Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cbf96851-ba9e-38bf-a963-da65f7f37210.roa
File:                     cbf96851-ba9e-38bf-a963-da65f7f37210.roa (raw, json)
Hash identifier:          hUEqTvORKBHq5xuFNcqwJ/QXM6niDuO5sKN7qI5io/U=
Subject key identifier:   B7:23:A4:12:8B:77:E0:95:DC:BC:F4:06:0A:11:49:76:0B:32:2F:2E
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584E8B24F9454D9D426C69E704C0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cbf96851-ba9e-38bf-a963-da65f7f37210.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     16509
IP address blocks:        67.217.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:f9:45:4d:9d:42:6c:69:e7:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=2b53c1a4-7075-4073-8822-d9f6bd5bb620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5e:12:71:53:ee:84:7a:fd:75:bf:d3:b5:24:
                    82:f5:2d:8e:73:3d:88:02:db:12:ea:c9:9e:80:34:
                    46:de:dd:b8:46:d5:70:2f:06:cf:4f:c9:92:6e:31:
                    25:fe:0e:04:ac:be:b6:68:14:6d:ec:0e:ab:7c:88:
                    ef:9d:94:45:c0:f5:17:97:f4:bb:32:82:82:6b:b9:
                    9b:b8:66:55:4e:e9:0b:2f:5e:be:a6:43:ee:5a:e4:
                    25:28:b4:2a:da:64:6f:00:81:33:47:7d:7e:fd:6a:
                    12:9b:e1:ae:e2:50:7a:dc:03:be:c8:8c:22:42:1f:
                    69:62:4e:21:fa:d4:de:b8:e2:bf:e4:de:39:0e:25:
                    a6:4c:71:39:40:63:c4:e7:38:b9:29:30:4c:e8:0f:
                    65:32:b1:ef:48:6e:82:d8:40:85:fb:17:d9:42:ef:
                    e0:a2:b6:54:3e:a5:b7:ce:21:fe:8a:4c:8f:e4:f6:
                    7f:a2:b3:41:a8:20:34:e1:e1:fb:d9:27:ae:2a:73:
                    38:04:fd:89:16:2f:b2:66:29:30:23:8a:f4:29:b8:
                    b0:25:fb:ed:24:be:34:88:fd:cf:1f:3b:01:3d:cb:
                    57:a3:9a:40:26:3a:d0:1c:2e:b7:c0:78:57:bc:d4:
                    03:a8:da:a3:68:0c:62:bc:27:dc:25:25:0a:20:4f:
                    f8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:23:A4:12:8B:77:E0:95:DC:BC:F4:06:0A:11:49:76:0B:32:2F:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cbf96851-ba9e-38bf-a963-da65f7f37210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:39:94:37:3a:72:3a:e5:69:84:98:d9:fa:f3:57:2e:0e:a3:
         dd:ba:5a:e3:f0:7b:c2:65:97:61:d4:28:31:bf:89:dc:d0:57:
         59:d8:bf:9d:df:13:bc:9c:83:57:16:bc:e7:4a:df:ca:52:66:
         2e:65:a9:3b:df:d7:af:61:8a:71:bc:6b:9d:8a:5e:b8:02:a3:
         e9:03:07:a1:83:5f:dd:ed:bb:c3:be:0d:7e:16:b9:ca:3c:45:
         eb:37:77:22:c3:40:df:a6:88:5a:94:70:b0:15:fc:35:88:c5:
         a1:46:54:08:ae:82:b7:3e:47:4f:cf:df:39:cb:65:cc:87:26:
         9c:13:c4:8e:22:aa:51:13:ed:8c:2e:ac:58:5e:bf:7a:f9:40:
         7b:be:64:98:79:4d:7c:e2:fe:ef:24:77:68:4f:4b:d3:49:f8:
         72:0e:b4:fe:e6:bc:88:89:17:85:41:f0:aa:fe:e4:21:0c:e5:
         1a:07:75:ec:2f:29:59:62:3e:c6:e8:72:20:a9:c2:36:03:f2:
         76:85:4a:ac:ad:25:58:00:f5:2e:c2:4d:83:19:78:c5:14:e8:
         6c:fc:dd:2a:aa:82:85:57:b0:e7:9e:d6:88:ea:eb:a5:4c:45:
         bf:dc:9b:28:7d:42:17:56:f4:cb:55:9d:dc:a4:2f:a6:4f:a0:
         0c:6e:ff:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6LJPlFTZ1CbGnnBMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI2MDcxODIxMDAxMVoXDTI2MTAxNjIxMDAxMVowLzEtMCsGA1UEAxMk
MmI1M2MxYTQtNzA3NS00MDczLTg4MjItZDlmNmJkNWJiNjIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF4ScVPuhHr9db/TtSSC9S2Ocz2IAtsS6sme
gDRG3t24RtVwLwbPT8mSbjEl/g4ErL62aBRt7A6rfIjvnZRFwPUXl/S7MoKCa7mb
uGZVTukLL16+pkPuWuQlKLQq2mRvAIEzR31+/WoSm+Gu4lB63AO+yIwiQh9pYk4h
+tTeuOK/5N45DiWmTHE5QGPE5zi5KTBM6A9lMrHvSG6C2ECF+xfZQu/gorZUPqW3
ziH+ikyP5PZ/orNBqCA04eH72SeuKnM4BP2JFi+yZikwI4r0KbiwJfvtJL40iP3P
HzsBPctXo5pAJjrQHC63wHhXvNQDqNqjaAxivCfcJSUKIE/45wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLcjpBKLd+CV3Lz0BgoRSXYLMi8uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvY2JmOTY4NTEtYmE5ZS0z
OGJmLWE5NjMtZGE2NWY3ZjM3MjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9lfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEY5lDc6cjrlaYSY2frzVy4Oo926WuPwe8Jll2HUKDG/idzQV1nYv53f
E7ycg1cWvOdK38pSZi5lqTvf169hinG8a52KXrgCo+kDB6GDX93tu8O+DX4Wuco8
Res3dyLDQN+miFqUcLAV/DWIxaFGVAiugrc+R0/P3znLZcyHJpwTxI4iqlET7Ywu
rFhev3r5QHu+ZJh5TXzi/u8kd2hPS9NJ+HIOtP7mvIiJF4VB8Kr+5CEM5RoHdewv
KVliPsbociCpwjYD8naFSqytJVgA9S7CTYMZeMUU6Gz83SqqgoVXsOee1ojq66VM
Rb/cmyh9QhdW9MtVndykL6ZPoAxu/0w=
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:23:23 2026 by rpki-client