Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/826c9b32-80a3-3d5e-b64c-775640089e22.roa
File:                     826c9b32-80a3-3d5e-b64c-775640089e22.roa (raw, json)
Hash identifier:          U4BcQXMNp/SFM6/UtukcqjwP0invUqPv4R1aO9Vy4UE=
Subject key identifier:   3C:D9:60:8B:FA:D7:EB:B6:26:A1:92:02:6C:7A:6A:C4:F4:77:4D:FC
Certificate issuer:       /CN=1a784112-3bbf-41c8-9c32-bdb85ae76b1b
Certificate serial:       010D0C9F4328584E640F65E474A72C16F19EC200
Authority key identifier: 2C:5D:84:99:81:5D:2D:C3:28:A2:8C:EC:05:14:9F:29:E4:B6:17:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/826c9b32-80a3-3d5e-b64c-775640089e22.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     21976
IP address blocks:        207.200.170.0/24 maxlen: 24
                          207.200.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:65:e4:74:a7:2c:16:f1:9e:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a784112-3bbf-41c8-9c32-bdb85ae76b1b
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=86c2331e-715b-4b83-b372-19f96bb0043c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:97:bc:21:94:5f:bb:bd:d8:e7:6c:29:4c:1f:
                    08:b4:a0:04:70:3d:cf:d2:90:a4:29:8c:62:3f:34:
                    48:c4:2b:0f:7d:dc:b6:aa:ae:1c:04:9f:25:28:41:
                    55:89:a6:61:31:ae:ab:27:64:c8:2a:37:57:9e:f2:
                    30:07:84:b7:86:ce:7d:82:d8:c6:56:51:c9:60:b2:
                    f7:57:c3:99:eb:63:0b:8b:e0:f6:2d:50:45:9e:03:
                    e4:05:8a:b3:95:e9:d9:98:53:75:7c:d0:4b:29:a1:
                    7d:8e:b8:50:9d:b8:90:1a:3a:f0:f7:b1:5d:3a:3e:
                    46:e1:a5:9c:dd:3b:f7:57:8c:3d:90:51:09:2d:5f:
                    bf:0c:bd:49:da:0e:4a:13:84:e6:ee:bb:aa:e1:68:
                    5c:25:83:de:63:9e:6b:a9:67:78:ea:b3:3d:f4:df:
                    a3:6b:df:bf:0a:fd:c3:e1:b6:b9:f9:85:6e:b4:82:
                    01:1d:0d:3a:0e:9d:d3:f2:6f:aa:73:cc:f7:e4:6c:
                    45:ab:1c:c5:14:09:4e:00:0d:1d:6b:19:05:12:f9:
                    9f:09:25:37:6d:e3:ba:10:67:58:7b:91:2f:32:4b:
                    85:0f:1d:ae:c0:43:eb:1b:35:8c:0a:dc:d6:86:56:
                    31:c9:e5:b1:91:d3:c2:3d:23:ab:f3:ef:0a:c1:ae:
                    9e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D9:60:8B:FA:D7:EB:B6:26:A1:92:02:6C:7A:6A:C4:F4:77:4D:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/826c9b32-80a3-3d5e-b64c-775640089e22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.crl

            X509v3 Authority Key Identifier:
                keyid:2C:5D:84:99:81:5D:2D:C3:28:A2:8C:EC:05:14:9F:29:E4:B6:17:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.200.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:63:d4:5e:86:97:cf:6e:b1:65:48:0b:01:41:88:a5:2f:7a:
