Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0389986c-afb0-35e2-ab1a-f429bde0c8cf.roa
File:                     0389986c-afb0-35e2-ab1a-f429bde0c8cf.roa (raw, json)
Hash identifier:          q711FmINPwKP0nc5LzGMzIfq/sA/QI5bkjQTEEHeoDk=
Subject key identifier:   30:69:A8:45:D7:08:49:DF:B2:D6:15:58:72:15:95:B3:F7:E3:DC:AF
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584DC9959FE7F45D07297A81BB30
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0389986c-afb0-35e2-ab1a-f429bde0c8cf.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     5769
IP address blocks:        207.96.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:9f:e7:f4:5d:07:29:7a:81:bb:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=20cc1b31-0e73-43c0-aa5a-eec5056fc18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:51:83:cb:51:6b:61:6b:28:ca:41:9b:07:25:
                    34:0a:d3:6d:0e:a3:23:f8:aa:85:f5:f2:52:69:fd:
                    37:18:40:82:24:6f:7d:67:aa:9f:67:03:a2:6d:a9:
                    5c:81:fe:16:8c:23:45:c5:95:b5:44:50:a9:b7:a3:
                    e4:79:4f:59:d6:65:2d:6e:52:2e:33:db:90:d9:6f:
                    a3:54:b7:3d:fd:b3:df:f5:bc:72:61:b0:05:d4:be:
                    93:1e:2d:f2:5e:34:4f:ba:ac:99:dc:44:20:25:55:
                    f7:75:c0:63:4b:0c:7f:f4:21:50:82:de:15:33:79:
                    a6:e3:a4:2e:1e:9a:20:9f:a1:72:46:2f:ae:83:14:
                    b7:6c:74:e7:66:8c:a1:27:2e:f9:eb:2f:ec:40:fe:
                    b2:aa:a7:75:6b:b5:d9:c0:d4:bd:cc:c9:49:49:d3:
                    66:9e:56:75:9f:1b:32:08:63:9c:ae:ff:07:cb:20:
                    a0:2c:63:f3:0e:67:5c:7c:be:9c:71:37:27:ad:a4:
                    e9:03:b1:81:d8:7a:c8:b9:e0:1c:d3:26:6e:18:7e:
                    2a:a1:1a:34:c7:8a:f0:99:d7:e9:7e:ea:01:f4:73:
                    5b:c8:77:ed:5f:40:59:39:9e:f2:c8:6a:74:7e:75:
                    46:f1:61:57:4e:84:b7:f9:ff:d7:72:8d:36:f7:4a:
                    64:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:69:A8:45:D7:08:49:DF:B2:D6:15:58:72:15:95:B3:F7:E3:DC:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0389986c-afb0-35e2-ab1a-f429bde0c8cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.96.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:bb:b4:ce:15:6c:fc:06:8b:bd:52:8f:30:cb:27:07:28:5a:
         2b:5d:1f:c6:ae:35:49:9a:bb:05:71:c5:e1:77:3f:29:54:8c:
         22:bd:fb:78:48:56:db:59:7c:31:bf:c2:97:24:3d:29:b0:f3:
         1c:cc:58:08:17:26:7d:a5:28:02:ee:fc:fa:90:3b:e5:f4:2c:
         17:44:b5:78:72:ca:31:0a:c0:7e:e3:ec:c9:83:5e:f8:a2:f4:
         bf:bc:f0:77:7e:c9:b7:80:29:e5:32:92:ce:12:e3:11:d3:b3:
         cb:7b:d6:e2:76:3e:8e:12:b8:82:0e:3a:68:87:01:6e:a4:f1:
         87:69:06:2f:09:1a:7e:26:64:bf:b3:cc:8e:ee:af:93:3a:8c:
         64:d5:01:66:bb:fa:98:36:9b:c9:7e:4d:47:03:0e:5a:8b:02:
         cb:98:e6:8a:11:14:1f:e1:66:2d:1c:39:3d:5d:29:21:e3:d2:
         70:48:33:c5:3b:7e:e9:ef:84:bf:fa:0b:ca:59:6d:96:88:e5:
         55:0a:0b:c0:e4:d9:04:cc:2e:a6:cf:14:f8:0a:fe:6f:e9:f2:
         9d:57:e4:1a:8d:0d:c0:40:50:dc:a0:af:96:e7:14:3c:fa:81:
         94:60:aa:bc:ce:01:f3:31:9c:9e:af:46:f6:a4:b8:8f:5c:4d:
         04:7f:78:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3JlZ/n9F0HKXqBuzAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI2MDUxMDEzMDAzMVoXDTI2MDgwODEzMDAzMVowLzEtMCsGA1UEAxMk
MjBjYzFiMzEtMGU3My00M2MwLWFhNWEtZWVjNTA1NmZjMThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1GDy1FrYWsoykGbByU0CtNtDqMj+KqF9fJS
af03GECCJG99Z6qfZwOibalcgf4WjCNFxZW1RFCpt6PkeU9Z1mUtblIuM9uQ2W+j
VLc9/bPf9bxyYbAF1L6THi3yXjRPuqyZ3EQgJVX3dcBjSwx/9CFQgt4VM3mm46Qu
Hpogn6FyRi+ugxS3bHTnZoyhJy756y/sQP6yqqd1a7XZwNS9zMlJSdNmnlZ1nxsy
CGOcrv8HyyCgLGPzDmdcfL6ccTcnraTpA7GB2HrIueAc0yZuGH4qoRo0x4rwmdfp
fuoB9HNbyHftX0BZOZ7yyGp0fnVG8WFXToS3+f/Xco0290pkmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDBpqEXXCEnfstYVWHIVlbP349yvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMDM4OTk4NmMtYWZiMC0z
NWUyLWFiMWEtZjQyOWJkZTBjOGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz2CVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE+7tM4VbPwGi71SjzDLJwcoWitdH8auNUmauwVxxeF3PylUjCK9+3hI
VttZfDG/wpckPSmw8xzMWAgXJn2lKALu/PqQO+X0LBdEtXhyyjEKwH7j7MmDXvii
9L+88Hd+ybeAKeUyks4S4xHTs8t71uJ2Po4SuIIOOmiHAW6k8YdpBi8JGn4mZL+z
zI7ur5M6jGTVAWa7+pg2m8l+TUcDDlqLAsuY5ooRFB/hZi0cOT1dKSHj0nBIM8U7
funvhL/6C8pZbZaI5VUKC8Dk2QTMLqbPFPgK/m/p8p1X5BqNDcBAUNygr5bnFDz6
gZRgqrzOAfMxnJ6vRvakuI9cTQR/eGg=
-----END CERTIFICATE-----
Generated at Wed May 13 06:14:24 2026 by rpki-client