Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d2ebf92-acd0-4b14-a67d-e7a909997e7e/75b9bee0-580e-30d5-89a2-a8001a569e60.roa
File:                     75b9bee0-580e-30d5-89a2-a8001a569e60.roa (raw, json)
Hash identifier:          P0cHF5rn3ia2EoZUUgTgIu45JEYcpdWk0559M6GxsPg=
Subject key identifier:   F1:06:5D:D5:81:AB:FA:3B:54:D5:99:67:D4:56:40:A2:DD:3F:60:DC
Certificate issuer:       /CN=0d2ebf92-acd0-4b14-a67d-e7a909997e7e
Certificate serial:       010D0C9F4328584E5E79FA706DF12F923334B900
Authority key identifier: 5D:83:33:DD:1D:16:CC:71:56:EE:F9:75:CC:8B:13:1E:6B:7C:E8:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d2ebf92-acd0-4b14-a67d-e7a909997e7e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d2ebf92-acd0-4b14-a67d-e7a909997e7e/75b9bee0-580e-30d5-89a2-a8001a569e60.roa
Signing time:             Thu 02 Jul 2026 21:00:12 +0000
ROA not before:           Thu 02 Jul 2026 21:00:12 +0000
ROA not after:            Wed 30 Sep 2026 21:00:12 +0000
asID:                     36593
IP address blocks:        167.94.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d2ebf92-acd0-4b14-a67d-e7a909997e7e/0d2ebf92-acd0-4b14-a67d-e7a909997e7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d2ebf92-acd0-4b14-a67d-e7a909997e7e/0d2ebf92-acd0-4b14-a67d-e7a909997e7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d2ebf92-acd0-4b14-a67d-e7a909997e7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:79:fa:70:6d:f1:2f:92:33:34:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2ebf92-acd0-4b14-a67d-e7a909997e7e
        Validity
            Not Before: Jul  2 21:00:12 2026 GMT
            Not After : Sep 30 21:00:12 2026 GMT
        Subject: CN=eb102650-8b76-4e5f-a55c-ef90c9cc360e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:55:11:4c:54:b8:4f:2c:d5:ce:79:78:82:ed:
                    95:48:eb:cf:45:53:34:8f:29:08:e5:b6:ac:80:34:
                    66:6a:dd:29:80:2b:75:6e:2a:a8:db:5a:c0:2f:6b:
                    a1:e5:24:0e:03:07:16:19:99:80:d3:16:f1:a6:af:
                    36:f1:e4:75:be:a1:b1:07:9f:19:1a:65:ce:40:76:
                    83:0d:87:c9:d1:f1:36:ba:39:07:c8:46:e4:46:5d:
                    a8:ce:9f:06:72:72:3d:25:32:41:80:0e:0c:05:01:
                    b4:da:7b:8e:3e:b8:e0:ca:4a:1a:c4:79:43:26:11:
                    86:80:c5:de:8f:47:bd:a8:d9:36:1d:84:cb:a0:6f:
                    57:7a:0d:8a:48:df:3e:b6:ec:f0:9d:ba:1d:66:6a:
                    31:14:25:5b:b9:28:75:c0:08:1b:e2:8a:1f:3c:59:
                    6e:52:18:11:c2:79:d4:7e:40:45:6c:f2:dd:14:57:
                    c3:86:8e:3e:48:bf:31:af:3b:3d:d1:f0:c2:5e:38:
                    82:72:de:c4:e6:83:73:5b:91:84:0e:7b:7a:35:f3:
                    70:c6:dc:29:af:0c:97:c3:dd:51:c1:3f:c3:0d:8d:
                    6b:d0:fc:1f:a3:d9:33:8b:b6:07:13:07:66:83:da:
                    b7:f2:d4:13:c3:82:15:18:eb:ff:27:3f:12:61:cb:
                    8e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:06:5D:D5:81:AB:FA:3B:54:D5:99:67:D4:56:40:A2:DD:3F:60:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d2ebf92-acd0-4b14-a67d-e7a909997e7e/75b9bee0-580e-30d5-89a2-a8001a569e60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d2ebf92-acd0-4b14-a67d-e7a909997e7e/0d2ebf92-acd0-4b14-a67d-e7a909997e7e.crl

