Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/446319b8-ed67-3b03-a0e2-5a949ad2108c.roa
File:                     446319b8-ed67-3b03-a0e2-5a949ad2108c.roa (raw, json)
Hash identifier:          tMzpjJGihRY+9NFe2BGV0dC00ISxadZkjcsi0Hz25cM=
Subject key identifier:   62:D1:63:96:5B:35:84:00:4A:4A:FC:D3:20:F9:1D:07:33:50:C1:4A
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F4328584E7A64D5DAE5D1C1BDC32C5360
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/446319b8-ed67-3b03-a0e2-5a949ad2108c.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     3557
IP address blocks:        192.5.4.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:d5:da:e5:d1:c1:bd:c3:2c:53:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=71d55627-aaae-48cd-bc15-944a3439f746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:83:11:fa:c3:be:9e:d1:60:e4:f3:13:fb:08:
                    81:86:94:c2:4c:ce:37:8d:95:a0:fe:13:6d:93:b7:
                    1a:d8:bb:7c:14:c1:3d:8b:73:db:6b:96:3a:65:6c:
                    59:31:fb:51:81:c2:51:db:13:01:48:e1:b0:3f:d5:
                    1a:b0:c4:db:8d:e1:d1:1c:c5:8f:43:0c:ea:a3:28:
                    b6:6e:f9:fc:e1:1e:ef:df:32:30:a9:2e:d3:66:59:
                    74:16:e1:67:0d:50:97:38:a6:4a:b4:23:ae:7a:8f:
                    b0:ce:cc:4b:03:d6:d5:4c:32:b7:c2:86:c8:50:73:
                    c3:22:70:2c:d1:53:d4:93:96:d8:0c:01:0c:ea:03:
                    7f:98:ae:7d:4c:fe:54:38:09:33:87:3a:37:09:31:
                    34:f1:10:9c:d3:f0:54:07:8e:5d:d3:7e:5b:82:cd:
                    89:11:72:69:96:48:b6:34:e6:d6:d0:9a:d5:1a:fb:
                    6f:10:3d:0e:8e:7f:53:16:a3:36:ea:76:e0:ea:c0:
                    8c:b5:ed:7c:8d:91:33:27:a5:78:1a:2d:3b:f9:55:
                    a0:3c:d5:a7:a0:8a:12:27:35:f3:16:70:6b:cc:fa:
                    d5:a5:73:44:3e:5f:2f:57:70:91:19:28:42:73:a0:
                    9a:c1:06:69:0b:14:e5:d1:d6:27:53:8b:b7:2a:91:
                    13:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D1:63:96:5B:35:84:00:4A:4A:FC:D3:20:F9:1D:07:33:50:C1:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/446319b8-ed67-3b03-a0e2-5a949ad2108c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:7a:31:c7:71:7a:0a:44:b5:5a:ea:9d:b9:3b:3d:96:0f:ff:
         60:ab:c6:8e:21:7d:89:2c:16:b3:bf:37:5b:54:b6:6e:a8:9d:
         0a:45:80:4f:59:9e:f2:65:3c:1f:5c:c4:c8:3d:30:05:9c:90:
         21:bc:92:e7:9f:b5:77:1c:50:24:ea:9a:22:ed:b4:75:fa:79:
         c6:5d:cb:2e:f5:a0:8f:69:55:22:37:74:91:5a:b5:f2:fc:13:
         42:19:6a:96:30:11:1e:aa:d8:da:11:b1:ec:6e:96:27:81:3e:
         e2:8e:9b:31:84:1a:91:58:ab:06:48:af:74:e0:59:5e:19:15:
         ad:af:76:a2:ec:4c:07:9f:66:c8:53:62:3e:9d:ad:23:42:e8:
         7c:93:7c:56:e2:0d:e5:e2:79:60:6f:32:c4:e2:e1:43:f8:5d:
         10:27:7a:df:16:f6:02:37:99:3e:39:da:9a:a7:88:f6:fc:8e:
         72:bc:08:50:fb:9d:e7:e9:e5:a6:34:c1:81:85:ee:4d:fb:08:
         2c:d7:53:ad:5e:36:ce:a2:24:83:b8:1d:36:e1:af:df:2f:67:
         64:5c:b7:e1:5f:36:4b:b0:77:c9:29:52:78:2d:9a:e4:49:f4:
         6d:5d:d4:bb:f7:73:c2:e7:2d:12:bc:01:53:15:f7:54:e8:88:
         95:7a:eb:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZNXa5dHBvcMsU2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4
NTEwMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk
NzFkNTU2MjctYWFhZS00OGNkLWJjMTUtOTQ0YTM0MzlmNzQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYMR+sO+ntFg5PMT+wiBhpTCTM43jZWg/hNt
k7ca2Lt8FME9i3Pba5Y6ZWxZMftRgcJR2xMBSOGwP9UasMTbjeHRHMWPQwzqoyi2
bvn84R7v3zIwqS7TZll0FuFnDVCXOKZKtCOueo+wzsxLA9bVTDK3wobIUHPDInAs
0VPUk5bYDAEM6gN/mK59TP5UOAkzhzo3CTE08RCc0/BUB45d035bgs2JEXJplki2
NObW0JrVGvtvED0Ojn9TFqM26nbg6sCMte18jZEzJ6V4Gi07+VWgPNWnoIoSJzXz
FnBrzPrVpXNEPl8vV3CRGShCc6CawQZpCxTl0dYnU4u3KpETTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGLRY5ZbNYQASkr80yD5HQczUMFKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi
ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvNDQ2MzE5YjgtZWQ2Ny0z
YjAzLWEwZTItNWE5NDlhZDIxMDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi
Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy
ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh
MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwAUEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADN6McdxegpEtVrqnbk7PZYP/2Crxo4hfYksFrO/N1tUtm6onQpFgE9Z
nvJlPB9cxMg9MAWckCG8kueftXccUCTqmiLttHX6ecZdyy71oI9pVSI3dJFatfL8
E0IZapYwER6q2NoRsexulieBPuKOmzGEGpFYqwZIr3TgWV4ZFa2vdqLsTAefZshT
Yj6drSNC6HyTfFbiDeXieWBvMsTi4UP4XRAnet8W9gI3mT452pqniPb8jnK8CFD7
nefp5aY0wYGF7k37CCzXU61eNs6iJIO4HTbhr98vZ2Rct+FfNkuwd8kpUngtmuRJ
9G1d1Lv3c8LnLRK8AVMV91ToiJV668k=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:18:20 2026 by rpki-client