Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/ea7fe250-4fc0-3daa-81fc-5b1fa29e66b7.roa
File:                     ea7fe250-4fc0-3daa-81fc-5b1fa29e66b7.roa (raw, json)
Hash identifier:          3Zhmr6Pb9kc8ep3CXWQ++OFaFOAPadYK7t66cMA+rDY=
Subject key identifier:   D0:CE:F1:99:61:36:6F:9B:57:97:D7:A4:3D:9D:D9:69:82:BE:1B:E4
Certificate issuer:       /CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Certificate serial:       010D0C9F4328584E885A6210DF2C93BEEA257E80
Authority key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/ea7fe250-4fc0-3daa-81fc-5b1fa29e66b7.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     29802
IP address blocks:        206.162.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:62:10:df:2c:93:be:ea:25:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=0aaf4cce-f488-47ab-9eba-4b717aea8060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b0:5f:da:1b:d5:84:68:49:cd:f2:3b:9c:17:
                    ff:ab:c9:1f:f7:7a:96:57:42:23:c5:26:6e:24:ea:
                    7f:04:04:a5:08:e9:2c:af:4c:21:f8:53:16:f5:70:
                    40:4c:6c:ce:e5:e4:d6:d0:63:81:c9:1b:52:ba:48:
                    44:03:c1:46:e5:d5:d4:89:d4:c4:7d:75:e6:bf:ca:
                    a3:4b:b3:a5:70:56:41:5e:3d:1e:a0:0c:89:21:f9:
                    27:89:28:06:a1:05:01:c7:4f:3a:00:81:12:84:31:
                    89:6e:dd:df:cc:39:88:34:6e:4e:ff:f1:8f:69:54:
                    46:ee:4a:34:02:27:59:fc:10:4b:28:2e:75:f1:a1:
                    7d:6f:49:55:7e:48:30:28:80:d7:f4:5d:c4:88:d9:
                    81:a8:4e:e8:77:84:c7:14:d4:d5:ca:e6:2c:89:a2:
                    8e:61:56:b6:65:b2:f4:81:b6:04:19:cf:26:5f:2f:
                    49:54:e7:55:69:aa:0c:bd:d1:27:f7:d0:c9:3a:ee:
                    07:ea:4d:a6:0f:a0:09:d7:e3:4c:8d:5c:3a:04:62:
                    1e:1e:15:84:e0:8e:08:d1:c1:f6:a8:86:47:c4:d0:
                    f6:a6:e0:e8:df:c0:21:84:ec:27:84:12:f9:d3:d4:
                    b6:4c:b5:8d:82:62:48:26:0c:4a:e3:0b:5a:69:8f:
                    fa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CE:F1:99:61:36:6F:9B:57:97:D7:A4:3D:9D:D9:69:82:BE:1B:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/ea7fe250-4fc0-3daa-81fc-5b1fa29e66b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl

            X509v3 Authority Key Identifier:
                keyid:37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.162.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         f0:02:d5:86:33:ba:1f:94:e4:eb:9b:c4:ac:ce:62:b3:b8:6a:
         e4:eb:21:04:bb:51:ce:8e:32:7b:3c:a0:0d:4e:6d:03:ea:68:
         29:c4:de:75:70:84:00:f7:58:aa:f0:f5:b6:24:da:40:c0:9e:
         b6:dc:33:26:50:8f:8b:8f:26:91:26:bd:15:e7:47:b4:82:ac:
         3c:d5:84:13:14:80:1b:88:ca:9d:84:43:97:0f:4f:0e:77:14:
         fa:2b:dd:24:af:d6:03:f6:4f:71:c4:89:aa:9f:7e:e0:dc:fe:
         78:40:68:a0:31:db:e0:18:46:af:38:00:0d:b6:00:bd:03:91:
         9a:f2:a4:a8:68:08:3e:40:6d:bc:01:d8:ce:a8:55:82:f0:15:
         ce:31:90:6a:e7:3e:3f:27:9f:1b:69:81:3c:41:7d:cf:84:4f:
         73:b4:88:b0:ba:59:32:22:d8:70:17:fc:84:c2:b7:11:39:3b:
         db:48:c8:2f:27:1a:f2:f2:1f:c6:bd:c1:68:26:a0:c2:ac:74:
         36:79:83:c3:1e:52:a4:2a:c9:fb:86:bb:2c:6b:d8:6e:d4:d8:
         b6:84:69:6c:31:08:b6:1d:14:9b:af:02:b2:a0:97:24:a4:d4:
         87:b7:1f:4b:8f:d7:0d:81:4c:3f:93:e7:b7:e1:01:f3:32:31:
         9f:7b:47:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWmIQ3yyTvuolfoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2YTEzYTItZmJmYi00OWVkLTg5YzMtMjMzYzc0NWZm
YTUyMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk
MGFhZjRjY2UtZjQ4OC00N2FiLTllYmEtNGI3MTdhZWE4MDYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLBf2hvVhGhJzfI7nBf/q8kf93qWV0IjxSZu
JOp/BASlCOksr0wh+FMW9XBATGzO5eTW0GOByRtSukhEA8FG5dXUidTEfXXmv8qj
S7OlcFZBXj0eoAyJIfkniSgGoQUBx086AIEShDGJbt3fzDmING5O//GPaVRG7ko0
AidZ/BBLKC518aF9b0lVfkgwKIDX9F3EiNmBqE7od4THFNTVyuYsiaKOYVa2ZbL0
gbYEGc8mXy9JVOdVaaoMvdEn99DJOu4H6k2mD6AJ1+NMjVw6BGIeHhWE4I4I0cH2
qIZHxND2puDo38AhhOwnhBL509S2TLWNgmJIJgxK4wtaaY/6BwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNDO8ZlhNm+bV5fXpD2d2WmCvhvkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMjZh
MTNhMi1mYmZiLTQ5ZWQtODljMy0yMzNjNzQ1ZmZhNTIvZWE3ZmUyNTAtNGZjMC0z
ZGFhLTgxZmMtNWIxZmEyOWU2NmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjI2YTEzYTItZmJmYi00OWVkLTg5
YzMtMjMzYzc0NWZmYTUyLzIyNmExM2EyLWZiZmItNDllZC04OWMzLTIzM2M3NDVm
ZmE1Mi5jcmwwHwYDVR0jBBgwFoAUN5551oIyh9VQnzmjJFrhIZTZyhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMjZhMTNhMi1mYmZiLTQ5ZWQtODljMy0yMzNj
NzQ1ZmZhNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzqL4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAPAC1YYzuh+U5OubxKzOYrO4auTrIQS7Uc6OMns8oA1ObQPqaCnE3nVw
hAD3WKrw9bYk2kDAnrbcMyZQj4uPJpEmvRXnR7SCrDzVhBMUgBuIyp2EQ5cPTw53
FPor3SSv1gP2T3HEiaqffuDc/nhAaKAx2+AYRq84AA22AL0DkZrypKhoCD5AbbwB
2M6oVYLwFc4xkGrnPj8nnxtpgTxBfc+ET3O0iLC6WTIi2HAX/ITCtxE5O9tIyC8n
GvLyH8a9wWgmoMKsdDZ5g8MeUqQqyfuGuyxr2G7U2LaEaWwxCLYdFJuvArKglySk
1Ie3H0uP1w2BTD+T57fhAfMyMZ97R/o=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:13:11 2026 by rpki-client