Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/7df2e1af-fc39-3ee5-8272-3cd60c8a5779.roa
File:                     7df2e1af-fc39-3ee5-8272-3cd60c8a5779.roa (raw, json)
Hash identifier:          GsSxuYDa4xnr1wV5vwlOaZjQgebaELeR4K6qxpGnfpQ=
Subject key identifier:   60:26:38:F2:BA:85:2D:38:44:DB:FB:7A:25:74:7C:49:53:91:48:8D
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584DAF101D0A9E76755E96062F10
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/7df2e1af-fc39-3ee5-8272-3cd60c8a5779.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        207.202.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:1d:0a:9e:76:75:5e:96:06:2f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=a571adf7-c637-478a-89ed-1caba55d35cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f5:ae:68:26:6d:8f:76:cb:d0:c4:2a:d3:95:
                    a4:30:10:19:8f:9c:7d:8f:e2:13:d5:1a:06:9c:f4:
                    02:db:68:7e:c6:bb:ea:5f:b1:8a:cf:b3:3b:58:09:
                    0d:9e:73:ae:25:39:4c:df:48:83:67:99:2a:ff:8c:
                    21:3b:3d:8f:4f:86:d7:e3:ee:82:1e:6c:1f:08:fb:
                    1c:9b:e2:c8:c6:56:93:dd:d1:c0:02:08:51:b0:7b:
                    5a:aa:2a:b6:f5:e2:43:1a:be:0d:0a:cc:1f:69:57:
                    4e:32:56:e2:80:b4:0c:aa:35:91:7d:b0:02:dc:e6:
                    23:33:28:98:23:a5:83:bd:bc:1a:2d:71:dc:bb:9f:
                    32:9e:1e:49:41:a7:51:6c:91:49:4e:e8:d7:80:f8:
                    5c:53:ed:ac:23:8e:2e:1e:b1:0a:c1:75:6c:4f:a6:
                    13:70:06:18:ce:77:fa:26:e8:cc:83:2d:e4:d4:6b:
                    7a:1e:49:5c:e3:eb:46:55:16:7e:6f:69:5a:18:bf:
                    0a:fa:69:1e:33:57:40:18:43:f6:19:9d:f7:c0:3c:
                    48:74:6f:28:21:34:d7:ba:16:40:b0:b8:fe:98:96:
                    6d:33:0d:84:0d:47:bf:8f:0d:5e:35:39:bc:9f:90:
                    d6:97:a1:d9:5f:fa:b8:c8:06:19:6a:09:4b:19:3d:
                    db:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:26:38:F2:BA:85:2D:38:44:DB:FB:7A:25:74:7C:49:53:91:48:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/7df2e1af-fc39-3ee5-8272-3cd60c8a5779.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:a4:92:82:bc:5c:bb:38:8f:47:8a:07:0c:dc:07:cd:97:6b:
         bf:98:9a:57:2f:cb:e7:1e:96:5c:21:9e:ef:23:ef:3d:b8:3b:
         23:89:02:03:14:65:f5:83:fc:3a:25:b4:61:80:11:5b:39:c8:
         dd:9c:86:1f:8c:31:48:bb:a1:f4:90:05:be:04:21:cd:b7:15:
         48:6e:32:24:21:b3:eb:01:e3:91:e7:ac:ab:f3:1a:a5:49:a7:
         15:75:ab:57:79:21:91:f7:48:ab:a0:dd:06:cd:23:d0:12:8b:
         0b:20:5b:63:88:24:f3:77:7c:17:a6:1a:3b:6e:65:bf:2b:f4:
         d7:c9:c3:9a:cc:93:6f:0d:64:36:94:8e:8b:1e:bb:13:9c:52:
         5f:26:a4:4e:ed:a2:37:30:84:d7:d3:84:f7:eb:0f:81:de:64:
         fd:9a:42:ec:73:b3:01:16:2e:3d:46:52:99:97:9b:da:33:f1:
         f6:ee:e3:ef:16:d6:b1:fb:31:78:30:33:08:32:31:bb:f7:fa:
         c3:d7:4d:05:b0:02:46:a6:50:4c:db:fa:27:d8:6a:54:1d:67:
         dd:a8:cc:cd:62:24:95:57:27:ec:b3:9a:0e:c1:ba:76:32:69:
         28:34:34:c8:a2:2f:87:e9:25:24:10:47:0c:e8:d3:ee:f8:48:
         26:c7:91:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2vEB0KnnZ1XpYGLxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3
NzNlMB4XDTI2MDUwMTAxMDAyNFoXDTI2MDczMDAxMDAyNFowLzEtMCsGA1UEAxMk
YTU3MWFkZjctYzYzNy00NzhhLTg5ZWQtMWNhYmE1NWQzNWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPWuaCZtj3bL0MQq05WkMBAZj5x9j+IT1RoG
nPQC22h+xrvqX7GKz7M7WAkNnnOuJTlM30iDZ5kq/4whOz2PT4bX4+6CHmwfCPsc
m+LIxlaT3dHAAghRsHtaqiq29eJDGr4NCswfaVdOMlbigLQMqjWRfbAC3OYjMyiY
I6WDvbwaLXHcu58ynh5JQadRbJFJTujXgPhcU+2sI44uHrEKwXVsT6YTcAYYznf6
JujMgy3k1Gt6Hklc4+tGVRZ+b2laGL8K+mkeM1dAGEP2GZ33wDxIdG8oITTXuhZA
sLj+mJZtMw2EDUe/jw1eNTm8n5DWl6HZX/q4yAYZaglLGT3bxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGAmOPK6hS04RNv7eiV0fElTkUiNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl
ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvN2RmMmUxYWYtZmMzOS0z
ZWU1LTgyNzItM2NkNjBjOGE1Nzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4
YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj
NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1
MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8pBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAICkkoK8XLs4j0eKBwzcB82Xa7+Ymlcvy+cellwhnu8j7z24OyOJAgMU
ZfWD/DoltGGAEVs5yN2chh+MMUi7ofSQBb4EIc23FUhuMiQhs+sB45HnrKvzGqVJ
pxV1q1d5IZH3SKug3QbNI9ASiwsgW2OIJPN3fBemGjtuZb8r9NfJw5rMk28NZDaU
joseuxOcUl8mpE7tojcwhNfThPfrD4HeZP2aQuxzswEWLj1GUpmXm9oz8fbu4+8W
1rH7MXgwMwgyMbv3+sPXTQWwAkamUEzb+ifYalQdZ92ozM1iJJVXJ+yzmg7BunYy
aSg0NMiiL4fpJSQQRwzo0+74SCbHkSg=
-----END CERTIFICATE-----
Generated at Wed May 13 12:17:39 2026 by rpki-client