Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/5193c73b-ce95-37d2-ae2e-5f1b5a8a9d87.roa
File:                     5193c73b-ce95-37d2-ae2e-5f1b5a8a9d87.roa (raw, json)
Hash identifier:          WvAw3UcOuk4Xn0/DGO65xVld8sPjnDphpm/stcXiHnI=
Subject key identifier:   08:D6:45:59:86:C8:71:B8:43:45:32:62:37:32:C2:74:AC:8D:63:A2
Certificate issuer:       /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial:       010D0C9F4328584E921F9F868A42F001D7454A40
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/5193c73b-ce95-37d2-ae2e-5f1b5a8a9d87.roa
Signing time:             Tue 21 Jul 2026 09:00:12 +0000
ROA not before:           Tue 21 Jul 2026 09:00:12 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     0
IP address blocks:        45.43.7.0/24 maxlen: 24
                          45.43.8.0/24 maxlen: 24
                          66.11.125.0/24 maxlen: 24
                          104.192.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:1f:9f:86:8a:42:f0:01:d7:45:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
        Validity
            Not Before: Jul 21 09:00:12 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=6cec7d81-2206-4f1e-9f0f-2171939d207d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:44:82:ca:9f:74:24:e4:36:47:5e:71:6d:60:
                    0e:b3:ee:ae:3c:0f:6b:60:bd:9a:ca:fb:a5:f0:f2:
                    8f:5c:04:d0:28:e8:a5:c0:ea:a8:b8:df:58:07:e1:
                    9a:14:0b:7a:46:70:36:65:40:28:09:50:e5:94:a1:
                    29:a3:6c:f3:d2:7f:e5:90:6b:d5:42:70:29:23:b3:
                    a9:1e:fc:5d:e2:37:b7:43:f1:3d:64:f5:15:cb:91:
                    99:3e:0e:ee:38:95:8e:34:ac:78:5a:b9:ae:85:53:
                    9d:5e:9e:f4:c5:b8:00:d1:de:c3:16:0a:77:01:3f:
                    e8:4e:be:e2:c7:c0:eb:b5:e9:de:66:c3:9e:9f:ac:
                    9c:3d:00:8e:05:25:cb:be:9e:5a:31:e7:a8:bf:1e:
                    8d:44:7c:68:1a:d4:ad:8b:ec:01:15:ed:e9:17:b5:
                    10:41:aa:0b:f0:d2:f4:57:ce:74:56:22:be:01:e4:
                    cf:2c:9d:3f:be:97:de:7b:e4:8f:e7:be:1e:0c:53:
                    fe:6a:a5:ee:09:4d:20:8c:1a:2d:73:c7:ae:70:6b:
                    5c:48:52:c0:be:4a:40:ee:7d:37:e7:40:08:c4:4f:
                    ad:1a:bc:f2:bf:6c:da:9a:72:3a:7a:18:04:3b:20:
                    dd:f2:fb:58:80:17:17:96:59:9f:28:9b:ac:1b:3c:
                    cd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D6:45:59:86:C8:71:B8:43:45:32:62:37:32:C2:74:AC:8D:63:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/5193c73b-ce95-37d2-ae2e-5f1b5a8a9d87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl

            X509v3 Authority Key Identifier:
                keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.7.0-45.43.8.255
                  66.11.125.0/24
