Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/d31a2477-81a5-3abd-a7f1-3dac368dddf8.roa
File:                     d31a2477-81a5-3abd-a7f1-3dac368dddf8.roa (raw, json)
Hash identifier:          /4sNLSB66t0gjA3pjPA9gT3myMpQiz4yvtKrtJZ+Zys=
Subject key identifier:   B2:B5:9F:68:5B:85:8D:55:BF:AC:0B:ED:33:FC:2C:BE:2B:34:31:65
Certificate issuer:       /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial:       010D0C9F4328584F37C745ED3CDFE6B829C18F60
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/d31a2477-81a5-3abd-a7f1-3dac368dddf8.roa
Signing time:             Fri 18 Sep 2026 17:06:25 +0000
ROA not before:           Fri 18 Sep 2026 17:06:25 +0000
ROA not after:            Thu 17 Dec 2026 18:06:25 +0000
asID:                     54641
IP address blocks:        144.208.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:c7:45:ed:3c:df:e6:b8:29:c1:8f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Validity
            Not Before: Sep 18 17:06:25 2026 GMT
            Not After : Dec 17 18:06:25 2026 GMT
        Subject: CN=e503591a-b509-4205-998b-31feb462f7f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:67:1f:1e:1f:aa:40:5d:57:e6:01:d9:95:91:
                    9b:b6:a6:3d:b3:71:54:1a:d1:04:ae:4f:7b:75:30:
                    d0:ef:68:79:5b:87:0d:0d:84:4d:14:d7:c0:be:4b:
                    c0:2c:2d:35:25:9a:53:e1:c2:90:c9:f2:70:7f:3d:
                    0e:38:b6:63:fa:c3:4d:d7:f3:43:21:26:50:cf:89:
                    3f:42:3a:26:b7:d1:84:0d:50:89:69:24:23:82:a8:
                    92:e5:ce:bd:fa:07:86:3b:09:32:89:72:b8:38:d7:
                    e9:68:fa:f7:ae:32:9b:73:2b:74:58:67:b4:e7:fd:
                    b2:bc:90:32:98:4a:45:28:f4:7f:32:df:ef:5c:44:
                    cf:27:4e:aa:f0:4e:d4:5a:8e:b8:86:3a:46:b8:f7:
                    32:68:75:fc:33:32:9b:8a:8f:bb:c4:55:b5:7a:55:
                    42:b7:f6:05:34:df:1e:9b:b5:7b:04:ff:4e:18:6f:
                    cd:a0:79:30:e1:d3:43:ec:a5:e8:cd:d7:df:d5:57:
                    0d:3c:6b:0f:1c:b7:ae:fd:c8:b6:c8:85:9d:a6:ed:
                    5e:04:26:1b:c6:82:53:90:cd:30:f7:77:90:b9:eb:
                    6f:c8:6a:85:32:69:ca:cf:d4:eb:e3:1d:75:c3:53:
                    f6:54:30:89:b1:d9:6f:fc:ed:b5:34:ba:ca:6c:48:
                    cf:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B5:9F:68:5B:85:8D:55:BF:AC:0B:ED:33:FC:2C:BE:2B:34:31:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/d31a2477-81a5-3abd-a7f1-3dac368dddf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.208.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:53:46:5a:ba:d6:7b:ec:76:2d:55:39:38:7b:c2:5c:f2:07:
