Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/559623de-14dc-3254-abac-1b766ef6a5f9.roa
File:                     559623de-14dc-3254-abac-1b766ef6a5f9.roa (raw, json)
Hash identifier:          mMbn4Ah4B7ciEqCNXta9pn/1UTfNSZUKlJOyhb+MDtU=
Subject key identifier:   6B:CB:A2:54:79:A4:5B:71:CC:C2:92:7F:B9:39:C9:1D:5D:6B:AD:E7
Certificate issuer:       /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Certificate serial:       010D0C9F4328584E709F7C6EC3DD35881B0EA668
Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/559623de-14dc-3254-abac-1b766ef6a5f9.roa
Signing time:             Thu 09 Jul 2026 09:00:13 +0000
ROA not before:           Thu 09 Jul 2026 09:00:13 +0000
ROA not after:            Wed 07 Oct 2026 09:00:13 +0000
asID:                     15296
IP address blocks:        199.216.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:9f:7c:6e:c3:dd:35:88:1b:0e:a6:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
        Validity
            Not Before: Jul  9 09:00:13 2026 GMT
            Not After : Oct  7 09:00:13 2026 GMT
        Subject: CN=44042453-2731-436f-a62a-28eb113ddff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:73:a2:0e:62:d5:d3:f0:5d:55:12:c3:c0:26:
                    ff:01:ec:0e:24:b4:f4:1d:b6:86:a4:1f:bd:c0:6b:
                    7b:0b:ed:d5:2a:5b:0a:0f:24:ae:2f:2e:d6:e2:3d:
                    c6:b4:a3:e6:31:80:bd:24:3b:5a:a2:43:38:a4:56:
                    81:42:46:00:77:05:04:b1:ae:dd:fb:a5:cc:16:17:
                    06:79:25:b3:c0:ed:83:0c:2e:31:35:3a:c6:c6:a4:
                    7a:50:6f:1e:de:6d:9f:60:7d:30:cb:5f:e5:8a:f8:
                    34:9a:99:d0:28:45:b9:ac:f1:ff:a1:39:63:c4:e1:
                    9e:d2:1c:2b:ac:d1:35:88:1c:44:83:7b:03:ff:ee:
                    38:60:2e:39:ce:07:13:1d:15:56:68:d2:4f:1c:2c:
                    eb:43:f4:18:0f:62:06:75:c3:0f:15:da:0f:88:d6:
                    01:37:9d:b8:e6:5b:87:7a:e0:13:96:9b:ba:0f:27:
                    22:6a:83:18:be:aa:54:c5:45:07:cf:17:c7:12:9e:
                    34:2d:fc:2f:65:12:ce:25:4c:b4:82:d7:37:50:09:
                    a2:f4:33:10:3d:50:53:0b:f7:3d:b0:a1:b4:5e:b5:
                    b4:97:cd:8f:a1:fd:f1:29:ff:25:22:81:8d:25:96:
                    c6:c5:40:71:11:50:a5:35:c9:d4:bb:49:10:17:59:
                    14:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:CB:A2:54:79:A4:5B:71:CC:C2:92:7F:B9:39:C9:1D:5D:6B:AD:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/559623de-14dc-3254-abac-1b766ef6a5f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl

            X509v3 Authority Key Identifier:
                keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.216.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:8a:22:9e:bf:8b:06:f8:6d:5f:d2:38:ba:77:6e:cd:17:54:
         cc:96:d3:fe:1d:d1:57:d2:2b:82:69:7c:9a:78:c3:fe:67:dd:
         f5:62:7a:d4:e3:04:11:8e:8f:b4:82:b4:28:6e:37:7f:87:8f:
         a8:2c:aa:40:78:6d:88:05:da:b0:cf:1e:27:e8:0b:a0:65:d2:
         e9:fc:7b:3e:96:4a:31:a4:a8:95:42:2c:e3:33:12:68:5e:07:
         10:c5:0a:93:ad:76:fc:c6:06:c6:bb:cc:c6:cd:b8:95:16:89:
         89:8e:c8:86:e5:7f:bb:87:f8:7c:ac:25:dc:77:bc:36:57:4e:
         8a:b0:00:37:64:28:52:c2:d9:2f:7b:5d:09:fa:a3:44:1b:90:
         05:60:fc:db:34:98:30:e9:6c:c5:fa:da:ab:57:3c:d1:e3:e5:
         99:db:e1:13:f2:31:f3:e4:95:4d:b5:5f:d0:bd:ca:3c:6b:1a:
         f1:7b:a7:5e:db:99:7f:48:9f:98:4f:72:06:89:5d:28:4b:1d:
         a8:38:2b:09:d1:41:63:f0:8e:bc:4d:d1:1b:4c:d7:af:25:9c:
         cf:ff:15:6a:95:66:fa:a4:25:be:0d:2d:cf:f8:d8:c4:27:d0:
         a8:a2:08:b3:9b:c8:f7:eb:d2:c8:16:1f:2f:ef:fc:43:a4:e1:
         65:c2:ec:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wn3xuw901iBsOpmgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjFmM2M3YzQtYTc3MS00N2E5LWE0ZTgtMGFhZTdkZjdi
MjM0MB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk
NDQwNDI0NTMtMjczMS00MzZmLWE2MmEtMjhlYjExM2RkZmY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53OiDmLV0/BdVRLDwCb/AewOJLT0HbaGpB+9
wGt7C+3VKlsKDySuLy7W4j3GtKPmMYC9JDtaokM4pFaBQkYAdwUEsa7d+6XMFhcG
eSWzwO2DDC4xNTrGxqR6UG8e3m2fYH0wy1/livg0mpnQKEW5rPH/oTljxOGe0hwr
rNE1iBxEg3sD/+44YC45zgcTHRVWaNJPHCzrQ/QYD2IGdcMPFdoPiNYBN5245luH
euATlpu6DyciaoMYvqpUxUUHzxfHEp40LfwvZRLOJUy0gtc3UAmi9DMQPVBTC/c9
sKG0XrW0l82Pof3xKf8lIoGNJZbGxUBxEVClNcnUu0kQF1kU3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGvLolR5pFtxzMKSf7k5yR1da63nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYz
YzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFlN2RmN2IyMzQvNTU5NjIzZGUtMTRkYy0z
MjU0LWFiYWMtMWI3NjZlZjZhNWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjFmM2M3YzQtYTc3MS00N2E5LWE0
ZTgtMGFhZTdkZjdiMjM0LzYxZjNjN2M0LWE3NzEtNDdhOS1hNGU4LTBhYWU3ZGY3
YjIzNC5jcmwwHwYDVR0jBBgwFoAUu4hNX94f3LZip94TiP38oD8P+I4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYzYzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFl
N2RmN2IyMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9jAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFqKIp6/iwb4bV/SOLp3bs0XVMyW0/4d0VfSK4JpfJp4w/5n3fVietTj
BBGOj7SCtChuN3+Hj6gsqkB4bYgF2rDPHifoC6Bl0un8ez6WSjGkqJVCLOMzEmhe
BxDFCpOtdvzGBsa7zMbNuJUWiYmOyIblf7uH+HysJdx3vDZXToqwADdkKFLC2S97
XQn6o0QbkAVg/Ns0mDDpbMX62qtXPNHj5Znb4RPyMfPklU21X9C9yjxrGvF7p17b
mX9In5hPcgaJXShLHag4KwnRQWPwjrxN0RtM168lnM//FWqVZvqkJb4NLc/42MQn
0KiiCLObyPfr0sgWHy/v/EOk4WXC7Bg=
-----END CERTIFICATE-----
Generated at Tue Jul 21 15:57:40 2026 by rpki-client