                  104.192.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:81:7b:ee:2b:f4:5a:72:b7:db:26:9f:65:71:85:fb:45:45:
         e4:0d:6e:9d:60:14:1f:24:b9:fa:b7:75:cf:fb:48:20:fb:f7:
         d1:9f:2f:8b:19:ab:87:0c:f8:5c:f1:28:1a:29:7d:85:d9:59:
         23:5b:ec:d4:5d:a3:a2:fa:0f:1d:e7:df:d3:d6:f7:7a:0e:cb:
         72:e8:d4:f5:43:84:e1:ef:6e:12:dd:99:3c:ad:79:65:1a:b4:
         5b:56:73:80:c5:db:54:c6:49:d1:6d:49:3e:51:31:81:dd:8a:
         08:d7:53:18:cb:e0:40:51:04:48:5f:11:16:8c:c8:eb:e0:d9:
         9b:38:a3:9e:10:b9:73:ec:95:53:55:1e:2f:14:5f:60:df:5e:
         6a:80:92:a9:7d:26:91:42:d2:f8:6a:e7:14:4f:61:8f:a5:89:
         6e:5d:cd:59:95:50:36:79:66:51:02:7e:7a:53:75:ab:bd:7c:
         df:b5:d2:e1:42:1b:bd:b2:f3:9d:51:35:b8:cc:39:52:06:ae:
         ff:a6:e7:39:a3:97:a7:85:ee:89:54:2c:20:5c:fe:d2:31:49:
         31:ca:95:9b:8c:1b:3c:7d:b5:37:44:17:cd:42:06:8a:f4:fe:
         a0:39:b4:f3:5a:c7:43:91:a7:21:1f:46:9c:6c:e2:b5:5a:04:
         25:57:fb:fa
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWE6SH5+GikLwAddFSkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTkwZjAwNmEtYjEwOC00NzU3LTlkZmQtYjM2Mzc2NTM0
NjU4MB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk
NmNlYzdkODEtMjIwNi00ZjFlLTlmMGYtMjE3MTkzOWQyMDdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqESCyp90JOQ2R15xbWAOs+6uPA9rYL2ayvul
8PKPXATQKOilwOqouN9YB+GaFAt6RnA2ZUAoCVDllKEpo2zz0n/lkGvVQnApI7Op
Hvxd4je3Q/E9ZPUVy5GZPg7uOJWONKx4WrmuhVOdXp70xbgA0d7DFgp3AT/oTr7i
x8DrteneZsOen6ycPQCOBSXLvp5aMeeovx6NRHxoGtSti+wBFe3pF7UQQaoL8NL0
V850ViK+AeTPLJ0/vpfee+SP574eDFP+aqXuCU0gjBotc8eucGtcSFLAvkpA7n03
50AIxE+tGrzyv2zamnI6ehgEOyDd8vtYgBcXllmfKJusGzzNfwIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFAjWRVmGyHG4Q0UyYjcywnSsjWOiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBm
MDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYzNzY1MzQ2NTgvNTE5M2M3M2ItY2U5NS0z
N2QyLWFlMmUtNWYxYjVhOGE5ZDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTkwZjAwNmEtYjEwOC00NzU3LTlk
ZmQtYjM2Mzc2NTM0NjU4L2E5MGYwMDZhLWIxMDgtNDc1Ny05ZGZkLWIzNjM3NjUz
NDY1OC5jcmwwHwYDVR0jBBgwFoAUVrt1Gou+kg2JmSYj+7Wl+6n3GPgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hOTBmMDA2YS1iMTA4LTQ3NTctOWRmZC1iMzYz
NzY1MzQ2NTguY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAAtKwcD
BAAtKwgDBABCC30DBABowGcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAnIF77iv0WnK32yafZXGF+0VF5A1u
nWAUHyS5+rd1z/tIIPv30Z8vixmrhwz4XPEoGil9hdlZI1vs1F2jovoPHeff09b3
eg7LcujU9UOE4e9uEt2ZPK15ZRq0W1ZzgMXbVMZJ0W1JPlExgd2KCNdTGMvgQFEE
SF8RFozI6+DZmzijnhC5c+yVU1UeLxRfYN9eaoCSqX0mkULS+GrnFE9hj6WJbl3N
WZVQNnlmUQJ+elN1q71837XS4UIbvbLznVE1uMw5Ugau/6bnOaOXp4XuiVQsIFz+
0jFJMcqVm4wbPH21N0QXzUIGivT+oDm081rHQ5GnIR9GnGzitVoEJVf7+g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:09:33 2026 by rpki-client