         f6:6b:5c:cf:85:fe:e5:ec:33:74:47:d9:df:e9:91:bd:8a:52:
         5f:b0:cc:e7:74:7d:c5:88:38:8c:34:00:cb:c0:a3:64:83:31:
         1c:94:15:f0:d1:37:dc:08:85:0c:f8:4f:57:8d:b9:8a:7c:7c:
         82:ca:9b:03:81:20:c0:c2:12:79:ca:b6:38:88:e9:77:d8:de:
         0b:7f:e9:54:67:f4:39:f4:71:cc:24:f9:77:f6:56:74:57:e7:
         2e:81:dd:11:82:01:29:e3:3d:d9:65:83:46:df:03:2c:cb:28:
         b3:fe:47:26:2d:44:f2:30:99:57:b3:c2:1d:e0:d2:36:15:e5:
         8e:05:40:dc:32:49:4e:e6:2f:77:6a:b4:81:ef:2d:2c:fe:29:
         69:6f:91:92:2d:fc:9c:bb:74:e2:4e:a6:e8:c1:1a:c7:b5:73:
         60:f5:45:d8:48:05:00:d8:dd:39:05:98:80:b8:04:7a:ae:48:
         15:23:bf:bd:e0:5f:77:9e:d4:ae:6f:52:b0:63:c6:fe:ec:99:
         cc:4b:91:ea:d3:ba:c2:84:51:2e:e8:cc:63:10:e4:60:51:61:
         01:6c:4b:a1:ed:4e:14:01:b3:90:de:32:e4:e8:ec:08:ef:d2:
         ee:0e:a2:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83x0XtPN/muCnBj2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY3MTA2MjItN2VjNC00YmIyLTllODctMjdjNWU1OTY0
ZmFlMB4XDTI2MDkxODE3MDYyNVoXDTI2MTIxNzE4MDYyNVowLzEtMCsGA1UEAxMk
ZTUwMzU5MWEtYjUwOS00MjA1LTk5OGItMzFmZWI0NjJmN2Y4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGcfHh+qQF1X5gHZlZGbtqY9s3FUGtEErk97
dTDQ72h5W4cNDYRNFNfAvkvALC01JZpT4cKQyfJwfz0OOLZj+sNN1/NDISZQz4k/
Qjomt9GEDVCJaSQjgqiS5c69+geGOwkyiXK4ONfpaPr3rjKbcyt0WGe05/2yvJAy
mEpFKPR/Mt/vXETPJ06q8E7UWo64hjpGuPcyaHX8MzKbio+7xFW1elVCt/YFNN8e
m7V7BP9OGG/NoHkw4dND7KXozdff1VcNPGsPHLeu/ci2yIWdpu1eBCYbxoJTkM0w
93eQuetvyGqFMmnKz9Tr4x11w1P2VDCJsdlv/O21NLrKbEjPEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLK1n2hbhY1Vv6wL7TP8LL4rNDFlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcx
MDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1ZTU5NjRmYWUvZDMxYTI0NzctODFhNS0z
YWJkLWE3ZjEtM2RhYzM2OGRkZGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWY3MTA2MjItN2VjNC00YmIyLTll
ODctMjdjNWU1OTY0ZmFlL2VmNzEwNjIyLTdlYzQtNGJiMi05ZTg3LTI3YzVlNTk2
NGZhZS5jcmwwHwYDVR0jBBgwFoAUi0oOeoRIPRQYvawxB5YPaCph7dcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZjcxMDYyMi03ZWM0LTRiYjItOWU4Ny0yN2M1
ZTU5NjRmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkNBMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK9TRlq61nvsdi1VOTh7wlzyB/ZrXM+F/uXsM3RH2d/pkb2KUl+wzOd0
fcWIOIw0AMvAo2SDMRyUFfDRN9wIhQz4T1eNuYp8fILKmwOBIMDCEnnKtjiI6XfY
3gt/6VRn9Dn0ccwk+Xf2VnRX5y6B3RGCASnjPdllg0bfAyzLKLP+RyYtRPIwmVez
wh3g0jYV5Y4FQNwySU7mL3dqtIHvLSz+KWlvkZIt/Jy7dOJOpujBGse1c2D1RdhI
BQDY3TkFmIC4BHquSBUjv73gX3ee1K5vUrBjxv7smcxLkerTusKEUS7ozGMQ5GBR
YQFsS6HtThQBs5DeMuTo7Ajv0u4Ooi0=
-----END CERTIFICATE-----
Generated at Mon Sep 28 00:05:36 2026 by rpki-client