Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/2e3a3ab9-357d-3aac-b443-a642499d1c7d.roa
File:                     2e3a3ab9-357d-3aac-b443-a642499d1c7d.roa (raw, json)
Hash identifier:          9N2MdloYFCZWE0f2yZcb4il509mXnM9GU863Da0LuOI=
Subject key identifier:   56:4E:05:81:73:06:4F:8C:2C:88:88:51:7C:94:F3:7E:37:11:96:9B
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584E90BA4C13D0060458726C86D8
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/2e3a3ab9-357d-3aac-b443-a642499d1c7d.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     852
IP address blocks:        216.180.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:4c:13:d0:06:04:58:72:6c:86:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=1ae1b17a-3d63-4ab8-96be-bf2df25b6a16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ee:79:c9:71:0e:6c:d9:30:88:10:18:75:6d:
                    73:7b:53:a4:79:5d:92:93:46:60:76:02:d3:d0:6c:
                    ce:35:dd:5a:2b:67:31:c4:1d:c0:3d:2b:38:34:62:
                    e6:8a:af:42:ca:41:a8:95:4a:8a:e8:f8:9a:39:79:
                    a7:dc:d3:d6:b5:df:42:f5:f6:53:f0:75:f2:4b:fa:
                    a6:1e:c3:54:34:04:90:37:76:37:86:1b:77:9d:4f:
                    51:e7:eb:52:70:4c:e6:cc:64:06:cd:29:85:95:a8:
                    ca:c3:5c:3d:42:ff:50:ae:22:e7:ab:14:b0:01:0e:
                    96:0b:4d:76:de:40:89:49:e7:28:c5:6b:80:e9:dd:
                    ed:dd:25:5c:41:e2:13:40:f0:df:df:63:4c:3d:29:
                    a5:0b:40:b6:f3:66:b6:c0:26:51:be:3f:98:a2:50:
                    de:42:5e:df:57:81:fe:74:49:d6:35:b7:54:6a:20:
                    89:7f:7f:c3:a5:91:b3:34:ae:70:10:45:97:9c:ab:
                    29:22:3d:f8:cc:b4:0c:23:33:29:3a:d6:23:ef:44:
                    f4:8d:11:89:f4:56:96:5a:65:55:4a:66:f9:ce:27:
                    11:ff:2c:d3:03:8e:2d:be:62:74:fb:86:36:8f:3c:
                    89:6f:a2:41:66:38:97:f6:3e:fc:56:fc:8c:31:57:
                    f4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:4E:05:81:73:06:4F:8C:2C:88:88:51:7C:94:F3:7E:37:11:96:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/2e3a3ab9-357d-3aac-b443-a642499d1c7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.180.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:8d:0d:c3:80:7f:60:b1:10:8b:21:d7:fe:22:2c:0b:4d:22:
         b0:37:44:fa:3f:b7:d9:f0:3a:f6:5c:5a:27:21:15:cc:3c:05:
         c3:95:c1:1f:a3:cb:79:d7:f3:5b:e9:17:e3:ff:2c:c0:d0:9f:
         05:b9:cf:bc:cb:e8:25:e6:a4:e9:c9:7e:81:75:ba:a1:72:c3:
         33:8a:fb:46:03:ea:87:2f:3d:e9:fe:6a:12:84:fd:97:04:27:
         f3:0a:28:0b:7c:46:be:80:6c:07:0e:04:0a:60:29:a4:60:b4:
         8d:28:86:a7:c6:dc:57:1f:af:fe:dc:e0:db:ca:65:76:d0:81:
         ab:f0:f9:bf:36:60:25:0f:31:26:de:16:4a:17:d8:14:11:9c:
         a5:90:70:cb:00:f8:fc:e2:f6:11:04:ef:37:2b:f7:35:7c:aa:
         28:18:14:ea:a4:12:05:72:e0:20:1f:6b:29:51:dd:c3:7a:9d:
         22:a9:ad:5d:f5:19:b0:99:e0:eb:cc:11:27:45:7e:79:18:a9:
         7f:6e:4b:ce:57:97:41:74:6b:de:7f:7d:a0:77:6f:77:c4:19:
         12:86:d4:dd:b3:7f:3d:8a:d8:10:7c:28:97:07:e8:89:7a:77:
         26:15:89:00:8a:f7:63:d5:c3:89:df:09:2a:34:2b:32:56:03:
         a6:5b:7c:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6QukwT0AYEWHJshtgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzkxYTY4MGMtMTBmOS00MDY0LWJjNzUtYTA3OTAyNzRk
ZjgwMB4XDTI2MDcyMDIxMDAxMVoXDTI2MTAxODIxMDAxMVowLzEtMCsGA1UEAxMk
MWFlMWIxN2EtM2Q2My00YWI4LTk2YmUtYmYyZGYyNWI2YTE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO55yXEObNkwiBAYdW1ze1OkeV2Sk0ZgdgLT
0GzONd1aK2cxxB3APSs4NGLmiq9CykGolUqK6PiaOXmn3NPWtd9C9fZT8HXyS/qm
HsNUNASQN3Y3hht3nU9R5+tScEzmzGQGzSmFlajKw1w9Qv9QriLnqxSwAQ6WC012
3kCJSecoxWuA6d3t3SVcQeITQPDf32NMPSmlC0C282a2wCZRvj+YolDeQl7fV4H+
dEnWNbdUaiCJf3/DpZGzNK5wEEWXnKspIj34zLQMIzMpOtYj70T0jRGJ9FaWWmVV
Smb5zicR/yzTA44tvmJ0+4Y2jzyJb6JBZjiX9j78VvyMMVf09QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFZOBYFzBk+MLIiIUXyU8343EZabMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTFh
NjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5MDI3NGRmODAvMmUzYTNhYjktMzU3ZC0z
YWFjLWI0NDMtYTY0MjQ5OWQxYzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzkxYTY4MGMtMTBmOS00MDY0LWJj
NzUtYTA3OTAyNzRkZjgwL2M5MWE2ODBjLTEwZjktNDA2NC1iYzc1LWEwNzkwMjc0
ZGY4MC5jcmwwHwYDVR0jBBgwFoAUctBabGGh917zX3tsqIXt46Suo7gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jOTFhNjgwYy0xMGY5LTQwNjQtYmM3NS1hMDc5
MDI3NGRmODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2LTwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH2NDcOAf2CxEIsh1/4iLAtNIrA3RPo/t9nwOvZcWichFcw8BcOVwR+j
y3nX81vpF+P/LMDQnwW5z7zL6CXmpOnJfoF1uqFywzOK+0YD6ocvPen+ahKE/ZcE
J/MKKAt8Rr6AbAcOBApgKaRgtI0ohqfG3Fcfr/7c4NvKZXbQgavw+b82YCUPMSbe
FkoX2BQRnKWQcMsA+Pzi9hEE7zcr9zV8qigYFOqkEgVy4CAfaylR3cN6nSKprV31
GbCZ4OvMESdFfnkYqX9uS85Xl0F0a95/faB3b3fEGRKG1N2zfz2K2BB8KJcH6Il6
dyYViQCK92PVw4nfCSo0KzJWA6ZbfNo=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:53:44 2026 by rpki-client