Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6/3a2c937e-43a7-3104-9c15-c14d170576fa.roa
File:                     3a2c937e-43a7-3104-9c15-c14d170576fa.roa (raw, json)
Hash identifier:          A4k5UkO+nM2f0FEZ1E7G2LhI78UDB/R3QewSxlPaIcU=
Subject key identifier:   65:7B:D2:ED:F3:5A:D6:65:94:CE:80:ED:E4:63:08:71:C1:7A:6E:11
Certificate issuer:       /CN=7ba533d7-0e29-41f6-8679-d93c39c3b1d6
Certificate serial:       010D0C9F4328584E640F71426B219EF96BBF0F70
Authority key identifier: 61:4E:15:BE:98:2C:A8:10:20:8C:51:DC:A4:DD:75:86:C3:4F:90:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6/3a2c937e-43a7-3104-9c15-c14d170576fa.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     376
IP address blocks:        206.167.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6/7ba533d7-0e29-41f6-8679-d93c39c3b1d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6/7ba533d7-0e29-41f6-8679-d93c39c3b1d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:71:42:6b:21:9e:f9:6b:bf:0f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba533d7-0e29-41f6-8679-d93c39c3b1d6
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=fd5e907c-91a4-4139-9df8-ab5c74eac66b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:50:57:db:9c:87:2f:37:1c:4e:6c:cd:73:64:
                    b4:27:3d:7c:47:86:ee:ac:79:df:c0:01:dc:33:ad:
                    4b:43:e1:bc:31:72:69:3c:6f:83:ae:e0:3f:13:68:
                    9e:a7:20:37:2b:17:67:85:f5:22:64:82:f2:74:05:
                    d5:55:e3:29:2f:5d:45:14:80:54:9a:dc:f3:a4:f4:
                    c8:40:09:a9:69:41:c6:7b:34:28:dd:65:96:e4:91:
                    30:1b:83:c0:ab:37:1c:6e:19:1c:92:53:fd:6a:64:
                    35:bb:04:20:83:1a:82:e7:c0:c5:8e:62:a8:79:eb:
                    43:e3:74:ed:fd:98:e0:a3:6c:f3:ac:5d:54:3f:e5:
                    9e:13:a0:97:36:6f:25:52:6d:bc:52:65:74:43:eb:
                    26:89:43:76:eb:57:44:51:ad:c4:fb:27:25:41:d7:
                    36:e6:83:39:37:e0:03:60:86:c9:3d:7b:01:6d:13:
                    1e:40:a4:16:53:f7:4b:1d:6d:be:b4:38:b0:6d:b5:
                    19:e0:39:f3:44:93:30:fd:64:c6:b3:f4:21:98:a1:
                    8f:bb:c6:a3:e7:ca:d0:8d:17:19:a2:fa:71:0a:62:
                    91:d4:16:78:76:02:5a:32:de:0f:4d:bd:52:1b:35:
                    aa:57:7f:73:aa:2a:e7:66:9f:42:62:b3:05:a9:84:
                    00:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7B:D2:ED:F3:5A:D6:65:94:CE:80:ED:E4:63:08:71:C1:7A:6E:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6/3a2c937e-43a7-3104-9c15-c14d170576fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6/7ba533d7-0e29-41f6-8679-d93c39c3b1d6.crl

            X509v3 Authority Key Identifier:
