Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/01e74309-f261-33e3-bf2b-9e169f4a42bd.roa
File:                     01e74309-f261-33e3-bf2b-9e169f4a42bd.roa (raw, json)
Hash identifier:          ToMkAjMHpXKYky5+zDcexlSEbg7kTn0EDvqM6V+BOmE=
Subject key identifier:   43:E5:BF:8B:57:66:29:4B:D3:79:2E:DB:CD:F4:0E:8F:18:D0:DC:00
Certificate issuer:       /CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
Certificate serial:       010D0C9F4328584E3A2F2A40854E37E928CDA680
Authority key identifier: E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/01e74309-f261-33e3-bf2b-9e169f4a42bd.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     27419
IP address blocks:        64.82.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:2a:40:85:4e:37:e9:28:cd:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=7a4089b5-45ba-4089-bb4d-b62657fc16c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b5:8a:80:14:d9:51:ac:78:ad:b3:55:91:5b:
                    e4:6e:9c:52:84:2e:b8:0d:11:c4:11:10:00:fb:69:
                    3c:5e:75:69:37:37:8a:f1:c7:f9:04:99:1a:09:52:
                    e5:2a:d5:96:c9:85:dd:b0:35:f2:3f:79:c8:b9:f5:
                    2a:c4:37:a3:8b:bc:b6:4c:c2:b4:01:46:89:80:df:
                    e7:56:a5:2d:43:c0:3b:33:c7:3a:f7:75:05:3b:57:
                    f6:26:90:c4:4c:94:10:10:92:7c:46:f5:09:e4:6f:
                    c8:7e:8e:66:32:67:4d:92:64:b6:90:8b:0e:09:f7:
                    61:41:7e:98:1d:a8:30:2c:46:98:b5:fb:56:5b:76:
                    27:21:df:97:c5:c4:a3:da:d9:54:6d:ae:e8:94:d5:
                    0f:82:80:38:46:7b:da:8d:2a:30:7d:a8:6d:30:1f:
                    41:45:4c:a1:c9:d2:3d:cb:56:74:5e:1a:37:dd:eb:
                    a7:15:c0:5c:2d:c8:e8:33:a6:a2:72:01:07:19:e1:
                    e8:5d:57:68:7d:c3:f9:12:71:48:7c:79:c8:d2:ee:
                    66:8d:aa:8f:db:dd:c9:dc:7b:5c:f0:fa:03:75:ca:
                    5b:1a:34:20:36:a6:26:c8:b3:a7:c9:cc:87:01:5f:
                    55:b4:76:a8:ac:e2:f5:8d:8d:3f:75:ab:1b:4d:e3:
                    ce:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E5:BF:8B:57:66:29:4B:D3:79:2E:DB:CD:F4:0E:8F:18:D0:DC:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/01e74309-f261-33e3-bf2b-9e169f4a42bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl

            X509v3 Authority Key Identifier:
                keyid:E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.82.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:2c:0e:86:78:05:31:4b:7d:0b:b2:a9:d3:ba:84:ec:8d:f3:
         2e:ef:b1:83:6e:20:25:9b:d5:2d:93:ad:46:c0:87:41:59:f4:
         80:56:69:cc:ba:11:2f:c3:47:1f:5d:eb:e7:31:27:82:95:ab:
         54:63:6b:9e:e1:25:35:d2:80:91:cb:65:11:d3:be:80:03:35:
         88:ab:47:d0:ab:e3:04:82:dd:9a:d1:4f:52:cf:fc:43:c7:cf:
         f4:02:5b:44:e2:23:8d:eb:83:88:c5:77:7b:b7:a4:43:dc:f9:
         c8:92:49:c5:2e:25:d6:51:bc:5c:a1:4c:7a:5c:4c:b0:b8:b2:
         4c:dd:31:53:88:ce:c6:c9:ed:4e:88:ad:5a:bb:5b:76:83:3d:
         ef:6f:f0:46:4c:26:5a:f5:b5:e2:26:7f:a4:41:57:10:f3:67:
         e0:df:5b:78:06:5a:d0:a2:ca:5a:88:52:19:e5:98:6f:db:8f:
         7d:9b:1c:55:e9:33:aa:cf:9a:45:53:a1:f6:ed:3a:3e:e5:13:
         05:b5:6b:2e:3c:a0:e2:cc:6f:19:2d:06:66:fd:3a:ed:ee:2f:
         48:dd:e7:9d:52:a2:c7:e5:a5:90:3a:6b:d0:63:37:3b:a4:7b:
         2c:88:0d:aa:41:0a:0a:a2:04:50:c9:65:5d:fa:5d:60:22:12:
         5d:8c:4e:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46LypAhU436SjNpoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ExMmZjYmUtYjY5MS00YWMzLWIwZGItOGRiMGMyN2Yz
NTU0MB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk
N2E0MDg5YjUtNDViYS00MDg5LWJiNGQtYjYyNjU3ZmMxNmM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobWKgBTZUax4rbNVkVvkbpxShC64DRHEERAA
+2k8XnVpNzeK8cf5BJkaCVLlKtWWyYXdsDXyP3nIufUqxDeji7y2TMK0AUaJgN/n
VqUtQ8A7M8c693UFO1f2JpDETJQQEJJ8RvUJ5G/Ifo5mMmdNkmS2kIsOCfdhQX6Y
HagwLEaYtftWW3YnId+XxcSj2tlUba7olNUPgoA4RnvajSowfahtMB9BRUyhydI9
y1Z0Xho33eunFcBcLcjoM6aicgEHGeHoXVdofcP5EnFIfHnI0u5mjaqP293J3Htc
8PoDdcpbGjQgNqYmyLOnycyHAV9VtHaorOL1jY0/dasbTePORwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEPlv4tXZilL03ku2830Do8Y0NwAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83YTEy
ZmNiZS1iNjkxLTRhYzMtYjBkYi04ZGIwYzI3ZjM1NTQvMDFlNzQzMDktZjI2MS0z
M2UzLWJmMmItOWUxNjlmNGE0MmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2ExMmZjYmUtYjY5MS00YWMzLWIw
ZGItOGRiMGMyN2YzNTU0LzdhMTJmY2JlLWI2OTEtNGFjMy1iMGRiLThkYjBjMjdm
MzU1NC5jcmwwHwYDVR0jBBgwFoAU5khlibUjHC90BBrO+czt6CORtRAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83YTEyZmNiZS1iNjkxLTRhYzMtYjBkYi04ZGIw
YzI3ZjM1NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQFLAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACEsDoZ4BTFLfQuyqdO6hOyN8y7vsYNuICWb1S2TrUbAh0FZ9IBWacy6
ES/DRx9d6+cxJ4KVq1Rja57hJTXSgJHLZRHTvoADNYirR9Cr4wSC3ZrRT1LP/EPH
z/QCW0TiI43rg4jFd3u3pEPc+ciSScUuJdZRvFyhTHpcTLC4skzdMVOIzsbJ7U6I
rVq7W3aDPe9v8EZMJlr1teImf6RBVxDzZ+DfW3gGWtCiylqIUhnlmG/bj32bHFXp
M6rPmkVTofbtOj7lEwW1ay48oOLMbxktBmb9Ou3uL0jd551SosflpZA6a9BjNzuk
eyyIDapBCgqiBFDJZV36XWAiEl2MTug=
-----END CERTIFICATE-----
Generated at Sat Jul 25 01:43:27 2026 by rpki-client