Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb/cff0d952-52e3-3fe5-9ec1-9ce4ab4e0a44.roa
File:                     cff0d952-52e3-3fe5-9ec1-9ce4ab4e0a44.roa (raw, json)
Hash identifier:          VM5yod9oWokzTXJgP5US6ZS9pAEu557SW3vVgQBr4NA=
Subject key identifier:   F9:C5:D2:70:02:2A:7B:18:78:AA:1F:DC:7B:D0:CE:7B:A8:D9:DB:76
Certificate issuer:       /CN=13f31b18-a04d-4db3-a3a5-b76ea4fe56fb
Certificate serial:       010D0C9F4328584E296F1DF3B22F84404AC8D280
Authority key identifier: 45:77:DE:44:A4:E3:4C:8A:9A:F2:2E:30:CB:B3:D3:CB:D1:9A:C7:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb/cff0d952-52e3-3fe5-9ec1-9ce4ab4e0a44.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     8075
IP address blocks:        216.99.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:1d:f3:b2:2f:84:40:4a:c8:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f31b18-a04d-4db3-a3a5-b76ea4fe56fb
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=4eb4a673-7800-4010-8f43-fdc0aee69ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1e:0c:10:8d:a6:ae:d8:6b:42:f8:06:72:e5:
                    80:61:74:b4:d8:3e:cf:ba:33:be:d4:5e:8c:30:33:
                    9a:80:fe:7c:88:0e:84:f4:92:58:be:2b:80:b3:76:
                    0f:21:57:a6:db:91:84:e2:46:65:4e:6e:99:96:ff:
                    7b:a4:82:1f:19:6a:fe:8b:cd:dc:21:a5:41:84:2b:
                    81:4b:56:7a:ef:dd:34:c1:f5:d4:a0:23:93:6b:15:
                    e7:cb:e7:de:3f:c9:ff:e2:4b:9b:d9:e1:3a:a2:07:
                    87:21:83:3b:be:7b:a1:3c:a0:ee:d7:c1:4a:d0:b7:
                    28:f2:54:b3:0f:3f:e9:59:35:d4:f7:0f:cd:73:1b:
                    cd:e4:b3:7c:7d:09:41:9e:e5:2b:c4:f9:7f:5c:f0:
                    81:57:e7:c3:60:5c:ac:62:40:d6:c8:14:0c:df:28:
                    44:a7:e3:29:9d:b1:7e:b9:d5:7a:94:ca:25:64:a2:
                    cf:12:e2:4a:44:65:65:5f:f7:dc:7f:16:e1:6f:ad:
                    0d:5a:44:3c:97:db:10:6a:83:0e:2d:f0:46:eb:49:
                    ba:0a:01:d5:81:07:a6:73:69:e3:2e:54:19:dc:26:
                    8d:ba:b0:d0:0f:8d:10:28:70:fc:6f:2d:91:9d:37:
                    00:d4:67:9b:d3:a7:22:bf:29:ea:ce:5e:5a:28:ef:
                    9c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C5:D2:70:02:2A:7B:18:78:AA:1F:DC:7B:D0:CE:7B:A8:D9:DB:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb/cff0d952-52e3-3fe5-9ec1-9ce4ab4e0a44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb.crl

            X509v3 Authority Key Identifier:
                keyid:45:77:DE:44:A4:E3:4C:8A:9A:F2:2E:30:CB:B3:D3:CB:D1:9A:C7:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.99.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:e0:8f:c4:6c:b2:0e:06:2a:e9:18:65:4e:fe:72:4b:22:bc:
         6e:8e:d3:ec:3b:ab:d3:1f:fd:cd:83:7a:cf:a3:e8:dc:95:bf:
         82:14:1b:50:8c:f1:41:6c:11:44:43:5c:d4:db:2c:93:14:e0:
         76:da:e9:cb:40:fd:5a:f4:d9:3b:b6:7f:ae:cb:9e:a4:c8:5d:
         68:fd:9c:15:b2:5b:bb:9d:48:df:57:12:5d:f6:94:3e:45:a4:
         ef:49:64:2b:b7:8c:2d:05:d9:bb:6b:61:1e:66:88:0a:dc:3c:
         d1:ea:21:73:92:e6:ee:d9:bf:d0:a6:3d:8c:48:02:a8:44:fe:
         4f:90:5e:fb:07:31:24:e9:7c:3f:57:0a:23:48:99:2b:5d:3e:
         6d:65:b3:a7:41:27:26:09:9f:27:7f:c7:33:8d:7b:d8:99:ad:
         8a:bd:d5:5d:f6:b6:c6:3a:8e:89:64:12:26:3d:ae:fa:3f:20:
         19:8b:25:5f:06:47:2c:dd:c4:81:52:bb:d4:89:34:eb:65:0c:
         01:c2:ee:70:e9:71:cf:69:af:61:e2:ad:45:b0:90:4f:ca:3c:
         e6:6a:2b:29:ab:b1:68:05:c7:02:84:d0:85:68:a0:55:38:16:
         66:87:31:24:ec:a0:f9:05:b3:d3:b5:68:c0:7f:67:3c:af:c3:
         9e:19:ea:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4pbx3zsi+EQErI0oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTNmMzFiMTgtYTA0ZC00ZGIzLWEzYTUtYjc2ZWE0ZmU1
NmZiMB4XDTI2MDYxMzIxMDAxMloXDTI2MDkxMTIxMDAxMlowLzEtMCsGA1UEAxMk
NGViNGE2NzMtNzgwMC00MDEwLThmNDMtZmRjMGFlZTY5YmE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR4MEI2mrthrQvgGcuWAYXS02D7PujO+1F6M
MDOagP58iA6E9JJYviuAs3YPIVem25GE4kZlTm6Zlv97pIIfGWr+i83cIaVBhCuB
S1Z67900wfXUoCOTaxXny+feP8n/4kub2eE6ogeHIYM7vnuhPKDu18FK0Lco8lSz
Dz/pWTXU9w/NcxvN5LN8fQlBnuUrxPl/XPCBV+fDYFysYkDWyBQM3yhEp+MpnbF+
udV6lMolZKLPEuJKRGVlX/fcfxbhb60NWkQ8l9sQaoMOLfBG60m6CgHVgQemc2nj
LlQZ3CaNurDQD40QKHD8by2RnTcA1Geb06civynqzl5aKO+cUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPnF0nACKnsYeKof3HvQznuo2dt2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8xM2Yz
MWIxOC1hMDRkLTRkYjMtYTNhNS1iNzZlYTRmZTU2ZmIvY2ZmMGQ5NTItNTJlMy0z
ZmU1LTllYzEtOWNlNGFiNGUwYTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMTNmMzFiMTgtYTA0ZC00ZGIzLWEz
YTUtYjc2ZWE0ZmU1NmZiLzEzZjMxYjE4LWEwNGQtNGRiMy1hM2E1LWI3NmVhNGZl
NTZmYi5jcmwwHwYDVR0jBBgwFoAURXfeRKTjTIqa8i4wy7PTy9Gax8UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS8xM2YzMWIxOC1hMDRkLTRkYjMtYTNhNS1iNzZl
YTRmZTU2ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GNEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ7gj8Rssg4GKukYZU7+cksivG6O0+w7q9Mf/c2Des+j6NyVv4IUG1CM
8UFsEURDXNTbLJMU4Hba6ctA/Vr02Tu2f67LnqTIXWj9nBWyW7udSN9XEl32lD5F
pO9JZCu3jC0F2btrYR5miArcPNHqIXOS5u7Zv9CmPYxIAqhE/k+QXvsHMSTpfD9X
CiNImStdPm1ls6dBJyYJnyd/xzONe9iZrYq91V32tsY6jolkEiY9rvo/IBmLJV8G
RyzdxIFSu9SJNOtlDAHC7nDpcc9pr2HirUWwkE/KPOZqKymrsWgFxwKE0IVooFU4
FmaHMSTsoPkFs9O1aMB/Zzyvw54Z6uk=
-----END CERTIFICATE-----
Generated at Tue Jul 21 04:53:14 2026 by rpki-client