                keyid:61:4E:15:BE:98:2C:A8:10:20:8C:51:DC:A4:DD:75:86:C3:4F:90:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:51:3e:1f:59:0f:25:53:7a:02:e1:47:a0:8f:99:bd:70:0c:
         a7:24:9c:b7:79:59:66:74:cc:2c:d3:c0:ed:3b:53:11:3d:47:
         18:ee:88:26:90:06:8d:0a:9d:b7:85:e9:62:c2:50:04:7b:3e:
         30:0d:fa:46:cb:a0:84:2d:51:9d:7b:f0:f3:29:58:9d:c3:6e:
         62:66:2f:c5:06:65:35:f4:89:27:33:ae:d5:c0:fe:43:ce:54:
         aa:ba:cc:51:53:1b:31:2e:2c:4a:04:3d:e1:1b:8e:0b:0b:11:
         e6:8c:d8:ff:75:04:79:53:41:f6:aa:e8:ad:87:8f:d7:be:be:
         68:6f:71:82:32:84:ab:b6:8c:f1:25:a1:68:a5:be:44:db:b9:
         f1:2f:0f:bb:b9:fc:a2:b5:72:cd:78:13:6c:b3:93:01:ab:f1:
         d0:7c:ed:a6:d8:07:12:cc:c0:b8:9e:27:3b:70:cf:d2:56:a8:
         13:bd:3a:59:ac:43:9e:3d:47:2b:36:e9:70:48:36:2a:76:35:
         50:7c:c5:81:38:72:84:4c:23:08:e9:d0:2d:89:77:d2:54:30:
         46:6b:e9:3e:0d:c5:e6:6f:14:01:6c:e3:4b:e2:1f:24:a3:c8:
         b7:20:41:b5:13:4c:e7:f6:30:95:06:85:14:5c:60:bb:56:a7:
         93:63:07:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5kD3FCayGe+Wu/D3AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JhNTMzZDctMGUyOS00MWY2LTg2NzktZDkzYzM5YzNi
MWQ2MB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk
ZmQ1ZTkwN2MtOTFhNC00MTM5LTlkZjgtYWI1Yzc0ZWFjNjZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1BX25yHLzccTmzNc2S0Jz18R4burHnfwAHc
M61LQ+G8MXJpPG+DruA/E2iepyA3KxdnhfUiZILydAXVVeMpL11FFIBUmtzzpPTI
QAmpaUHGezQo3WWW5JEwG4PAqzccbhkcklP9amQ1uwQggxqC58DFjmKoeetD43Tt
/Zjgo2zzrF1UP+WeE6CXNm8lUm28UmV0Q+smiUN261dEUa3E+yclQdc25oM5N+AD
YIbJPXsBbRMeQKQWU/dLHW2+tDiwbbUZ4DnzRJMw/WTGs/QhmKGPu8aj58rQjRcZ
ovpxCmKR1BZ4dgJaMt4PTb1SGzWqV39zqirnZp9CYrMFqYQAQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGV70u3zWtZllM6A7eRjCHHBem4RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83YmE1
MzNkNy0wZTI5LTQxZjYtODY3OS1kOTNjMzljM2IxZDYvM2EyYzkzN2UtNDNhNy0z
MTA0LTljMTUtYzE0ZDE3MDU3NmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2JhNTMzZDctMGUyOS00MWY2LTg2
NzktZDkzYzM5YzNiMWQ2LzdiYTUzM2Q3LTBlMjktNDFmNi04Njc5LWQ5M2MzOWMz
YjFkNi5jcmwwHwYDVR0jBBgwFoAUYU4VvpgsqBAgjFHcpN11hsNPkJYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83YmE1MzNkNy0wZTI5LTQxZjYtODY3OS1kOTNj
MzljM2IxZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqcXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABFRPh9ZDyVTegLhR6CPmb1wDKcknLd5WWZ0zCzTwO07UxE9RxjuiCaQ
Bo0KnbeF6WLCUAR7PjAN+kbLoIQtUZ178PMpWJ3DbmJmL8UGZTX0iSczrtXA/kPO
VKq6zFFTGzEuLEoEPeEbjgsLEeaM2P91BHlTQfaq6K2Hj9e+vmhvcYIyhKu2jPEl
oWilvkTbufEvD7u5/KK1cs14E2yzkwGr8dB87abYBxLMwLieJztwz9JWqBO9Olms
Q549Rys26XBINip2NVB8xYE4coRMIwjp0C2Jd9JUMEZr6T4NxeZvFAFs40viHySj
yLcgQbUTTOf2MJUGhRRcYLtWp5NjB1U=
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:36:20 2026 by rpki-client