Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/fd5c5b02-d7bc-32a7-9a36-ea1d0cfa4470.roa
File:                     fd5c5b02-d7bc-32a7-9a36-ea1d0cfa4470.roa (raw, json)
Hash identifier:          H2u+asRayUF46ICvXweCv4YLOyTXaFORtRFps9ARqtg=
Subject key identifier:   28:1B:A6:4D:15:A7:2A:6E:7B:EC:F3:34:15:2D:AA:A3:30:1E:07:7E
Certificate issuer:       /CN=f4ef9ae2-f027-4028-a705-db1e3463a382
Certificate serial:       010D0C9F4328584E8DEFA2D398D11A7573226F40
Authority key identifier: 78:43:63:5F:35:F7:A5:B6:6E:39:7B:D3:62:1B:21:CC:A2:E5:92:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/fd5c5b02-d7bc-32a7-9a36-ea1d0cfa4470.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     40339
IP address blocks:        202.83.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/f4ef9ae2-f027-4028-a705-db1e3463a382.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/f4ef9ae2-f027-4028-a705-db1e3463a382.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:a2:d3:98:d1:1a:75:73:22:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4ef9ae2-f027-4028-a705-db1e3463a382
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=042efee7-34fd-4f3d-bba1-76d4ceeaf8dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8c:3e:80:4d:f1:d5:b0:76:8a:b2:4a:f3:01:
                    9d:55:b7:37:d1:3f:4d:c2:d5:5b:24:c2:01:8d:07:
                    44:8d:82:39:de:48:e8:ee:ee:7d:ab:f6:37:39:62:
                    6d:d2:03:da:56:e3:57:0f:c7:e7:52:4b:fd:df:c4:
                    19:15:a2:ad:77:90:63:19:ec:48:9f:7c:9b:80:7c:
                    ca:34:4e:17:d3:be:a8:13:d5:e1:99:38:dc:e4:22:
                    9f:d2:fa:1f:f4:56:72:0d:30:58:9e:a8:28:6f:74:
                    63:2e:b0:df:f2:28:55:da:47:21:1c:63:a2:9a:88:
                    06:e9:33:18:97:90:f5:10:6a:32:94:69:09:c1:17:
                    be:32:41:a9:38:b5:85:8d:cc:b1:71:1e:32:bd:e5:
                    4c:aa:44:f4:9c:aa:b8:69:3e:e8:35:e1:a8:64:f1:
                    b9:0c:86:c3:08:69:ed:c9:fb:6a:56:be:28:90:6b:
                    5a:3e:89:d2:af:6b:2d:cf:be:d4:f0:dc:8d:50:19:
                    92:3f:49:70:42:a2:37:df:0d:d5:86:49:bb:82:57:
                    1e:f3:80:33:e0:c6:8f:11:23:fc:42:d3:2a:1f:bd:
                    b2:6d:54:65:3e:2d:d8:1d:86:f7:c0:02:d3:df:88:
                    52:29:6a:47:55:81:8c:3e:0c:28:e4:64:33:2b:48:
                    26:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1B:A6:4D:15:A7:2A:6E:7B:EC:F3:34:15:2D:AA:A3:30:1E:07:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/fd5c5b02-d7bc-32a7-9a36-ea1d0cfa4470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/f4ef9ae2-f027-4028-a705-db1e3463a382.crl

            X509v3 Authority Key Identifier:
