Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7b42c63-8674-4049-9866-cebbac1945e1/62afcbaa-4001-36c8-afc3-a4c96c9e4c3d.roa
File:                     62afcbaa-4001-36c8-afc3-a4c96c9e4c3d.roa (raw, json)
Hash identifier:          MSZ3yF11eAclr40zMljsF/lk1BrUlhl0h2qh5NAhRoI=
Subject key identifier:   A4:B0:10:F3:7C:3D:35:AF:5E:17:1A:0B:85:F3:0C:59:BD:A1:07:41
Certificate issuer:       /CN=a7b42c63-8674-4049-9866-cebbac1945e1
Certificate serial:       010D0C9F4328584DC83045AE002093081ED46600
Authority key identifier: 7C:C5:4D:DC:14:72:D5:D5:C0:0B:60:C6:A5:F5:65:90:1C:8A:E3:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7b42c63-8674-4049-9866-cebbac1945e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7b42c63-8674-4049-9866-cebbac1945e1/62afcbaa-4001-36c8-afc3-a4c96c9e4c3d.roa
Signing time:             Sun 10 May 2026 01:00:24 +0000
ROA not before:           Sun 10 May 2026 01:00:24 +0000
ROA not after:            Sat 08 Aug 2026 01:00:24 +0000
asID:                     394040
IP address blocks:        204.126.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7b42c63-8674-4049-9866-cebbac1945e1/a7b42c63-8674-4049-9866-cebbac1945e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7b42c63-8674-4049-9866-cebbac1945e1/a7b42c63-8674-4049-9866-cebbac1945e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7b42c63-8674-4049-9866-cebbac1945e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c8:30:45:ae:00:20:93:08:1e:d4:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7b42c63-8674-4049-9866-cebbac1945e1
        Validity
            Not Before: May 10 01:00:24 2026 GMT
            Not After : Aug  8 01:00:24 2026 GMT
        Subject: CN=41d17ced-9d3a-4059-95ca-174c24f544ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ae:fb:6f:15:47:15:82:40:69:ed:ee:25:2f:
                    af:eb:da:93:22:9e:e3:67:f7:40:4f:a8:49:c4:ab:
                    07:a0:59:18:86:28:3c:a6:9c:44:24:0c:01:cc:84:
                    9b:21:39:e7:2b:39:5d:fb:ab:81:8a:10:d7:b6:89:
                    20:bb:c4:b9:21:4e:78:2d:41:54:bf:60:08:e9:7c:
                    90:bd:72:d4:37:cd:46:e5:f7:9e:25:c5:c3:12:55:
                    84:bb:78:fd:b0:e0:0e:b3:89:d9:71:d2:61:b7:cf:
                    05:42:bf:b4:4c:36:66:92:30:54:63:eb:03:ca:ab:
                    87:d3:0c:d6:04:84:f8:2e:4e:fa:af:fa:72:27:23:
                    1a:99:6d:07:d5:41:88:40:23:2e:65:5e:82:02:ac:
                    5c:d5:b9:26:6e:23:39:32:b9:b4:c7:90:7f:57:1b:
                    dd:76:f5:00:0a:e4:9a:3e:82:2f:9b:20:4c:65:ef:
                    0b:ed:d9:29:f6:78:2d:bb:92:00:2c:26:ec:28:fe:
                    c0:d8:0c:88:8a:71:86:33:8d:b9:ab:45:07:59:c6:
                    f2:c0:24:72:03:3d:87:55:2c:63:b2:cb:6f:64:e7:
                    e2:5a:bd:9c:98:16:ff:4e:29:fd:45:30:4a:93:3e:
                    14:e8:f0:5c:73:38:f6:d7:e0:22:f8:32:ca:67:a4:
                    08:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B0:10:F3:7C:3D:35:AF:5E:17:1A:0B:85:F3:0C:59:BD:A1:07:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7b42c63-8674-4049-9866-cebbac1945e1/62afcbaa-4001-36c8-afc3-a4c96c9e4c3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7b42c63-8674-4049-9866-cebbac1945e1/a7b42c63-8674-4049-9866-cebbac1945e1.crl