            X509v3 Authority Key Identifier:
                keyid:5D:83:33:DD:1D:16:CC:71:56:EE:F9:75:CC:8B:13:1E:6B:7C:E8:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d2ebf92-acd0-4b14-a67d-e7a909997e7e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.94.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:36:4a:fd:72:19:3d:36:9a:77:ed:0f:1e:03:fa:f7:e5:68:
         fb:ae:d2:e5:23:25:df:43:0e:30:e1:67:6b:c4:c2:27:78:8a:
         27:4c:8f:8a:40:7b:38:00:2d:a6:a6:3b:17:c5:08:db:2b:d5:
         31:25:b0:e2:f2:37:85:c9:cc:95:78:d5:2e:a9:4b:38:c9:f0:
         ac:d2:a7:12:af:8b:8f:1c:08:b7:ff:d2:b5:d2:57:5f:53:3b:
         a2:4d:de:77:64:24:3c:b4:66:d9:e1:f9:1b:d8:96:1c:5a:ef:
         cb:74:4e:f0:38:4a:1f:6a:f7:d1:a2:10:91:70:7b:69:88:db:
         4e:a1:16:e1:96:86:6e:13:09:bb:75:48:15:6a:93:c6:7b:4e:
         74:68:0e:75:ee:ce:5e:00:36:ce:3f:a2:6c:f1:21:a0:04:a1:
         6c:10:a1:60:95:34:31:b4:26:c5:c1:8d:1d:49:77:ad:7f:88:
         9f:19:81:2f:23:7a:64:dd:7a:30:7b:d0:97:8b:1f:61:ad:d1:
         eb:e5:30:de:61:03:41:bf:d7:54:1d:7c:0d:c7:3e:7d:ef:02:
         a2:ff:c7:33:4d:b4:e0:99:98:45:f0:4e:4b:44:b5:b5:46:a2:
         f0:f7:bb:10:26:32:dc:c6:88:4b:70:32:f4:0b:15:91:af:17:
         39:ab:1a:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5eefpwbfEvkjM0uQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQyZWJmOTItYWNkMC00YjE0LWE2N2QtZTdhOTA5OTk3
ZTdlMB4XDTI2MDcwMjIxMDAxMloXDTI2MDkzMDIxMDAxMlowLzEtMCsGA1UEAxMk
ZWIxMDI2NTAtOGI3Ni00ZTVmLWE1NWMtZWY5MGM5Y2MzNjBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVURTFS4TyzVznl4gu2VSOvPRVM0jykI5bas
gDRmat0pgCt1biqo21rAL2uh5SQOAwcWGZmA0xbxpq828eR1vqGxB58ZGmXOQHaD
DYfJ0fE2ujkHyEbkRl2ozp8GcnI9JTJBgA4MBQG02nuOPrjgykoaxHlDJhGGgMXe
j0e9qNk2HYTLoG9Xeg2KSN8+tuzwnbodZmoxFCVbuSh1wAgb4oofPFluUhgRwnnU
fkBFbPLdFFfDho4+SL8xrzs90fDCXjiCct7E5oNzW5GEDnt6NfNwxtwprwyXw91R
wT/DDY1r0Pwfo9kzi7YHEwdmg9q38tQTw4IVGOv/Jz8SYcuOVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPEGXdWBq/o7VNWZZ9RWQKLdP2DcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDJl
YmY5Mi1hY2QwLTRiMTQtYTY3ZC1lN2E5MDk5OTdlN2UvNzViOWJlZTAtNTgwZS0z
MGQ1LTg5YTItYTgwMDFhNTY5ZTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQyZWJmOTItYWNkMC00YjE0LWE2
N2QtZTdhOTA5OTk3ZTdlLzBkMmViZjkyLWFjZDAtNGIxNC1hNjdkLWU3YTkwOTk5
N2U3ZS5jcmwwHwYDVR0jBBgwFoAUXYMz3R0WzHFW7vl1zIsTHmt86HIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDJlYmY5Mi1hY2QwLTRiMTQtYTY3ZC1lN2E5
MDk5OTdlN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBp15sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHc2Sv1yGT02mnftDx4D+vflaPuu0uUjJd9DDjDhZ2vEwid4iidMj4pA
ezgALaamOxfFCNsr1TElsOLyN4XJzJV41S6pSzjJ8KzSpxKvi48cCLf/0rXSV19T
O6JN3ndkJDy0Ztnh+RvYlhxa78t0TvA4Sh9q99GiEJFwe2mI206hFuGWhm4TCbt1
SBVqk8Z7TnRoDnXuzl4ANs4/omzxIaAEoWwQoWCVNDG0JsXBjR1Jd61/iJ8ZgS8j
emTdejB70JeLH2Gt0evlMN5hA0G/11QdfA3HPn3vAqL/xzNNtOCZmEXwTktEtbVG
ovD3uxAmMtzGiEtwMvQLFZGvFzmrGig=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:45:24 2026 by rpki-client