Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/f9367e5b-6a85-30a2-97dc-4e581c16e62d.roa
File:                     f9367e5b-6a85-30a2-97dc-4e581c16e62d.roa (raw, json)
Hash identifier:          ApTsOg4odXAjf1a51IJuVwzYivVThWS2BJBzIUzdhG8=
Subject key identifier:   58:34:7E:CE:87:1C:7A:DA:0E:EB:5D:5B:59:DF:30:F8:33:A4:A9:64
Certificate issuer:       /CN=aed01dad-662c-4720-aaa5-ea3d024bad07
Certificate serial:       010D0C9F4328584DCC605E6B78FE54AEAE48DF80
Authority key identifier: AF:28:E5:F5:82:CC:E1:95:E3:06:39:54:5C:79:ED:C7:78:A5:C5:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/f9367e5b-6a85-30a2-97dc-4e581c16e62d.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     40676
IP address blocks:        207.174.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/aed01dad-662c-4720-aaa5-ea3d024bad07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/aed01dad-662c-4720-aaa5-ea3d024bad07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:5e:6b:78:fe:54:ae:ae:48:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aed01dad-662c-4720-aaa5-ea3d024bad07
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=144c1ae6-a09c-4206-9c13-c386f30fdd2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:09:a8:2d:1b:ea:56:09:80:20:21:8d:c8:2a:
                    c9:07:79:2a:35:27:8f:cf:2a:03:ea:d0:c8:e5:bb:
                    18:52:30:ff:bd:a1:27:b2:38:a7:8c:6f:ee:15:b4:
                    9c:7a:6e:eb:0e:33:b5:d7:d0:f6:d1:2a:1d:ed:fe:
                    5f:fc:a1:27:37:d4:1d:fa:58:c0:29:b4:05:23:0d:
                    6a:a0:13:03:9b:a3:4d:39:40:0a:b4:fb:d7:54:4c:
                    19:19:4f:11:e7:c2:08:94:60:4a:77:1f:32:44:ee:
                    4a:1a:e7:1e:08:67:74:5b:5f:c3:bd:5d:39:eb:c9:
                    32:ba:0d:1b:bd:49:e6:b0:3d:d6:5f:78:3b:cd:c7:
                    32:64:a4:91:6c:9a:a8:bc:f7:47:00:ed:ac:94:c0:
                    18:53:48:c1:ce:68:df:cf:13:d3:b5:57:13:97:b9:
                    38:26:73:03:0d:d1:0d:bd:62:62:0b:2e:0f:8f:ea:
                    4d:53:f9:bd:af:f7:61:1d:1a:a3:11:52:9f:be:53:
                    b6:35:d7:10:8f:98:c2:5d:42:df:68:0a:f1:6b:c6:
                    74:02:a0:63:62:6f:9d:b4:a5:b0:60:c1:a0:d5:ec:
                    ee:05:a8:7d:d4:b7:57:5b:67:70:ef:b5:b4:b0:0f:
                    42:79:97:6a:9d:e3:b1:e1:d1:5a:77:89:c3:38:f4:
                    b6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:34:7E:CE:87:1C:7A:DA:0E:EB:5D:5B:59:DF:30:F8:33:A4:A9:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/f9367e5b-6a85-30a2-97dc-4e581c16e62d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07/aed01dad-662c-4720-aaa5-ea3d024bad07.crl

            X509v3 Authority Key Identifier:
