Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/0f861942-6b84-342e-b618-8008d6f6e695.roa
File:                     0f861942-6b84-342e-b618-8008d6f6e695.roa (raw, json)
Hash identifier:          RPuIZAUukCjGxGd0oms9zKh+43ki2Y3jDVy1r4colgo=
Subject key identifier:   F7:BF:41:F7:9C:D0:BB:8C:2B:75:17:FE:4A:51:EF:C6:7F:69:55:40
Certificate issuer:       /CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e
Certificate serial:       010D0C9F4328584F4F081920DC4880BDD6B9B1E0
Authority key identifier: 22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/0f861942-6b84-342e-b618-8008d6f6e695.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     26223
IP address blocks:        107.190.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:19:20:dc:48:80:bd:d6:b9:b1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=6edf2bbc-a3b1-413e-8b45-d0aaa6ef4745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6d:77:5c:11:d8:59:a8:1e:36:88:38:e1:ef:
                    1e:53:1f:41:62:2e:b5:c1:d9:25:d8:b4:90:a3:69:
                    20:c4:ed:91:d1:12:3e:ba:5f:cc:8c:0e:7a:8c:d5:
                    a6:08:a7:2d:09:32:0e:a8:6e:b7:62:d6:69:30:5d:
                    cc:fc:a7:b1:f3:cc:2d:b1:7e:57:73:6f:df:53:2a:
                    93:4f:bf:1e:e4:3d:13:ef:5a:f9:80:1e:f0:26:12:
                    0f:81:ba:58:e4:2e:4b:e8:d9:72:d0:a0:36:ba:15:
                    9d:68:19:db:88:b9:c8:6a:e5:97:27:8c:3d:d5:11:
                    21:12:17:f4:82:bb:e6:4c:51:e0:1b:3e:6e:30:05:
                    02:57:e6:48:4e:99:f9:92:96:bc:8e:75:d3:36:79:
                    e0:72:3c:01:7e:1a:03:0f:1a:76:14:fc:0b:ad:cb:
                    d8:c2:e1:74:16:8d:00:14:b9:21:67:d9:76:9b:6f:
                    6d:eb:02:a0:3b:f6:59:af:41:75:ba:8b:6e:68:ba:
                    5d:be:57:1d:34:71:40:c4:dc:30:63:a7:6f:22:3d:
                    5e:72:45:c4:ad:6e:27:52:aa:28:6b:5d:f7:0f:c3:
                    6c:42:2f:fb:4f:55:75:6b:b2:b3:f4:7f:d4:9f:4b:
                    bc:a1:ba:a8:bc:47:da:39:63:4f:f6:3f:6f:f9:5b:
                    8e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BF:41:F7:9C:D0:BB:8C:2B:75:17:FE:4A:51:EF:C6:7F:69:55:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/0f861942-6b84-342e-b618-8008d6f6e695.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.crl

            X509v3 Authority Key Identifier:
                keyid:22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.190.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:3e:f6:76:be:6e:1b:d2:a7:96:47:c1:de:10:7d:ee:f5:e0:
         ef:75:92:47:50:a8:9d:9b:f6:82:25:5a:4b:9c:7e:0b:0a:41:
         0e:42:7a:48:c3:08:6e:f2:a3:2a:27:cd:14:74:69:ea:78:16:
         84:41:70:7b:06:60:3e:30:9b:3c:3a:4b:27:49:80:ab:88:5f:
         c4:35:30:7f:37:a0:cb:47:14:8d:79:aa:41:e1:ad:27:18:55:
         9e:6a:5d:c0:19:da:fc:1b:8a:0e:7a:46:64:f3:cf:a3:3c:4e:
         bb:55:35:36:9b:c0:2b:e8:ab:1c:f8:38:e8:b4:8a:b3:4c:e9:
         6b:3d:df:06:4c:09:6f:f2:6a:0d:47:4b:ad:d9:10:9c:79:2f:
         f1:2c:e9:0c:7d:3c:61:45:d1:ce:43:28:e4:a1:11:f7:ed:30:
         58:ba:b4:30:77:e6:57:9f:22:c7:ea:9a:2c:c2:27:8f:50:b0:
         88:3b:82:68:54:9b:c9:4f:aa:47:58:28:07:9d:90:a5:3d:b6:
         9b:25:a2:49:4d:36:8a:c6:53:16:dd:f8:6b:bc:60:41:f8:61:
         59:71:09:f5:99:bb:0f:d5:af:64:25:b3:3b:1a:f3:3f:7f:d6:
         00:f7:93:14:72:25:e9:92:ec:74:eb:bf:42:f3:46:a5:81:ba:
         d7:49:01:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCBkg3EiAvda5seAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2Y2YmMwNmEtMGE0Mi00NzU4LTg2MjktOGM5MGVjZjJm
ODJlMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
NmVkZjJiYmMtYTNiMS00MTNlLThiNDUtZDBhYWE2ZWY0NzQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk213XBHYWageNog44e8eUx9BYi61wdkl2LSQ
o2kgxO2R0RI+ul/MjA56jNWmCKctCTIOqG63YtZpMF3M/Kex88wtsX5Xc2/fUyqT
T78e5D0T71r5gB7wJhIPgbpY5C5L6Nly0KA2uhWdaBnbiLnIauWXJ4w91REhEhf0
grvmTFHgGz5uMAUCV+ZITpn5kpa8jnXTNnngcjwBfhoDDxp2FPwLrcvYwuF0Fo0A
FLkhZ9l2m29t6wKgO/ZZr0F1uotuaLpdvlcdNHFAxNwwY6dvIj1eckXErW4nUqoo
a133D8NsQi/7T1V1a7Kz9H/Un0u8obqovEfaOWNP9j9v+VuOfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPe/Qfec0LuMK3UX/kpR78Z/aVVAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZjZi
YzA2YS0wYTQyLTQ3NTgtODYyOS04YzkwZWNmMmY4MmUvMGY4NjE5NDItNmI4NC0z
NDJlLWI2MTgtODAwOGQ2ZjZlNjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2Y2YmMwNmEtMGE0Mi00NzU4LTg2
MjktOGM5MGVjZjJmODJlLzdmNmJjMDZhLTBhNDItNDc1OC04NjI5LThjOTBlY2Yy
ZjgyZS5jcmwwHwYDVR0jBBgwFoAUIo7n+g4AQMW6PyBnd/o8Bb1vWs8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZjZiYzA2YS0wYTQyLTQ3NTgtODYyOS04Yzkw
ZWNmMmY4MmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDa764MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH8+9na+bhvSp5ZHwd4Qfe714O91kkdQqJ2b9oIlWkucfgsKQQ5CekjD
CG7yoyonzRR0aep4FoRBcHsGYD4wmzw6SydJgKuIX8Q1MH83oMtHFI15qkHhrScY
VZ5qXcAZ2vwbig56RmTzz6M8TrtVNTabwCvoqxz4OOi0irNM6Ws93wZMCW/yag1H
S63ZEJx5L/Es6Qx9PGFF0c5DKOShEfftMFi6tDB35lefIsfqmizCJ49QsIg7gmhU
m8lPqkdYKAedkKU9tpsloklNNorGUxbd+Gu8YEH4YVlxCfWZuw/Vr2Qlszsa8z9/
1gD3kxRyJemS7HTrv0LzRqWButdJAdI=
-----END CERTIFICATE-----
Generated at Fri Oct 2 18:37:49 2026 by rpki-client