Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2ffe7fa3-e3e9-3e92-b90e-270471a89f9f.roa
File:                     2ffe7fa3-e3e9-3e92-b90e-270471a89f9f.roa (raw, json)
Hash identifier:          hGsnU9GrMMPzjwp+kobHknh2JK6dOUxuzlK8so8BMrk=
Subject key identifier:   1E:96:05:50:95:FB:92:BF:1A:32:52:B5:E1:67:42:B8:0E:64:8D:1E
Certificate issuer:       /CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd
Certificate serial:       010D0C9F4328584E885A429003B973B32EAD9D00
Authority key identifier: 6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2ffe7fa3-e3e9-3e92-b90e-270471a89f9f.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     17044
IP address blocks:        170.200.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:42:90:03:b9:73:b3:2e:ad:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a8d6c4c-eb82-43f1-80cc-884c560bd0bd
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=82a23af0-75db-46c4-8b7c-cee06a47e087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:79:8f:f1:bf:04:ed:e6:4e:7e:97:78:fc:7e:
                    48:2f:07:d2:c7:18:a9:5d:f2:cb:65:25:d1:18:e2:
                    ec:1f:00:0d:89:d9:36:50:fc:2a:97:49:a6:03:58:
                    60:0f:7a:8a:21:53:dd:f7:a5:ad:98:90:1b:c1:8b:
                    49:83:04:1b:ba:2c:7c:db:ea:98:ae:2d:9d:63:02:
                    45:b6:f5:2f:f3:6f:0c:54:4c:ac:ca:ae:61:a6:60:
                    6d:0b:b0:20:3b:8f:2c:a1:fb:95:55:c4:a4:1e:a0:
                    70:97:f4:70:38:01:20:96:dd:b8:18:d2:af:d5:c9:
                    28:3e:41:d0:44:2e:34:80:c7:30:7d:77:8b:31:f2:
                    f1:68:bc:70:e4:36:30:ff:05:76:ab:35:08:f0:6d:
                    78:b2:cb:e0:9c:3c:06:00:af:ae:6f:b3:a7:f2:88:
                    29:33:0c:df:d6:f6:5c:6c:3b:52:a4:0a:67:9f:43:
                    78:4d:fa:a7:7b:cd:a8:22:b4:21:cb:a2:02:65:10:
                    52:e0:26:73:31:ad:b4:c3:d6:f5:d7:da:2f:9a:78:
                    21:fc:fb:b7:83:de:ca:f9:9a:4c:4f:e0:fb:77:06:
                    ec:a7:ae:dc:02:72:89:c1:d3:99:27:c2:a1:89:a8:
                    75:d5:fb:6f:31:85:0e:36:0c:8b:58:58:fd:8c:c8:
                    cc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:96:05:50:95:FB:92:BF:1A:32:52:B5:E1:67:42:B8:0E:64:8D:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/2ffe7fa3-e3e9-3e92-b90e-270471a89f9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.crl

            X509v3 Authority Key Identifier:
                keyid:6E:8B:F4:7D:E4:DB:28:26:29:13:4D:8E:C3:9D:0A:17:DC:6A:B2:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a8d6c4c-eb82-43f1-80cc-884c560bd0bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.200.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:8f:64:55:fe:48:7d:bd:6b:49:8f:4d:d4:80:e6:94:38:79:
