Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/cde0b382-acbd-3f3d-9670-8bebdcc9bdb4.roa
File:                     cde0b382-acbd-3f3d-9670-8bebdcc9bdb4.roa (raw, json)
Hash identifier:          Gb3sQb0bW5E3Bc0Fm9QDBP9NFg4H0THEy+tEAhn/bCc=
Subject key identifier:   7A:87:71:CF:66:BE:39:E2:B0:64:1D:8B:A1:CF:1B:F9:55:36:E0:B8
Certificate issuer:       /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Certificate serial:       010D0C9F4328584E779A27E0B400B036E34FF640
Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/cde0b382-acbd-3f3d-9670-8bebdcc9bdb4.roa
Signing time:             Sat 11 Jul 2026 21:00:11 +0000
ROA not before:           Sat 11 Jul 2026 21:00:11 +0000
ROA not after:            Fri 09 Oct 2026 21:00:11 +0000
asID:                     8011
IP address blocks:        65.62.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:77:9a:27:e0:b4:00:b0:36:e3:4f:f6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
        Validity
            Not Before: Jul 11 21:00:11 2026 GMT
            Not After : Oct  9 21:00:11 2026 GMT
        Subject: CN=4c122da2-8297-4451-9ea0-0543708664e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8a:97:82:5b:02:0c:24:7e:2f:5b:33:f4:c1:
                    9c:58:f1:d8:81:d1:8b:cf:78:f4:1b:e2:06:11:07:
                    e7:b0:0a:0f:70:4a:34:ca:16:66:c9:d1:29:28:b1:
                    86:46:98:c3:4d:9f:9d:21:8b:a4:53:f9:bc:2f:4c:
                    32:10:d4:36:e8:56:e1:d0:08:d6:6a:66:3d:41:a6:
                    bb:b6:62:d6:61:59:76:00:f7:f1:8a:90:1f:5c:a3:
                    7e:43:24:ad:33:29:e0:32:70:a0:7e:85:46:d9:d0:
                    e0:16:6e:c3:66:e3:68:55:ed:94:8f:ca:99:47:e6:
                    bd:3b:8a:a0:f8:9b:72:61:3a:45:f4:87:e0:71:0e:
                    5e:4b:16:ff:f7:b3:65:0b:e5:83:86:4b:af:1e:96:
                    68:1d:80:ed:c4:38:2e:46:e9:17:87:ca:fd:29:31:
                    7b:4f:8f:3b:9e:80:4f:2c:d7:8b:76:6f:c2:84:3f:
                    bf:3d:5b:22:6d:9c:3f:2f:fc:b3:be:87:e1:c4:65:
                    38:53:41:14:83:d2:01:32:7f:7a:4c:13:77:1c:ca:
                    76:a4:b9:92:65:19:1f:12:4d:69:6e:7a:d0:29:36:
                    a5:c9:e6:9c:7e:9b:17:11:c9:e3:85:28:95:16:52:
                    e2:e5:37:dc:1b:2e:d9:22:37:e0:f2:0c:4a:73:11:
                    d0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:87:71:CF:66:BE:39:E2:B0:64:1D:8B:A1:CF:1B:F9:55:36:E0:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/cde0b382-acbd-3f3d-9670-8bebdcc9bdb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl

            X509v3 Authority Key Identifier:
                keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.62.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:02:40:30:d8:32:25:63:61:8b:7e:39:81:53:30:85:e7:7d:
         8f:3e:9a:a2:b3:d7:74:7c:c4:29:65:9f:b2:1a:2c:d6:0e:20:
         34:27:de:24:33:40:fc:7d:c5:96:18:ca:22:3a:4a:d8:1e:ce:
         3c:4b:1c:ca:9e:ec:ad:b8:52:fc:0b:93:a1:51:77:be:3c:fb:
         bc:4c:66:46:98:e2:f1:da:ec:c6:9f:e4:73:b7:d3:77:94:fc:
         30:57:e7:64:88:a8:f7:e3:51:30:6c:fe:6d:4d:68:ad:38:75:
         37:b8:be:e2:a1:45:9e:a6:28:83:de:a0:37:7b:bc:25:97:8f:
         5c:9c:1c:20:1f:90:00:fe:44:10:1a:e1:f0:ba:54:75:8a:c1:
         a0:4e:08:b4:dc:05:d3:7b:9f:6d:e5:46:db:6f:20:63:c1:c0:
         de:38:a9:4a:19:74:8f:d0:4d:15:d9:eb:64:a1:ff:cb:b1:84:
         08:7b:89:79:1e:b5:22:ce:97:84:bb:c4:2a:b0:02:09:f5:81:
         63:3a:ac:93:11:be:7f:70:30:f0:20:04:8c:c4:7c:e5:e7:ea:
         e6:7c:d2:60:b5:56:47:5e:aa:32:73:16:6f:39:67:1e:57:28:
         c9:41:1f:56:41:d1:4d:3c:e0:3f:6b:1b:dd:22:8a:7a:66:20:
         4c:f0:75:b8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE53mifgtACwNuNP9kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz
NWExMB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk
NGMxMjJkYTItODI5Ny00NDUxLTllYTAtMDU0MzcwODY2NGUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIqXglsCDCR+L1sz9MGcWPHYgdGLz3j0G+IG
EQfnsAoPcEo0yhZmydEpKLGGRpjDTZ+dIYukU/m8L0wyENQ26Fbh0AjWamY9Qaa7
tmLWYVl2APfxipAfXKN+QyStMyngMnCgfoVG2dDgFm7DZuNoVe2Uj8qZR+a9O4qg
+JtyYTpF9IfgcQ5eSxb/97NlC+WDhkuvHpZoHYDtxDguRukXh8r9KTF7T487noBP
LNeLdm/ChD+/PVsibZw/L/yzvofhxGU4U0EUg9IBMn96TBN3HMp2pLmSZRkfEk1p
bnrQKTalyeacfpsXEcnjhSiVFlLi5TfcGy7ZIjfg8gxKcxHQrQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHqHcc9mvjnisGQdi6HPG/lVNuC4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk
MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvY2RlMGIzODItYWNiZC0z
ZjNkLTk2NzAtOGJlYmRjYzliZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2
YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4
MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5
YjQyODM1YTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBQT4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAlgJAMNgyJWNhi345gVMwhed9jz6aorPXdHzEKWWfshos1g4gNCfeJDNA
/H3FlhjKIjpK2B7OPEscyp7srbhS/AuToVF3vjz7vExmRpji8drsxp/kc7fTd5T8
MFfnZIio9+NRMGz+bU1orTh1N7i+4qFFnqYog96gN3u8JZePXJwcIB+QAP5EEBrh
8LpUdYrBoE4ItNwF03ufbeVG228gY8HA3jipShl0j9BNFdnrZKH/y7GECHuJeR61
Is6XhLvEKrACCfWBYzqskxG+f3Aw8CAEjMR85efq5nzSYLVWR16qMnMWbzlnHlco
yUEfVkHRTTzgP2sb3SKKemYgTPB1uA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:02:24 2026 by rpki-client