         71:b3:cb:49:77:45:04:e9:27:32:12:d0:b8:f5:c2:a6:7f:d9:
         97:42:43:d6:86:75:4f:c0:43:bb:d9:85:c4:3a:5d:6e:22:30:
         12:1f:20:4b:a7:fb:ff:e9:e2:56:76:2e:e6:cc:83:1e:e1:36:
         34:9e:34:30:fe:35:00:9e:19:f4:e8:01:92:a6:51:89:54:db:
         d3:9f:dc:cc:8f:3a:06:62:35:36:79:ba:c0:34:75:98:e8:5f:
         ff:1c:4c:9e:b7:7c:e2:37:57:f5:71:94:fa:11:37:68:1c:3a:
         a5:e5:d5:68:a5:6e:3e:92:95:7c:a6:63:9f:7e:59:fe:64:ee:
         6d:39:42:0f:4b:e7:dc:7a:d7:03:db:9a:b2:06:8f:67:6b:09:
         14:20:f0:01:0a:33:9a:c9:f7:27:2a:58:a0:b4:ab:4b:de:7f:
         39:6b:07:a3:7b:bd:0e:1d:7c:47:2f:20:fd:9b:6c:c7:52:dd:
         95:33:6d:f0:62:83:31:25:ea:06:05:b4:a5:0f:5d:22:ad:db:
         55:98:b0:e9:57:c6:81:e5:60:7b:3d:b8:5a:f1:9b:8d:f4:0e:
         81:4a:b4:02:e3:3f:2d:51:c7:9a:fd:45:ba:47:c1:cb:4b:91:
         09:7b:b5:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5kD2XkdKcsFvGewgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWE3ODQxMTItM2JiZi00MWM4LTljMzItYmRiODVhZTc2
YjFiMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk
ODZjMjMzMWUtNzE1Yi00YjgzLWIzNzItMTlmOTZiYjAwNDNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5e8IZRfu73Y52wpTB8ItKAEcD3P0pCkKYxi
PzRIxCsPfdy2qq4cBJ8lKEFViaZhMa6rJ2TIKjdXnvIwB4S3hs59gtjGVlHJYLL3
V8OZ62MLi+D2LVBFngPkBYqzlenZmFN1fNBLKaF9jrhQnbiQGjrw97FdOj5G4aWc
3Tv3V4w9kFEJLV+/DL1J2g5KE4Tm7ruq4WhcJYPeY55rqWd46rM99N+ja9+/Cv3D
4ba5+YVutIIBHQ06Dp3T8m+qc8z35GxFqxzFFAlOAA0daxkFEvmfCSU3beO6EGdY
e5EvMkuFDx2uwEPrGzWMCtzWhlYxyeWxkdPCPSOr8+8Kwa6e3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDzZYIv61+u2JqGSAmx6asT0d038MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xYTc4
NDExMi0zYmJmLTQxYzgtOWMzMi1iZGI4NWFlNzZiMWIvODI2YzliMzItODBhMy0z
ZDVlLWI2NGMtNzc1NjQwMDg5ZTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWE3ODQxMTItM2JiZi00MWM4LTlj
MzItYmRiODVhZTc2YjFiLzFhNzg0MTEyLTNiYmYtNDFjOC05YzMyLWJkYjg1YWU3
NmIxYi5jcmwwHwYDVR0jBBgwFoAULF2EmYFdLcMooozsBRSfKeS2FzowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xYTc4NDExMi0zYmJmLTQxYzgtOWMzMi1iZGI4
NWFlNzZiMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz8iqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH5j1F6Gl89usWVICwFBiKUvenGzy0l3RQTpJzIS0Lj1wqZ/2ZdCQ9aG
dU/AQ7vZhcQ6XW4iMBIfIEun+//p4lZ2LubMgx7hNjSeNDD+NQCeGfToAZKmUYlU
29Of3MyPOgZiNTZ5usA0dZjoX/8cTJ63fOI3V/VxlPoRN2gcOqXl1Wilbj6SlXym
Y59+Wf5k7m05Qg9L59x61wPbmrIGj2drCRQg8AEKM5rJ9ycqWKC0q0vefzlrB6N7
vQ4dfEcvIP2bbMdS3ZUzbfBigzEl6gYFtKUPXSKt21WYsOlXxoHlYHs9uFrxm430
DoFKtALjPy1Rx5r9RbpHwctLkQl7tbM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:03:29 2026 by rpki-client