Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/c77cf7a1-0a5f-3bcd-b021-37accf6e6544.roa
File:                     c77cf7a1-0a5f-3bcd-b021-37accf6e6544.roa (raw, json)
Hash identifier:          Vl6ARFPheS5OpUfPdr4O3OzWZR1k7+bsvQSIFj723Ek=
Subject key identifier:   A7:02:E1:9E:8E:8D:B0:14:9B:B8:2C:D2:94:16:40:AF:53:A1:F7:3A
Certificate issuer:       /CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7
Certificate serial:       010D0C9F4328584E921FA72A6B44F5914CA41E70
Authority key identifier: 36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/c77cf7a1-0a5f-3bcd-b021-37accf6e6544.roa
Signing time:             Tue 21 Jul 2026 09:00:12 +0000
ROA not before:           Tue 21 Jul 2026 09:00:12 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     7018
IP address blocks:        170.205.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:1f:a7:2a:6b:44:f5:91:4c:a4:1e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7
        Validity
            Not Before: Jul 21 09:00:12 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=8944dfe8-5477-4b43-8320-1f41a35f5ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:78:57:c4:ec:c7:f3:bb:29:b6:ab:64:a9:87:
                    6c:b6:f2:48:5d:59:b5:78:cc:e3:81:27:76:0d:fc:
                    3f:f1:4c:b3:65:e7:f2:58:50:95:94:41:10:13:87:
                    14:92:1a:16:ac:fb:8c:54:ba:bc:59:31:f1:fd:4b:
                    ba:9d:e6:8d:bc:a4:f3:9d:ae:21:9b:be:00:01:d0:
                    1f:c5:bb:b5:fd:dd:a3:cc:fd:6f:d1:c8:71:4b:4e:
                    88:ba:ac:c9:45:c4:3b:51:61:58:72:d6:2b:a1:1e:
                    14:bd:ca:54:82:1d:31:7b:56:a5:81:94:ee:8c:7a:
                    6b:99:fe:5c:17:16:2c:dd:e3:15:10:c8:fe:b5:f3:
                    2f:65:6a:ff:84:ee:1c:2b:8a:34:e1:f0:a3:10:9a:
                    a6:ca:29:ac:8d:0e:1c:01:26:3d:59:92:13:b6:0c:
                    83:cb:ec:5d:94:66:4a:e6:c0:6f:20:db:fa:39:32:
                    a2:11:7a:b2:1d:9b:7d:65:2b:e4:c7:4c:9a:36:d8:
                    60:e1:b5:3f:6b:2f:b7:3a:51:61:63:f4:1f:da:71:
                    f6:c5:c6:41:c8:93:ee:c5:9d:77:30:01:aa:39:5f:
                    9b:f5:7a:05:49:51:e4:4b:1f:45:63:db:92:af:9e:
                    b7:20:a6:e8:ab:67:67:de:54:6b:e8:e8:d4:b0:fa:
                    56:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:02:E1:9E:8E:8D:B0:14:9B:B8:2C:D2:94:16:40:AF:53:A1:F7:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/c77cf7a1-0a5f-3bcd-b021-37accf6e6544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.crl

            X509v3 Authority Key Identifier:
                keyid:36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:e4:5f:5e:65:44:9a:a9:11:ab:1a:ad:d0:03:6d:cb:5e:07:
         62:0d:03:2d:97:d6:15:96:a8:19:83:bb:53:04:d2:dc:d8:e6:
         92:b5:a9:7b:74:35:bb:3b:22:dd:ad:eb:66:2e:59:33:ec:1f:
         12:62:4e:0b:b9:3b:10:67:ab:c4:cb:33:cc:4d:e0:35:95:df:
         62:07:f4:d5:7c:80:0d:27:0b:83:34:a1:12:b3:4a:7d:60:98:
         4a:27:de:89:03:79:9d:1a:21:6e:74:29:4b:db:11:25:4b:3f:
         25:32:fb:0a:6f:cd:cf:0a:e0:0e:2c:2c:9f:1e:f4:87:7b:1b:
         fb:68:b1:34:2f:62:2d:1a:4d:3d:d6:c8:9f:a7:5c:01:bd:23:
         99:f8:04:e7:9a:02:1c:5a:c0:ea:f6:a0:fd:9b:69:5b:d9:4f:
         9f:89:ab:41:42:cc:f4:ee:75:62:0b:6c:f9:90:d9:41:32:42:
         65:38:10:9e:c9:cd:b8:c5:d3:95:83:21:47:07:cc:7a:b4:19:
         70:98:5a:bf:55:b5:0c:22:bf:d0:d9:a8:1d:f5:19:f3:30:6d:
         ce:82:b4:de:b8:52:c7:76:89:68:31:b0:92:b2:f1:85:7e:4f:
         05:3f:3b:f7:54:75:f3:49:7d:91:35:d3:c0:e9:71:13:82:c4:
         fb:a5:02:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6SH6cqa0T1kUykHnAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDMwMWM3OTAtYzFmNC00ZmQ3LWE5MzktMWE4ZDI2Njli
NWI3MB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk
ODk0NGRmZTgtNTQ3Ny00YjQzLTgzMjAtMWY0MWEzNWY1ZmZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHhXxOzH87sptqtkqYdstvJIXVm1eMzjgSd2
Dfw/8UyzZefyWFCVlEEQE4cUkhoWrPuMVLq8WTHx/Uu6neaNvKTzna4hm74AAdAf
xbu1/d2jzP1v0chxS06IuqzJRcQ7UWFYctYroR4UvcpUgh0xe1algZTujHprmf5c
FxYs3eMVEMj+tfMvZWr/hO4cK4o04fCjEJqmyimsjQ4cASY9WZITtgyDy+xdlGZK
5sBvINv6OTKiEXqyHZt9ZSvkx0yaNthg4bU/ay+3OlFhY/Qf2nH2xcZByJPuxZ13
MAGqOV+b9XoFSVHkSx9FY9uSr563IKboq2dn3lRr6OjUsPpWMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKcC4Z6OjbAUm7gs0pQWQK9Tofc6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMzAx
Yzc5MC1jMWY0LTRmZDctYTkzOS0xYThkMjY2OWI1YjcvYzc3Y2Y3YTEtMGE1Zi0z
YmNkLWIwMjEtMzdhY2NmNmU2NTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDMwMWM3OTAtYzFmNC00ZmQ3LWE5
MzktMWE4ZDI2NjliNWI3L2QzMDFjNzkwLWMxZjQtNGZkNy1hOTM5LTFhOGQyNjY5
YjViNy5jcmwwHwYDVR0jBBgwFoAUNhVcMeA33FGXyNmKpO5YWngWySwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMzAxYzc5MC1jMWY0LTRmZDctYTkzOS0xYThk
MjY2OWI1YjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqs0hMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEbkX15lRJqpEasardADbcteB2INAy2X1hWWqBmDu1ME0tzY5pK1qXt0
Nbs7It2t62YuWTPsHxJiTgu5OxBnq8TLM8xN4DWV32IH9NV8gA0nC4M0oRKzSn1g
mEon3okDeZ0aIW50KUvbESVLPyUy+wpvzc8K4A4sLJ8e9Id7G/tosTQvYi0aTT3W
yJ+nXAG9I5n4BOeaAhxawOr2oP2baVvZT5+Jq0FCzPTudWILbPmQ2UEyQmU4EJ7J
zbjF05WDIUcHzHq0GXCYWr9VtQwiv9DZqB31GfMwbc6CtN64Usd2iWgxsJKy8YV+
TwU/O/dUdfNJfZE108DpcROCxPulAvM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:22:19 2026 by rpki-client