Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/f706efe5-0b21-374f-bf02-2c450dc243a5.roa
File:                     f706efe5-0b21-374f-bf02-2c450dc243a5.roa (raw, json)
Hash identifier:          40w2rz3l5luFUmOr2MMua9DzYlYeOQINwHIf9NNv6Dg=
Subject key identifier:   4E:D4:78:83:80:00:71:5C:F8:8D:F8:D9:AF:55:68:2C:F7:B0:79:58
Certificate issuer:       /CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
Certificate serial:       010D0C9F4328584E5FDF537786CEDAC8C8BE43A0
Authority key identifier: 4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/f706efe5-0b21-374f-bf02-2c450dc243a5.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     53334
IP address blocks:        172.98.36.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:53:77:86:ce:da:c8:c8:be:43:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=592587a4-6c09-4968-aa89-4a37170baebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ec:82:3d:81:c5:03:86:7e:0b:ea:65:ef:fd:
                    61:12:ec:1e:42:21:b2:79:32:f4:b6:2d:ef:ec:1f:
                    72:68:06:7f:47:07:31:5c:50:42:66:94:c8:15:81:
                    ce:98:ff:f7:87:c7:12:40:1e:8f:41:28:ff:ef:5b:
                    34:7f:4c:56:82:a2:c0:eb:cd:cc:29:da:3b:6b:0e:
                    f3:d4:00:47:a9:33:40:de:59:61:eb:89:17:4e:d2:
                    1c:87:6e:f3:ab:30:e3:68:6e:6e:5f:51:da:07:ac:
                    88:a2:49:95:2d:db:58:15:a0:92:62:ef:f6:83:38:
                    54:05:d9:23:6e:a5:ba:6a:a5:d0:2b:47:65:30:29:
                    c9:4b:4b:49:3f:63:9d:7d:24:ab:3b:54:82:09:b5:
                    fa:d0:a4:ed:ac:93:05:78:fc:a1:40:69:9e:a5:25:
                    35:bc:6d:6e:39:6f:31:c7:fd:77:b7:a0:06:12:12:
                    97:db:3b:d1:27:ef:b0:73:4a:3f:91:d9:24:57:1a:
                    89:bb:e5:a4:99:ac:02:5a:4d:ef:64:28:97:3d:4a:
                    6e:f3:98:7f:d5:be:2c:a5:21:f0:fe:7a:25:ef:d2:
                    6a:c4:c7:a9:14:74:20:d6:31:84:4a:87:5f:d1:4e:
                    bd:e4:bd:c1:22:83:54:98:ae:c9:b9:b7:5e:4a:e2:
                    5d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D4:78:83:80:00:71:5C:F8:8D:F8:D9:AF:55:68:2C:F7:B0:79:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/f706efe5-0b21-374f-bf02-2c450dc243a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl

            X509v3 Authority Key Identifier:
                keyid:4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:f9:34:58:27:02:64:cc:d8:36:30:91:28:d8:bb:cd:3a:0e:
         a5:88:02:26:55:94:2c:34:8d:3a:ed:46:af:2d:36:72:90:f7:
         87:b0:e9:f6:42:9c:05:75:c2:d1:d8:12:0c:05:66:b2:91:0d:
         ea:7f:e7:ec:00:8a:cc:d3:44:dc:7d:a1:c9:50:b2:d2:c3:21:
         ea:df:27:3b:d2:9f:ec:a5:b9:64:1b:cd:c0:af:c9:95:ef:d9:
         75:e9:7f:5c:ce:30:c8:72:42:ca:70:eb:c6:bb:4f:52:30:3a:
         b4:ac:0a:25:10:17:4f:03:7b:36:16:ce:6f:c0:b3:49:b2:d9:
         40:07:6f:a4:c5:aa:72:ae:1b:e5:c6:e0:26:1c:3a:0e:f5:9a:
         1e:9b:ab:19:4b:5f:2a:0d:b3:62:df:ef:f4:5c:ac:66:43:19:
         f9:2a:73:63:60:78:9f:72:2b:83:80:27:2e:a5:f9:07:fe:4f:
         de:59:7e:c0:36:58:b5:8d:3c:f3:3f:ce:88:00:fc:65:df:f1:
         70:b2:72:ee:5b:7f:a8:fd:d9:ac:de:7c:0c:c2:55:00:59:0d:
         2c:41:6c:f9:7b:e7:4a:a0:e7:dd:ed:be:7f:96:9a:3c:dc:e7:
         c7:f7:90:2b:ae:ea:23:a3:e2:3d:64:dc:91:f8:24:dd:c7:92:
         5d:8f:03:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f31N3hs7ayMi+Q6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2FhYmFjZGMtNjQxOS00OTcwLTgyOTgtYzdjNDRmZjhj
OGQ0MB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk
NTkyNTg3YTQtNmMwOS00OTY4LWFhODktNGEzNzE3MGJhZWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uyCPYHFA4Z+C+pl7/1hEuweQiGyeTL0ti3v
7B9yaAZ/RwcxXFBCZpTIFYHOmP/3h8cSQB6PQSj/71s0f0xWgqLA683MKdo7aw7z
1ABHqTNA3llh64kXTtIch27zqzDjaG5uX1HaB6yIokmVLdtYFaCSYu/2gzhUBdkj
bqW6aqXQK0dlMCnJS0tJP2OdfSSrO1SCCbX60KTtrJMFePyhQGmepSU1vG1uOW8x
x/13t6AGEhKX2zvRJ++wc0o/kdkkVxqJu+WkmawCWk3vZCiXPUpu85h/1b4spSHw
/nol79JqxMepFHQg1jGESodf0U695L3BIoNUmK7JubdeSuJdywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE7UeIOAAHFc+I342a9VaCz3sHlYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83YWFi
YWNkYy02NDE5LTQ5NzAtODI5OC1jN2M0NGZmOGM4ZDQvZjcwNmVmZTUtMGIyMS0z
NzRmLWJmMDItMmM0NTBkYzI0M2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2FhYmFjZGMtNjQxOS00OTcwLTgy
OTgtYzdjNDRmZjhjOGQ0LzdhYWJhY2RjLTY0MTktNDk3MC04Mjk4LWM3YzQ0ZmY4
YzhkNC5jcmwwHwYDVR0jBBgwFoAUSi2qGuvjHkLhZSpd8g0bkQM72TswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83YWFiYWNkYy02NDE5LTQ5NzAtODI5OC1jN2M0
NGZmOGM4ZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGIkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHj5NFgnAmTM2DYwkSjYu806DqWIAiZVlCw0jTrtRq8tNnKQ94ew6fZC
nAV1wtHYEgwFZrKRDep/5+wAiszTRNx9oclQstLDIerfJzvSn+yluWQbzcCvyZXv
2XXpf1zOMMhyQspw68a7T1IwOrSsCiUQF08DezYWzm/As0my2UAHb6TFqnKuG+XG
4CYcOg71mh6bqxlLXyoNs2Lf7/RcrGZDGfkqc2NgeJ9yK4OAJy6l+Qf+T95ZfsA2
WLWNPPM/zogA/GXf8XCycu5bf6j92azefAzCVQBZDSxBbPl750qg593tvn+Wmjzc
58f3kCuu6iOj4j1k3JH4JN3Hkl2PA+A=
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:17:32 2026 by rpki-client