Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/99f40d0e-26f9-386b-bbbd-293755fb24c3.roa
File:                     99f40d0e-26f9-386b-bbbd-293755fb24c3.roa (raw, json)
Hash identifier:          /CA4y05QNxhvgapRJOafJTg+Tm6sF0bXL0k4uNwLfic=
Subject key identifier:   0E:6F:51:BE:29:60:51:39:0E:61:46:87:B7:21:2B:4C:16:63:13:F6
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E78FF75D05613B07E7201A880
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/99f40d0e-26f9-386b-bbbd-293755fb24c3.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     400687
IP address blocks:        216.133.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:75:d0:56:13:b0:7e:72:01:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=4df3ef53-979d-4fe0-9434-ff95fe2f1562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:39:ba:42:90:81:1f:ca:f3:1b:2f:a5:a9:70:
                    f3:9d:89:2b:f6:f6:d6:c5:21:3b:73:8e:d2:d0:86:
                    85:d0:29:40:a2:21:13:20:98:d6:41:ca:24:d2:94:
                    1a:45:ef:df:29:7b:56:50:89:73:04:a2:8b:f3:6e:
                    fb:5b:70:f2:7a:e6:eb:88:d4:51:a9:4b:da:50:d2:
                    e9:61:66:71:6e:ab:f6:ba:7d:69:db:38:55:fa:a6:
                    b9:5a:8f:85:e3:f2:12:9b:ec:13:28:df:d1:78:43:
                    12:2e:a9:f5:15:94:4d:ed:41:f6:81:de:24:27:ef:
                    db:af:ac:4a:95:f2:da:02:65:f1:c1:d3:a0:fd:66:
                    de:54:89:4b:f7:09:c4:5c:aa:36:e0:fb:19:dd:0b:
                    87:56:d1:2d:fd:31:9a:1c:51:99:09:17:96:7c:18:
                    a9:44:cf:52:b7:59:ec:3c:6d:a5:3d:30:76:e9:12:
                    25:1e:07:59:94:69:a8:c2:0f:77:54:7e:5f:c1:62:
                    67:90:61:0e:6c:b2:ae:9a:33:09:9f:d3:01:d2:52:
                    66:2a:33:e4:22:a7:c8:76:8b:a1:cf:6a:ed:a3:a2:
                    77:81:41:0a:96:fc:07:08:59:5c:bb:0a:96:d5:d5:
                    1b:55:88:fd:96:84:af:32:fe:e1:2c:65:37:fe:4d:
                    9f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6F:51:BE:29:60:51:39:0E:61:46:87:B7:21:2B:4C:16:63:13:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/99f40d0e-26f9-386b-bbbd-293755fb24c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.133.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:fd:9f:93:97:7e:7a:ba:ed:05:de:44:cd:5c:45:4c:73:c4:
         16:41:4d:74:ef:d6:28:5b:5d:85:de:ee:99:56:19:10:71:c1:
         1b:22:06:c0:fc:0c:87:ea:98:9b:f0:44:21:2a:5c:56:d7:3d:
         fa:ea:5c:f3:93:33:9c:f8:9a:cb:25:79:d8:4b:9d:89:2e:e8:
         01:43:9d:c8:1d:fa:a8:be:89:dd:d3:3a:97:58:40:18:ab:fd:
         bd:5c:db:59:75:8a:5d:da:84:e2:d4:35:e0:d2:b6:f2:ac:75:
         cf:a4:a5:23:fa:2f:f1:59:b3:f2:53:e2:d5:a8:b2:0a:89:6c:
         b1:94:9e:b6:82:3d:2c:0c:dd:fa:d2:4c:b7:72:1b:f9:8a:af:
         e4:bf:3d:db:0f:5a:1e:a7:8e:2c:b4:56:a3:16:97:72:2b:2b:
         75:f0:f1:28:16:75:6a:cf:73:f6:57:19:8d:8f:61:af:20:a4:
         fa:c6:c5:df:5c:25:33:9e:87:f7:ce:ba:95:57:92:41:c7:22:
         27:9b:31:1f:56:6c:0c:78:2f:d5:28:ad:b5:39:f3:3b:2c:ca:
         4f:46:c9:d3:0a:bd:34:ed:bb:cc:75:35:69:3a:df:05:33:ca:
         00:6d:c3:49:13:8f:5c:85:40:a9:b2:c0:84:ef:0e:4f:24:58:
         f3:be:57:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/3XQVhOwfnIBqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk
NGRmM2VmNTMtOTc5ZC00ZmUwLTk0MzQtZmY5NWZlMmYxNTYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljm6QpCBH8rzGy+lqXDznYkr9vbWxSE7c47S
0IaF0ClAoiETIJjWQcok0pQaRe/fKXtWUIlzBKKL8277W3DyeubriNRRqUvaUNLp
YWZxbqv2un1p2zhV+qa5Wo+F4/ISm+wTKN/ReEMSLqn1FZRN7UH2gd4kJ+/br6xK
lfLaAmXxwdOg/WbeVIlL9wnEXKo24PsZ3QuHVtEt/TGaHFGZCReWfBipRM9St1ns
PG2lPTB26RIlHgdZlGmowg93VH5fwWJnkGEObLKumjMJn9MB0lJmKjPkIqfIdouh
z2rto6J3gUEKlvwHCFlcuwqW1dUbVYj9loSvMv7hLGU3/k2fRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA5vUb4pYFE5DmFGh7chK0wWYxP2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTlmNDBkMGUtMjZmOS0z
ODZiLWJiYmQtMjkzNzU1ZmIyNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2IVjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA/9n5OXfnq67QXeRM1cRUxzxBZBTXTv1ihbXYXe7plWGRBxwRsiBsD8
DIfqmJvwRCEqXFbXPfrqXPOTM5z4mssledhLnYku6AFDncgd+qi+id3TOpdYQBir
/b1c21l1il3ahOLUNeDStvKsdc+kpSP6L/FZs/JT4tWosgqJbLGUnraCPSwM3frS
TLdyG/mKr+S/PdsPWh6njiy0VqMWl3IrK3Xw8SgWdWrPc/ZXGY2PYa8gpPrGxd9c
JTOeh/fOupVXkkHHIiebMR9WbAx4L9UorbU58zssyk9GydMKvTTtu8x1NWk63wUz
ygBtw0kTj1yFQKmywITvDk8kWPO+V+c=
-----END CERTIFICATE-----
Generated at Wed Jul 22 16:59:37 2026 by rpki-client