Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ded64c25-2dd3-32a9-9fab-ab35612645cd.roa
File:                     ded64c25-2dd3-32a9-9fab-ab35612645cd.roa (raw, json)
Hash identifier:          jTUQlKbXq0lZWtmU2SN6XO9JJjS+dlu563r7HmKJc60=
Subject key identifier:   EB:15:F2:B9:80:C4:EE:C2:2A:45:6F:C6:11:77:8B:89:03:14:15:CF
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E815FBD40CDB90CE63BE6F2C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ded64c25-2dd3-32a9-9fab-ab35612645cd.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     0
IP address blocks:        208.27.184.0/22 maxlen: 22
                          208.30.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:bd:40:cd:b9:0c:e6:3b:e6:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=1b3c81f2-6639-4b45-84e5-8cbe00938cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:76:7f:f7:fb:5d:1a:25:95:27:38:a4:d8:80:
                    3f:c1:5f:df:d6:08:b2:ff:98:58:8d:21:71:26:ea:
                    02:20:d4:79:b0:0c:04:a1:96:e2:9b:44:c7:79:b7:
                    1c:0a:2b:7f:31:7a:aa:27:bf:4d:0e:9f:63:2a:2c:
                    43:28:d1:fc:22:05:39:6c:62:a6:99:13:72:fe:71:
                    f9:7f:c5:85:3a:32:b7:bd:ba:39:9a:fc:57:78:bc:
                    d9:7d:d6:1b:aa:08:ed:ed:07:8d:9e:00:0c:d8:30:
                    8a:97:07:21:68:f9:33:90:c2:ae:a1:bd:b0:65:f8:
                    c1:4a:e0:10:78:d0:21:27:32:25:af:4f:4f:0f:68:
                    7d:33:fa:b7:f0:43:8f:72:b9:7c:d4:f7:a3:58:79:
                    0b:f1:4f:99:84:2f:32:12:89:ff:f6:6b:57:4a:e7:
                    4f:5d:a8:21:fe:bd:87:b7:fa:db:7b:57:c4:d8:b6:
                    a5:1e:7b:fc:1a:0e:f3:45:f9:23:c7:1a:33:83:a5:
                    01:28:ad:34:a9:4a:e1:5c:2b:17:5a:80:ef:0a:e3:
                    7c:be:cb:7e:97:b2:a5:bb:fe:64:c3:3f:56:8e:37:
                    cc:84:a6:67:43:50:06:08:73:ab:60:2c:a7:5f:b3:
                    84:5a:f5:6e:9f:69:30:d2:d1:e9:46:1d:16:92:80:
                    87:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:15:F2:B9:80:C4:EE:C2:2A:45:6F:C6:11:77:8B:89:03:14:15:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/ded64c25-2dd3-32a9-9fab-ab35612645cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.27.184.0/22
                  208.30.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:8d:ac:72:fb:8c:9e:fd:c1:66:6a:61:d8:55:86:70:80:7a:
         ca:b1:8a:31:ef:0f:2a:f9:0c:6b:e1:ab:03:f7:f5:b5:53:83:
         ae:76:71:07:71:26:da:40:72:d7:61:e5:b0:e2:81:9b:58:e6:
         41:f1:47:2c:3d:30:da:64:16:fd:7f:a7:ae:94:d0:99:f7:dd:
         f2:fd:c0:9c:0e:01:b0:3b:fd:ca:3c:5b:e5:14:c9:c2:84:b5:
         ef:ca:bf:47:e3:cb:e3:17:be:9e:9a:92:d7:aa:dc:58:03:70:
         e2:0f:26:b6:d8:bc:7b:05:3d:7b:48:40:93:c1:bb:d1:7e:07:
         5c:2c:76:0f:a2:29:52:b6:1d:77:5e:7a:a1:33:3a:8a:76:d7:
         4b:62:09:75:53:8a:61:60:5f:54:5f:36:39:de:91:88:1e:fd:
         cd:bc:2c:af:01:29:59:66:b8:ca:84:42:89:b8:f3:4b:4d:34:
         c3:d2:2f:68:e7:f2:e8:f3:4c:b8:13:3d:64:92:aa:01:b7:2e:
         09:7a:ee:22:00:69:6e:bf:39:71:7a:8a:94:7c:32:d3:6d:86:
         5a:8b:3c:c7:8a:42:77:fd:34:59:7b:36:6f:5b:1f:ec:94:6e:
         11:c0:d1:ee:bd:f8:39:8b:60:7a:19:80:e2:15:85:ed:25:34:
         f6:c0:bb:69
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6BX71AzbkM5jvm8sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk
MWIzYzgxZjItNjYzOS00YjQ1LTg0ZTUtOGNiZTAwOTM4Y2I2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHZ/9/tdGiWVJzik2IA/wV/f1giy/5hYjSFx
JuoCINR5sAwEoZbim0THebccCit/MXqqJ79NDp9jKixDKNH8IgU5bGKmmRNy/nH5
f8WFOjK3vbo5mvxXeLzZfdYbqgjt7QeNngAM2DCKlwchaPkzkMKuob2wZfjBSuAQ
eNAhJzIlr09PD2h9M/q38EOPcrl81PejWHkL8U+ZhC8yEon/9mtXSudPXagh/r2H
t/rbe1fE2LalHnv8Gg7zRfkjxxozg6UBKK00qUrhXCsXWoDvCuN8vst+l7Klu/5k
wz9WjjfMhKZnQ1AGCHOrYCynX7OEWvVun2kw0tHpRh0WkoCH9QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFOsV8rmAxO7CKkVvxhF3i4kDFBXPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGVkNjRjMjUtMmRkMy0z
MmE5LTlmYWItYWIzNTYxMjY0NWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQC0Bu4AwQF
0B5gMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAA6NrHL7jJ79wWZqYdhVhnCAesqxijHvDyr5DGvhqwP39bVT
g652cQdxJtpActdh5bDigZtY5kHxRyw9MNpkFv1/p66U0Jn33fL9wJwOAbA7/co8
W+UUycKEte/Kv0fjy+MXvp6akteq3FgDcOIPJrbYvHsFPXtIQJPBu9F+B1wsdg+i
KVK2HXdeeqEzOop210tiCXVTimFgX1RfNjnekYge/c28LK8BKVlmuMqEQom480tN
NMPSL2jn8ujzTLgTPWSSqgG3Lgl67iIAaW6/OXF6ipR8MtNthlqLPMeKQnf9NFl7
Nm9bH+yUbhHA0e69+DmLYHoZgOIVhe0lNPbAu2k=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:23:31 2026 by rpki-client