Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/2a907f56-95b8-31df-900b-1c665ab6f632.roa
File:                     2a907f56-95b8-31df-900b-1c665ab6f632.roa (raw, json)
Hash identifier:          U8T8PHC72aW2jjYgRmEo2oIgc2xG35FvLHpajvdY8Ss=
Subject key identifier:   B8:57:15:CC:DA:11:09:48:D2:71:DB:6D:84:0C:07:96:0E:B5:27:58
Certificate issuer:       /CN=329c727b-a867-426a-ad3d-167aed3107dd
Certificate serial:       010D0C9F4328584D93254A97663341429145EE00
Authority key identifier: 3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/2a907f56-95b8-31df-900b-1c665ab6f632.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     6327
IP address blocks:        96.48.0.0/13 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:4a:97:66:33:41:42:91:45:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329c727b-a867-426a-ad3d-167aed3107dd
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=e5768040-5494-425c-8c88-206e75868b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ce:2d:83:2c:38:45:f4:1d:a0:e9:56:72:a0:
                    b4:bb:eb:48:4c:00:4f:55:ac:ec:87:36:a5:cc:ab:
                    1a:fd:5a:ba:0f:a9:8c:c3:b6:ae:7f:f9:ed:d0:9a:
                    0f:b9:c6:61:ce:fb:31:2a:7b:cc:d9:dc:68:ba:18:
                    9c:31:4d:98:74:86:f0:26:da:7d:7f:3d:93:3a:31:
                    cd:c1:8d:22:4f:21:51:a1:f3:06:9f:60:31:15:7c:
                    cb:52:1b:b2:05:b2:9c:33:e9:b3:ca:96:ef:56:9c:
                    b8:d5:d1:e4:51:c8:cf:64:23:84:3a:98:77:eb:cc:
                    05:4b:02:cc:46:e6:07:ce:90:c3:d0:e5:24:c6:70:
                    d0:e6:f9:0a:86:c9:02:ec:0d:a8:d4:de:ee:98:11:
                    e7:d4:b0:16:50:4e:09:a4:12:5f:23:57:3f:af:0c:
                    81:f8:a1:c9:b6:50:3b:7b:4f:84:96:fa:f2:22:9f:
                    a3:e5:8e:65:7f:1d:63:76:c7:15:45:fa:2a:02:a2:
                    0d:ba:04:3b:4a:d1:a0:09:13:c3:77:05:95:d1:17:
                    e7:6d:ba:1d:d0:84:c1:65:14:0b:23:8c:02:a6:f0:
                    5c:10:0b:eb:9d:57:0d:98:8b:f1:b8:fc:d8:10:69:
                    3a:60:b6:68:b1:0d:c9:79:4b:45:93:c8:c6:0a:41:
                    41:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:57:15:CC:DA:11:09:48:D2:71:DB:6D:84:0C:07:96:0E:B5:27:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/2a907f56-95b8-31df-900b-1c665ab6f632.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl

            X509v3 Authority Key Identifier:
                keyid:3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.48.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:c5:ec:0d:5b:a7:b8:3c:a9:f6:24:a5:52:87:e0:8b:53:c5:
         c1:ff:ac:70:a2:fb:e2:d9:fe:d7:a9:33:eb:98:e3:34:3f:18:
         55:f2:4e:cd:2a:da:ff:01:32:07:bb:5d:4c:36:68:8c:ff:d3:
         53:b3:99:d6:c8:8b:a2:d0:0f:0a:7e:a0:a1:d1:5a:47:0e:24:
         17:84:5d:9c:a9:83:d8:3b:86:4b:82:cc:15:7e:8f:4e:a0:1e:
         62:d8:8d:5b:30:2b:38:82:f2:fc:18:35:79:1a:52:d4:47:de:
         e0:7c:7c:af:6a:2e:a2:64:35:7c:b6:02:a1:fa:59:a0:d1:d2:
         f6:67:e1:49:6d:a2:58:54:34:ec:b4:35:e1:a5:d3:28:a8:fc:
         44:91:c5:78:2f:73:0a:fd:65:74:23:93:18:09:e6:01:c4:b5:
         4b:9d:9b:a0:de:81:17:ab:a5:18:4c:ec:fd:b3:e6:61:5e:82:
         b3:3a:1e:4d:94:8a:44:90:e0:db:68:9f:9a:66:6d:02:29:23:
         c4:9f:4f:28:5f:c3:aa:3e:6b:40:84:a3:0f:42:0f:f2:18:31:
         04:f3:38:ab:d0:d3:fd:7c:19:9c:9a:d6:d2:02:ee:5e:bb:6f:
         6b:a0:21:3a:ac:fa:fa:66:4d:30:95:0b:56:80:dc:89:1c:29:
         ca:91:2b:83
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2TJUqXZjNBQpFF7gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzI5YzcyN2ItYTg2Ny00MjZhLWFkM2QtMTY3YWVkMzEw
N2RkMB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk
ZTU3NjgwNDAtNTQ5NC00MjVjLThjODgtMjA2ZTc1ODY4Yjg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0c4tgyw4RfQdoOlWcqC0u+tITABPVazshzal
zKsa/Vq6D6mMw7auf/nt0JoPucZhzvsxKnvM2dxouhicMU2YdIbwJtp9fz2TOjHN
wY0iTyFRofMGn2AxFXzLUhuyBbKcM+mzypbvVpy41dHkUcjPZCOEOph368wFSwLM
RuYHzpDD0OUkxnDQ5vkKhskC7A2o1N7umBHn1LAWUE4JpBJfI1c/rwyB+KHJtlA7
e0+ElvryIp+j5Y5lfx1jdscVRfoqAqINugQ7StGgCRPDdwWV0Rfnbbod0ITBZRQL
I4wCpvBcEAvrnVcNmIvxuPzYEGk6YLZosQ3JeUtFk8jGCkFBxQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLhXFczaEQlI0nHbbYQMB5YOtSdYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjlj
NzI3Yi1hODY3LTQyNmEtYWQzZC0xNjdhZWQzMTA3ZGQvMmE5MDdmNTYtOTViOC0z
MWRmLTkwMGItMWM2NjVhYjZmNjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzI5YzcyN2ItYTg2Ny00MjZhLWFk
M2QtMTY3YWVkMzEwN2RkLzMyOWM3MjdiLWE4NjctNDI2YS1hZDNkLTE2N2FlZDMx
MDdkZC5jcmwwHwYDVR0jBBgwFoAUPZZSNdHOoxLv1MM8HGrn4fAf9SIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjljNzI3Yi1hODY3LTQyNmEtYWQzZC0xNjdh
ZWQzMTA3ZGQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDYDAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAJsXsDVunuDyp9iSlUofgi1PFwf+scKL74tn+16kz65jjND8YVfJOzSra
/wEyB7tdTDZojP/TU7OZ1siLotAPCn6godFaRw4kF4RdnKmD2DuGS4LMFX6PTqAe
YtiNWzArOILy/Bg1eRpS1Efe4Hx8r2ouomQ1fLYCofpZoNHS9mfhSW2iWFQ07LQ1
4aXTKKj8RJHFeC9zCv1ldCOTGAnmAcS1S52boN6BF6ulGEzs/bPmYV6CszoeTZSK
RJDg22ifmmZtAikjxJ9PKF/Dqj5rQISjD0IP8hgxBPM4q9DT/XwZnJrW0gLuXrtv
a6AhOqz6+mZNMJULVoDciRwpypErgw==
-----END CERTIFICATE-----
Generated at Wed May 13 14:23:56 2026 by rpki-client