Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/762ccf37-8de8-37bd-9ce9-b4a4dbe1ccf5.roa
File:                     762ccf37-8de8-37bd-9ce9-b4a4dbe1ccf5.roa (raw, json)
Hash identifier:          dNzYpIZO74F0wLi0pFj4t0f2ecDzeJ+OIAHvD2w7DU0=
Subject key identifier:   FA:87:FE:67:F5:92:01:2C:A6:2F:B0:CF:F9:E4:01:E3:AA:2E:9A:AA
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F4328584E7E94E789887AC449F21CD3C0
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/762ccf37-8de8-37bd-9ce9-b4a4dbe1ccf5.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        164.55.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:e7:89:88:7a:c4:49:f2:1c:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=cf3e35e3-2946-4e72-b3a6-c6f2133b28f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f9:e5:80:fc:ea:0a:ae:d6:b0:41:67:67:f9:
                    49:8a:54:65:d1:e9:cf:a9:ce:fa:94:0a:f3:b5:b3:
                    fb:51:c5:0b:c1:81:2b:79:5e:4e:dc:a9:9f:77:2e:
                    08:67:18:e3:f9:eb:30:a5:07:b3:66:2f:43:b2:89:
                    55:ec:cb:21:c6:98:f6:64:6f:d5:cb:17:53:c0:8d:
                    de:6e:c2:4d:7a:79:a6:df:0d:16:bf:4e:d1:58:ec:
                    ce:8c:c6:6b:04:a8:02:fe:99:c5:e2:96:49:e3:49:
                    11:f6:81:d4:3e:04:cf:66:81:5b:61:1f:72:a3:41:
                    13:48:03:9e:60:18:73:1c:f0:32:b7:a7:5e:c6:85:
                    c4:65:fa:e7:64:66:80:a4:a4:2a:28:d5:0f:44:66:
                    68:ce:a1:45:09:ce:e6:8f:34:d6:24:6b:16:a2:19:
                    08:2d:03:36:53:b3:6c:e3:f3:0f:48:52:db:a7:7d:
                    d1:3e:28:1d:73:8c:63:b4:f9:8e:68:56:ae:4c:ba:
                    fa:d4:93:17:7e:d2:6e:81:a2:60:c8:b7:bc:5f:de:
                    23:63:b4:96:26:61:f6:32:c0:19:c2:29:f1:b4:82:
                    64:cb:37:57:64:d5:63:de:22:ae:eb:ce:1f:91:bd:
                    50:33:1c:b0:d2:f0:d8:5e:2b:89:0a:00:83:ee:58:
                    14:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:87:FE:67:F5:92:01:2C:A6:2F:B0:CF:F9:E4:01:E3:AA:2E:9A:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/762ccf37-8de8-37bd-9ce9-b4a4dbe1ccf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.55.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:a7:9d:ea:17:8b:62:7b:46:3e:8f:d4:e4:6e:6b:81:c3:68:
         3c:cd:28:c4:c9:89:0a:6a:55:77:a0:bc:06:88:c1:83:fc:99:
         f1:89:f5:3e:60:aa:6e:18:24:c3:03:7e:5c:cd:74:9f:5b:1f:
         c0:33:62:64:55:b2:ca:85:72:7c:60:e2:4d:cc:19:b6:03:b7:
         fe:4c:ae:06:14:a4:71:84:e8:68:25:f5:f4:4a:b4:ff:0f:60:
         a2:12:97:a2:a7:14:11:33:77:08:78:cc:d2:e0:b3:99:00:c6:
         ad:bd:88:70:60:2d:4d:f1:d6:fc:a4:dd:c1:9c:30:25:11:1c:
         1c:d8:93:1a:be:fb:ff:15:15:7b:0e:af:93:e6:83:10:b7:b4:
         d4:e6:df:8f:85:56:93:5b:ba:85:c4:52:02:c3:8d:3e:0a:90:
         b5:c8:11:4b:9f:38:dd:f5:7c:84:03:c4:02:1d:46:a0:52:82:
         b2:46:ad:46:27:aa:72:e0:66:78:d3:bc:e5:e1:77:88:05:67:
         1d:19:6a:1b:f9:55:18:91:58:17:48:73:db:24:44:25:2d:de:
         ba:8c:56:ed:8e:4d:5f:22:e8:23:34:c0:53:0c:c3:ef:30:45:
         3d:b7:bd:06:62:53:a8:42:50:58:59:45:48:52:5c:60:33:df:
         31:6d:aa:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lOeJiHrESfIc08AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjBjYTAyZTctN2ExMi00ZDkwLThmZWItOGYxMzBhYWVh
MzgwMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk
Y2YzZTM1ZTMtMjk0Ni00ZTcyLWIzYTYtYzZmMjEzM2IyOGY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/nlgPzqCq7WsEFnZ/lJilRl0enPqc76lArz
tbP7UcULwYEreV5O3Kmfdy4IZxjj+eswpQezZi9DsolV7Mshxpj2ZG/VyxdTwI3e
bsJNenmm3w0Wv07RWOzOjMZrBKgC/pnF4pZJ40kR9oHUPgTPZoFbYR9yo0ETSAOe
YBhzHPAyt6dexoXEZfrnZGaApKQqKNUPRGZozqFFCc7mjzTWJGsWohkILQM2U7Ns
4/MPSFLbp33RPigdc4xjtPmOaFauTLr61JMXftJugaJgyLe8X94jY7SWJmH2MsAZ
winxtIJkyzdXZNVj3iKu684fkb1QMxyw0vDYXiuJCgCD7lgUgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPqH/mf1kgEspi+wz/nkAeOqLpqqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMGNh
MDJlNy03YTEyLTRkOTAtOGZlYi04ZjEzMGFhZWEzODAvNzYyY2NmMzctOGRlOC0z
N2JkLTljZTktYjRhNGRiZTFjY2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjBjYTAyZTctN2ExMi00ZDkwLThm
ZWItOGYxMzBhYWVhMzgwL2IwY2EwMmU3LTdhMTItNGQ5MC04ZmViLThmMTMwYWFl
YTM4MC5jcmwwHwYDVR0jBBgwFoAU7+jFlj49ZhUup1G+nGYMlTKJpFswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMGNhMDJlNy03YTEyLTRkOTAtOGZlYi04ZjEz
MGFhZWEzODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApDf0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGqnneoXi2J7Rj6P1ORua4HDaDzNKMTJiQpqVXegvAaIwYP8mfGJ9T5g
qm4YJMMDflzNdJ9bH8AzYmRVssqFcnxg4k3MGbYDt/5MrgYUpHGE6Ggl9fRKtP8P
YKISl6KnFBEzdwh4zNLgs5kAxq29iHBgLU3x1vyk3cGcMCURHBzYkxq++/8VFXsO
r5PmgxC3tNTm34+FVpNbuoXEUgLDjT4KkLXIEUufON31fIQDxAIdRqBSgrJGrUYn
qnLgZnjTvOXhd4gFZx0Zahv5VRiRWBdIc9skRCUt3rqMVu2OTV8i6CM0wFMMw+8w
RT23vQZiU6hCUFhZRUhSXGAz3zFtqgM=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:58:49 2026 by rpki-client