            X509v3 Authority Key Identifier:
                keyid:7C:C5:4D:DC:14:72:D5:D5:C0:0B:60:C6:A5:F5:65:90:1C:8A:E3:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7b42c63-8674-4049-9866-cebbac1945e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.126.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:e8:06:b5:cb:17:b1:2a:ab:26:f7:ae:ef:10:b8:0f:49:00:
         89:bc:38:07:73:21:a4:03:ff:40:ae:93:36:1d:e3:92:21:a7:
         a5:e0:34:50:80:3e:8c:61:aa:fb:3f:8b:1b:e2:a5:42:bd:b0:
         30:b6:d0:c6:31:b0:05:5a:af:8e:90:f0:34:0b:bf:da:2f:3b:
         2d:0d:4f:33:12:f0:cd:88:e2:e7:d7:3c:62:71:f3:ca:d3:7e:
         c3:3c:e5:3f:08:31:c6:5c:a5:78:bc:2d:33:76:7a:96:00:18:
         cd:90:4d:01:4b:e9:fb:b8:d4:bb:13:83:84:a5:7f:d1:d7:9b:
         9a:68:a9:d6:d0:d0:22:52:7e:71:f4:18:2d:5c:f6:0e:3a:86:
         69:b7:0b:f4:e8:1a:2d:72:c4:b0:ee:06:e0:dd:52:46:94:e0:
         c8:1c:25:89:f6:a7:3e:a1:37:4e:5c:3f:39:3f:1a:86:21:8e:
         17:ba:7f:ea:0b:b4:44:f0:ed:81:c9:dc:97:fb:d8:8e:e9:11:
         7f:c2:56:10:ee:96:68:9d:fc:b5:1e:40:0e:63:d8:96:9a:85:
         8a:1a:98:60:3c:ea:d8:9d:75:8d:58:c2:cb:ce:2e:24:87:29:
         7b:ab:b2:7e:67:28:a7:86:bb:60:99:07:16:32:67:22:b5:92:
         f6:ba:0e:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3IMEWuACCTCB7UZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTdiNDJjNjMtODY3NC00MDQ5LTk4NjYtY2ViYmFjMTk0
NWUxMB4XDTI2MDUxMDAxMDAyNFoXDTI2MDgwODAxMDAyNFowLzEtMCsGA1UEAxMk
NDFkMTdjZWQtOWQzYS00MDU5LTk1Y2EtMTc0YzI0ZjU0NGVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq77bxVHFYJAae3uJS+v69qTIp7jZ/dAT6hJ
xKsHoFkYhig8ppxEJAwBzISbITnnKzld+6uBihDXtokgu8S5IU54LUFUv2AI6XyQ
vXLUN81G5feeJcXDElWEu3j9sOAOs4nZcdJht88FQr+0TDZmkjBUY+sDyquH0wzW
BIT4Lk76r/pyJyMamW0H1UGIQCMuZV6CAqxc1bkmbiM5Mrm0x5B/VxvddvUACuSa
PoIvmyBMZe8L7dkp9ngtu5IALCbsKP7A2AyIinGGM425q0UHWcbywCRyAz2HVSxj
sstvZOfiWr2cmBb/Tin9RTBKkz4U6PBcczj21+Ai+DLKZ6QIrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKSwEPN8PTWvXhcaC4XzDFm9oQdBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hN2I0
MmM2My04Njc0LTQwNDktOTg2Ni1jZWJiYWMxOTQ1ZTEvNjJhZmNiYWEtNDAwMS0z
NmM4LWFmYzMtYTRjOTZjOWU0YzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTdiNDJjNjMtODY3NC00MDQ5LTk4
NjYtY2ViYmFjMTk0NWUxL2E3YjQyYzYzLTg2NzQtNDA0OS05ODY2LWNlYmJhYzE5
NDVlMS5jcmwwHwYDVR0jBBgwFoAUfMVN3BRy1dXAC2DGpfVlkByK4yswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hN2I0MmM2My04Njc0LTQwNDktOTg2Ni1jZWJi
YWMxOTQ1ZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzH4WMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAILoBrXLF7Eqqyb3ru8QuA9JAIm8OAdzIaQD/0CukzYd45Ihp6XgNFCA
Poxhqvs/ixvipUK9sDC20MYxsAVar46Q8DQLv9ovOy0NTzMS8M2I4ufXPGJx88rT
fsM85T8IMcZcpXi8LTN2epYAGM2QTQFL6fu41LsTg4Slf9HXm5poqdbQ0CJSfnH0
GC1c9g46hmm3C/ToGi1yxLDuBuDdUkaU4MgcJYn2pz6hN05cPzk/GoYhjhe6f+oL
tETw7YHJ3Jf72I7pEX/CVhDulmid/LUeQA5j2JaahYoamGA86tiddY1YwsvOLiSH
KXursn5nKKeGu2CZBxYyZyK1kva6DjQ=
-----END CERTIFICATE-----
Generated at Wed May 13 17:22:02 2026 by rpki-client