                keyid:AF:28:E5:F5:82:CC:E1:95:E3:06:39:54:5C:79:ED:C7:78:A5:C5:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aed01dad-662c-4720-aaa5-ea3d024bad07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:05:94:47:40:e1:94:21:f6:28:f3:5a:bc:3d:8a:c0:e9:d3:
         1e:f6:f1:ac:68:f2:74:e8:69:33:5a:a1:5e:ff:2b:80:17:7e:
         7a:6d:50:4c:48:dc:f7:8e:39:2c:34:09:57:68:fe:45:39:8f:
         55:e6:4e:b2:e8:45:77:cf:1d:c9:29:db:0b:b9:5d:1b:c4:01:
         0d:6b:93:64:a7:42:48:6b:e5:54:4e:e7:18:d7:13:50:56:1c:
         f3:02:e6:f2:8b:a0:89:a5:30:b2:79:2e:3f:0c:49:72:bb:fb:
         06:1e:fe:e3:02:58:db:66:c5:7e:87:cc:66:37:2c:2d:3b:75:
         e4:b6:52:d3:df:bc:94:8c:9f:8b:56:5c:1e:e2:c7:60:51:6b:
         17:cb:57:bd:68:e0:4b:38:b7:b7:27:39:86:60:8d:38:fb:b0:
         cd:4e:3a:98:14:db:0c:03:ca:37:e2:85:f8:91:95:50:68:f1:
         8a:93:c7:34:22:c1:00:d9:fa:74:d0:7c:ce:89:09:09:f3:b9:
         ec:dc:e3:29:72:15:e8:91:27:72:50:61:12:8a:15:70:c3:dd:
         fa:7a:54:59:b7:60:ab:ec:69:7a:34:14:a6:38:65:38:b9:18:
         63:e3:9c:e5:c5:ac:85:32:b9:ea:e6:66:0b:b5:7e:aa:65:fd:
         22:33:89:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3MYF5reP5Urq5I34AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWVkMDFkYWQtNjYyYy00NzIwLWFhYTUtZWEzZDAyNGJh
ZDA3MB4XDTI2MDUxMTEzMDAzMVoXDTI2MDgwOTEzMDAzMVowLzEtMCsGA1UEAxMk
MTQ0YzFhZTYtYTA5Yy00MjA2LTljMTMtYzM4NmYzMGZkZDJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgmoLRvqVgmAICGNyCrJB3kqNSePzyoD6tDI
5bsYUjD/vaEnsjinjG/uFbScem7rDjO119D20Sod7f5f/KEnN9Qd+ljAKbQFIw1q
oBMDm6NNOUAKtPvXVEwZGU8R58IIlGBKdx8yRO5KGuceCGd0W1/DvV0568kyug0b
vUnmsD3WX3g7zccyZKSRbJqovPdHAO2slMAYU0jBzmjfzxPTtVcTl7k4JnMDDdEN
vWJiCy4Pj+pNU/m9r/dhHRqjEVKfvlO2NdcQj5jCXULfaArxa8Z0AqBjYm+dtKWw
YMGg1ezuBah91LdXW2dw77W0sA9CeZdqneOx4dFad4nDOPS2+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFg0fs6HHHraDutdW1nfMPgzpKlkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZWQw
MWRhZC02NjJjLTQ3MjAtYWFhNS1lYTNkMDI0YmFkMDcvZjkzNjdlNWItNmE4NS0z
MGEyLTk3ZGMtNGU1ODFjMTZlNjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWVkMDFkYWQtNjYyYy00NzIwLWFh
YTUtZWEzZDAyNGJhZDA3L2FlZDAxZGFkLTY2MmMtNDcyMC1hYWE1LWVhM2QwMjRi
YWQwNy5jcmwwHwYDVR0jBBgwFoAUryjl9YLM4ZXjBjlUXHntx3ilxU4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hZWQwMWRhZC02NjJjLTQ3MjAtYWFhNS1lYTNk
MDI0YmFkMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz658MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADcFlEdA4ZQh9ijzWrw9isDp0x728axo8nToaTNaoV7/K4AXfnptUExI
3PeOOSw0CVdo/kU5j1XmTrLoRXfPHckp2wu5XRvEAQ1rk2SnQkhr5VRO5xjXE1BW
HPMC5vKLoImlMLJ5Lj8MSXK7+wYe/uMCWNtmxX6HzGY3LC07deS2UtPfvJSMn4tW
XB7ix2BRaxfLV71o4Es4t7cnOYZgjTj7sM1OOpgU2wwDyjfihfiRlVBo8YqTxzQi
wQDZ+nTQfM6JCQnzuezc4ylyFeiRJ3JQYRKKFXDD3fp6VFm3YKvsaXo0FKY4ZTi5
GGPjnOXFrIUyuermZgu1fqpl/SIzib0=
-----END CERTIFICATE-----
Generated at Wed May 13 03:28:56 2026 by rpki-client