMjllNy00OWExLWIxZWQtNDAzZWM4MTU1YmVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhaizxbezuECA1KlTKMHYHQOeqTevBgNFu0r
LqLby6FYea7qo30lPS66xvDSx+gFtHgQJovgJVVl9+w/ctLdzKHGWMKzDNClFU/U
D+gESegGPMTwHwZJzMbVsCfAw4P9MYS9bq2opprrz7Khmjbr2iHYkFR3+gwmzpMT
JKBfyHukuZAl5qlAwKPS2XJPfdzJbs7+rJzSh2fijwYGCnUedLmqAQSDpY9VwuNf
uJy00UxoYgm8mHOu+k5B6KMJwEek8VHQfewb+/3sI3iQdvubT6xx06lcJ9nyErGe
tH59VppYZgUuJUoXQo1/IzVZ9Csl+HuBE9sv9xRreGhtDTacawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKfEhV4GPOtHOLKJmfsTZfSwWXcdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84Y2Q4
YjVhOC0yYzBlLTRkNzQtYWM2Mi03MzI5M2Y4NzgwYWUvZDI2ZDY5MGEtMWZlNS0z
ZDNkLWEzZjMtZmI5NzkyNjg0NjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGNkOGI1YTgtMmMwZS00ZDc0LWFj
NjItNzMyOTNmODc4MGFlLzhjZDhiNWE4LTJjMGUtNGQ3NC1hYzYyLTczMjkzZjg3
ODBhZS5jcmwwHwYDVR0jBBgwFoAU+x2e23RLE7fW9WYlDYUJEo0icDAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy84Y2Q4YjVhOC0yYzBlLTRkNzQtYWM2Mi03MzI5
M2Y4NzgwYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIsFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAChSgLsVfbvyn0HCGZ+xnzRKmQdDawOv/dHkCN17F3+NAqRemNAxqcRR
FhYXr7ohuqgT1VF7ZL4HQzE1ujOJPM/E7eO9f54JlFgZ/pVcS+dsGdm5+7oNFwhL
N86lU7kzd2ukb5loweM8Qs28/Bh1D35goTNXLYoqxPMAsSD/4oxZvctclQJiGTYw
x/AtsxjPAbhfCiQ1zJ1DHb9jeT4XQJcYErWJGPNzg01tufNy5NMGZfpEkZtcoBRo
kOjKWY/SD/7dv/3hDjJjhBqhBymm/7ElJ4yFUXMQC9UW1i++WRLP44SaruGMI0Aw
NG+X3tsrqDIgc19Uxf3OkiXPjiziVRQ=
-----END CERTIFICATE-----
Generated at Sat Jul 25 02:54:04 2026 by rpki-client