Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/42bb47f2-d589-35db-b4f0-830e783d4727.roa
File:                     42bb47f2-d589-35db-b4f0-830e783d4727.roa (raw, json)
Hash identifier:          H383SYWnzuMsGnsMTraFiFAZQNWRbIJNWGrYsmKFYLI=
Subject key identifier:   50:4B:3F:EF:99:A7:EE:7A:7F:26:64:B0:E9:0B:DA:C7:D2:C5:F6:40
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584E3B9487294F7F27E9AC0F9780
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/42bb47f2-d589-35db-b4f0-830e783d4727.roa
Signing time:             Sat 20 Jun 2026 09:00:13 +0000
ROA not before:           Sat 20 Jun 2026 09:00:13 +0000
ROA not after:            Fri 18 Sep 2026 09:00:13 +0000
asID:                     22616
IP address blocks:        205.220.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3b:94:87:29:4f:7f:27:e9:ac:0f:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jun 20 09:00:13 2026 GMT
            Not After : Sep 18 09:00:13 2026 GMT
        Subject: CN=7ce212e7-6023-4052-9140-68035e4b516f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a4:97:f1:b7:ff:80:4f:17:03:25:12:ba:00:
                    0f:e9:a0:22:34:1e:8e:84:ef:cf:ab:d2:a7:29:bd:
                    90:10:3f:a9:fa:56:97:07:dd:d2:4b:2b:f1:1b:3c:
                    77:11:96:f9:28:17:d9:cc:18:0e:7b:1a:72:f4:0e:
                    73:da:27:1c:4f:3a:60:92:c4:ab:aa:76:4f:a5:89:
                    39:5e:05:c6:62:a6:db:a7:f6:ac:3b:f1:3d:4d:89:
                    d2:57:c4:9b:a3:75:2e:69:ce:f6:9c:bb:03:5d:51:
                    da:be:96:b6:f9:83:91:33:a5:b7:2b:2d:c1:c2:97:
                    5a:7c:c4:74:cd:df:72:cd:d6:0f:cd:de:6c:5e:d7:
                    1c:73:41:76:a5:a6:ba:a4:47:2f:35:69:87:f3:11:
                    0c:d9:85:61:18:31:cd:a3:c9:20:7c:44:d7:ec:a7:
                    84:d4:58:12:26:4a:dc:cb:ff:19:56:64:d5:d6:99:
                    01:73:bb:86:6c:62:ea:3c:3f:49:4e:99:d5:f1:c6:
                    85:33:67:6e:f1:b3:7f:28:57:83:bb:d0:2f:fb:87:
                    09:f7:bf:a5:d4:8c:36:d5:18:2b:0e:3c:dd:92:e0:
                    d9:23:87:c4:e1:56:58:cc:3c:54:14:09:03:db:b1:
                    65:c3:e6:24:5c:cc:ea:d8:46:64:66:32:03:2e:cb:
                    f7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4B:3F:EF:99:A7:EE:7A:7F:26:64:B0:E9:0B:DA:C7:D2:C5:F6:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/42bb47f2-d589-35db-b4f0-830e783d4727.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.220.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:b5:ab:8c:79:91:ef:b7:c4:dd:43:14:d0:56:16:ec:2e:bc:
         9e:a9:ec:59:5a:3a:76:cf:54:3a:79:3c:16:b8:19:d0:2e:38:
         12:92:e7:db:5e:d5:05:80:e7:b6:6c:fb:a4:17:05:6e:91:bf:
         aa:29:87:ce:0c:6c:3d:c8:27:8b:36:96:a0:b4:41:ae:10:12:
         bd:36:36:72:52:41:9d:6a:d5:b5:25:a0:85:a3:4c:72:b0:f7:
         10:6c:09:3b:18:32:9d:d2:77:f8:c4:6b:10:76:d2:59:3f:1e:
         4b:d6:4d:71:61:5a:2d:d0:51:17:4a:93:60:01:a7:b1:9c:42:
         52:f3:32:b7:7c:60:c6:77:ff:61:69:08:99:cc:e2:bc:11:e4:
         bb:3c:d7:d6:17:10:d6:85:a3:55:4c:8b:ea:57:9a:6d:dc:31:
         44:e6:87:52:26:b6:6f:28:c9:37:d5:3b:31:ce:34:c7:a8:86:
         c2:46:c4:af:29:14:a5:29:62:b1:fc:d3:88:96:9b:89:44:17:
         96:f0:e2:b5:e8:b0:ab:ca:99:81:40:84:c6:b7:02:bc:87:31:
         44:de:71:46:59:66:94:6b:e6:f5:a2:5d:c3:f3:cf:76:74:7e:
         76:72:1d:30:78:a7:07:bf:52:20:3c:80:59:5c:1e:8b:70:73:
         17:42:1e:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE47lIcpT38n6awPl4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI2MDYyMDA5MDAxM1oXDTI2MDkxODA5MDAxM1owLzEtMCsGA1UEAxMk
N2NlMjEyZTctNjAyMy00MDUyLTkxNDAtNjgwMzVlNGI1MTZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqSX8bf/gE8XAyUSugAP6aAiNB6OhO/Pq9Kn
Kb2QED+p+laXB93SSyvxGzx3EZb5KBfZzBgOexpy9A5z2iccTzpgksSrqnZPpYk5
XgXGYqbbp/asO/E9TYnSV8Sbo3Uuac72nLsDXVHavpa2+YORM6W3Ky3BwpdafMR0
zd9yzdYPzd5sXtccc0F2paa6pEcvNWmH8xEM2YVhGDHNo8kgfETX7KeE1FgSJkrc
y/8ZVmTV1pkBc7uGbGLqPD9JTpnV8caFM2du8bN/KFeDu9Av+4cJ97+l1Iw21Rgr
DjzdkuDZI4fE4VZYzDxUFAkD27Flw+YkXMzq2EZkZjIDLsv3YwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFBLP++Zp+56fyZksOkL2sfSxfZAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNDJiYjQ3ZjItZDU4OS0z
NWRiLWI0ZjAtODMwZTc4M2Q0NzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzdwGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE61q4x5ke+3xN1DFNBWFuwuvJ6p7FlaOnbPVDp5PBa4GdAuOBKS59te
1QWA57Zs+6QXBW6Rv6oph84MbD3IJ4s2lqC0Qa4QEr02NnJSQZ1q1bUloIWjTHKw
9xBsCTsYMp3Sd/jEaxB20lk/HkvWTXFhWi3QURdKk2ABp7GcQlLzMrd8YMZ3/2Fp
CJnM4rwR5Ls819YXENaFo1VMi+pXmm3cMUTmh1Imtm8oyTfVOzHONMeohsJGxK8p
FKUpYrH804iWm4lEF5bw4rXosKvKmYFAhMa3AryHMUTecUZZZpRr5vWiXcPzz3Z0
fnZyHTB4pwe/UiA8gFlcHotwcxdCHoU=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:27:00 2026 by rpki-client