         95:42:39:f5:66:7e:9b:8e:5a:62:da:5d:d8:a5:5b:b2:23:a8:
         85:96:71:01:98:82:9c:fb:06:86:2c:b5:ec:f9:be:4c:0d:49:
         5f:bc:18:fe:3a:65:e7:56:a1:d8:a8:7f:d0:10:a4:0e:cf:2d:
         65:b2:d3:6c:1e:0f:23:bc:8c:40:b8:96:2e:0f:30:2a:2f:12:
         a9:dc:99:3b:70:10:e3:0a:36:13:74:a3:77:07:5c:35:eb:96:
         de:b1:c9:0c:f7:18:6c:17:69:21:47:92:60:ff:5b:e9:c0:d8:
         f5:39:69:6c:50:36:6d:c1:60:ba:46:44:6b:b9:66:08:37:81:
         d5:80:8d:f3:cb:da:5e:94:e1:42:ad:9a:99:6e:f0:11:fe:13:
         32:12:57:af:a4:a0:35:31:ee:0f:ff:93:c3:a7:ad:e5:79:25:
         a5:f9:c8:9a:62:5d:ff:28:94:da:c2:fa:76:fd:ae:5a:aa:e6:
         9a:b2:c0:95:95:d8:2a:bc:a1:d3:b8:42:11:00:fa:db:28:0d:
         c1:d0:84:ec:2e:c3:50:67:0e:f6:99:8b:3a:4f:3f:6c:d8:ad:
         56:fb:26:13:49:e2:08:85:29:c2:e6:f4:1c:3e:ce:b3:96:21:
         c6:7e:6f:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IWkKQA7lzsy6tnQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2E4ZDZjNGMtZWI4Mi00M2YxLTgwY2MtODg0YzU2MGJk
MGJkMB4XDTI2MDcxNzIxMDAxMloXDTI2MTAxNTIxMDAxMlowLzEtMCsGA1UEAxMk
ODJhMjNhZjAtNzVkYi00NmM0LThiN2MtY2VlMDZhNDdlMDg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHmP8b8E7eZOfpd4/H5ILwfSxxipXfLLZSXR
GOLsHwANidk2UPwql0mmA1hgD3qKIVPd96WtmJAbwYtJgwQbuix82+qYri2dYwJF
tvUv828MVEysyq5hpmBtC7AgO48sofuVVcSkHqBwl/RwOAEglt24GNKv1ckoPkHQ
RC40gMcwfXeLMfLxaLxw5DYw/wV2qzUI8G14ssvgnDwGAK+ub7On8ogpMwzf1vZc
bDtSpApnn0N4Tfqne82oIrQhy6ICZRBS4CZzMa20w9b119ovmngh/Pu3g97K+ZpM
T+D7dwbsp67cAnKJwdOZJ8Khiah11ftvMYUONgyLWFj9jMjMXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB6WBVCV+5K/GjJSteFnQrgOZI0eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThk
NmM0Yy1lYjgyLTQzZjEtODBjYy04ODRjNTYwYmQwYmQvMmZmZTdmYTMtZTNlOS0z
ZTkyLWI5MGUtMjcwNDcxYTg5ZjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2E4ZDZjNGMtZWI4Mi00M2YxLTgw
Y2MtODg0YzU2MGJkMGJkLzNhOGQ2YzRjLWViODItNDNmMS04MGNjLTg4NGM1NjBi
ZDBiZC5jcmwwHwYDVR0jBBgwFoAUbov0feTbKCYpE02Ow50KF9xqsgEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zYThkNmM0Yy1lYjgyLTQzZjEtODBjYy04ODRj
NTYwYmQwYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsgwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAISPZFX+SH29a0mPTdSA5pQ4eZVCOfVmfpuOWmLaXdilW7IjqIWWcQGY
gpz7BoYstez5vkwNSV+8GP46ZedWodiof9AQpA7PLWWy02weDyO8jEC4li4PMCov
EqncmTtwEOMKNhN0o3cHXDXrlt6xyQz3GGwXaSFHkmD/W+nA2PU5aWxQNm3BYLpG
RGu5Zgg3gdWAjfPL2l6U4UKtmplu8BH+EzISV6+koDUx7g//k8OnreV5JaX5yJpi
Xf8olNrC+nb9rlqq5pqywJWV2Cq8odO4QhEA+tsoDcHQhOwuw1BnDvaZizpPP2zY
rVb7JhNJ4giFKcLm9Bw+zrOWIcZ+b1c=
-----END CERTIFICATE-----
Generated at Wed Jul 22 00:17:00 2026 by rpki-client