                keyid:78:43:63:5F:35:F7:A5:B6:6E:39:7B:D3:62:1B:21:CC:A2:E5:92:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.83.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:be:6f:34:b1:87:08:6e:7c:42:a5:19:45:29:61:20:6b:00:
         10:99:2e:92:3e:df:6e:d5:92:7f:0f:fb:47:0e:b2:96:8b:42:
         87:21:79:0f:cc:83:37:55:44:c9:98:77:54:fc:0a:cc:f0:35:
         42:d7:29:a2:a6:b3:e2:27:60:ab:4d:8f:d6:b5:65:06:77:68:
         6c:c6:3e:bc:96:d9:84:9f:15:e2:98:9a:8b:57:ec:c1:fd:6e:
         15:ab:f2:b2:27:c2:16:1d:d7:e9:59:3e:c4:f6:8a:72:7e:2a:
         8e:a4:de:07:5f:48:af:33:2e:af:fa:dd:c0:29:f8:0f:7e:75:
         03:25:de:a4:28:5f:da:13:55:1f:09:4f:98:50:9e:65:b7:14:
         29:f5:08:83:b9:32:59:67:a9:34:11:82:d6:e9:6c:64:af:a7:
         30:b6:19:3f:04:41:fd:a4:ae:56:09:cc:63:13:f2:58:84:a0:
         04:38:32:99:1c:64:76:af:26:31:77:78:f8:2c:7e:00:74:e6:
         67:87:e1:9f:36:2a:7a:50:7f:c8:1e:0d:7b:53:54:7f:f3:0d:
         d7:0d:0d:0b:f3:d9:93:8b:1c:59:ea:43:b1:c1:7f:8a:b2:c1:
         f1:41:ef:f5:8e:18:ff:73:0a:f8:ab:62:48:bd:db:7e:dc:c6:
         55:1e:f4:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N76LTmNEadXMib0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjRlZjlhZTItZjAyNy00MDI4LWE3MDUtZGIxZTM0NjNh
MzgyMB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk
MDQyZWZlZTctMzRmZC00ZjNkLWJiYTEtNzZkNGNlZWFmOGRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4w+gE3x1bB2irJK8wGdVbc30T9NwtVbJMIB
jQdEjYI53kjo7u59q/Y3OWJt0gPaVuNXD8fnUkv938QZFaKtd5BjGexIn3ybgHzK
NE4X076oE9XhmTjc5CKf0vof9FZyDTBYnqgob3RjLrDf8ihV2kchHGOimogG6TMY
l5D1EGoylGkJwRe+MkGpOLWFjcyxcR4yveVMqkT0nKq4aT7oNeGoZPG5DIbDCGnt
yftqVr4okGtaPonSr2stz77U8NyNUBmSP0lwQqI33w3Vhkm7glce84Az4MaPESP8
QtMqH72ybVRlPi3YHYb3wALT34hSKWpHVYGMPgwo5GQzK0gmSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCgbpk0Vpypue+zzNBUtqqMwHgd+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mNGVm
OWFlMi1mMDI3LTQwMjgtYTcwNS1kYjFlMzQ2M2EzODIvZmQ1YzViMDItZDdiYy0z
MmE3LTlhMzYtZWExZDBjZmE0NDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjRlZjlhZTItZjAyNy00MDI4LWE3
MDUtZGIxZTM0NjNhMzgyL2Y0ZWY5YWUyLWYwMjctNDAyOC1hNzA1LWRiMWUzNDYz
YTM4Mi5jcmwwHwYDVR0jBBgwFoAUeENjXzX3pbZuOXvTYhshzKLlkjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mNGVmOWFlMi1mMDI3LTQwMjgtYTcwNS1kYjFl
MzQ2M2EzODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDylNwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHq+bzSxhwhufEKlGUUpYSBrABCZLpI+327Vkn8P+0cOspaLQocheQ/M
gzdVRMmYd1T8CszwNULXKaKms+InYKtNj9a1ZQZ3aGzGPryW2YSfFeKYmotX7MH9
bhWr8rInwhYd1+lZPsT2inJ+Ko6k3gdfSK8zLq/63cAp+A9+dQMl3qQoX9oTVR8J
T5hQnmW3FCn1CIO5MllnqTQRgtbpbGSvpzC2GT8EQf2krlYJzGMT8liEoAQ4Mpkc
ZHavJjF3ePgsfgB05meH4Z82KnpQf8geDXtTVH/zDdcNDQvz2ZOLHFnqQ7HBf4qy
wfFB7/WOGP9zCvirYki9237cxlUe9AA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:54:04 2026 by rpki-client