Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa
File:                     2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa (raw, json)
Hash identifier:          oTFLQT8Tw7m8gJaEd79lBdePdV/rZxMkbRkAKmAaZwE=
Subject key identifier:   C4:E2:AA:5F:3F:5E:09:D8:BD:16:EB:5E:0E:1F:23:EB:1B:79:DF:2C
Certificate issuer:       /CN=fc035063-bc0b-41c0-9f50-9cfa0f9db697
Certificate serial:       010D0C9F4328584DE84B4379945D2D1A78F6A5F0
Authority key identifier: 89:40:2D:A2:5D:38:A2:01:A7:FD:47:31:54:2A:8D:81:DF:4E:6A:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     401468
IP address blocks:        23.128.124.0/24 maxlen: 24
                          192.43.161.0/24 maxlen: 24
                          2602:f9a0::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:43:79:94:5d:2d:1a:78:f6:a5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc035063-bc0b-41c0-9f50-9cfa0f9db697
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=59ba7ec0-592b-45d7-9a0f-51e2217b314a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:66:a2:b0:2e:e2:c1:d9:fc:18:0c:9d:01:58:
                    d6:fb:21:4f:58:11:af:ce:04:f1:26:4f:68:2d:99:
                    81:f4:50:bc:63:b9:bc:6a:ca:e8:c4:0d:da:96:c4:
                    02:a9:a2:72:38:28:64:23:01:dc:7f:92:3c:bd:f9:
                    b1:01:35:fb:fe:65:45:fc:bf:19:c7:57:eb:d4:a3:
                    26:3b:bb:2e:0c:86:16:ad:08:85:a7:d1:9d:56:f9:
                    5c:1d:90:cc:e1:3a:17:df:a5:03:d0:70:64:f3:57:
                    6b:4a:83:3a:26:96:5f:53:47:db:5a:b8:8f:7a:16:
                    bc:07:9d:db:58:03:a4:08:df:0c:4e:55:a1:f9:8c:
                    7c:cf:2d:97:97:4d:94:ee:81:75:77:97:59:4c:9f:
                    19:a0:ee:6c:ad:55:72:e2:6d:ad:46:91:b0:0a:58:
                    06:f9:ac:4d:34:82:80:74:aa:a5:3a:ca:91:43:fc:
                    74:15:18:35:9c:e0:20:cc:2f:1a:95:dc:5c:8c:86:
                    76:2c:ec:b5:d8:03:cc:6c:e6:ce:85:fc:4f:d7:63:
                    eb:37:80:d1:16:b8:13:0a:8f:53:24:02:f0:99:ae:
                    4d:2a:50:51:92:0b:a4:69:12:c9:ba:35:04:e7:1f:
                    35:a0:03:9a:9b:ab:dc:bd:81:3f:99:e8:b0:ff:18:
                    c2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E2:AA:5F:3F:5E:09:D8:BD:16:EB:5E:0E:1F:23:EB:1B:79:DF:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.crl

            X509v3 Authority Key Identifier:
                keyid:89:40:2D:A2:5D:38:A2:01:A7:FD:47:31:54:2A:8D:81:DF:4E:6A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.124.0/24
                  192.43.161.0/24
                IPv6:
                  2602:f9a0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:c4:60:33:d6:80:04:d1:48:d4:82:26:10:1e:4e:94:58:33:
         f6:14:a9:46:9e:57:51:9b:8b:d1:87:67:ee:81:58:52:3d:d2:
         51:d6:ff:b8:d4:99:68:55:24:47:28:81:6e:2f:41:c2:61:7a:
         c8:ec:a2:b5:f0:78:7b:d5:ab:8e:2e:95:33:ae:15:32:dc:0b:
         c5:0c:5a:e6:97:30:e7:ee:ca:bf:b5:d7:e6:79:1c:90:23:ba:
         da:08:ad:fb:e9:58:05:ff:18:91:0a:6c:f8:6d:33:ce:cf:4d:
         c3:d3:a2:7a:96:35:bc:14:0e:05:4f:7e:a1:7e:c6:ce:b1:9a:
         9d:91:f3:66:97:a7:8c:c9:30:45:3d:a3:73:e7:c7:e1:6c:97:
         53:d5:ae:c3:f8:86:ed:7a:e1:dc:b7:8b:41:e6:a0:a4:1e:70:
         86:ed:d4:48:dc:a5:7a:5d:f3:e1:6e:fb:02:ff:26:9c:8a:10:
         57:e2:47:89:30:d9:5e:95:fa:a3:55:4a:c7:8c:e7:6d:01:c2:
         10:6e:e4:c3:d7:a4:d1:cf:07:02:48:88:40:51:44:ce:66:4c:
         69:c4:7b:34:e0:4f:b3:eb:52:5d:23:96:55:53:93:e8:d4:31:
         bc:4e:90:09:91:8e:27:31:b5:a7:26:ae:3b:09:39:ee:12:94:
         92:18:68:de
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE3oS0N5lF0tGnj2pfAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmMwMzUwNjMtYmMwYi00MWMwLTlmNTAtOWNmYTBmOWRi
Njk3MB4XDTI2MDUyMTEzMDAzMloXDTI2MDgxOTEzMDAzMlowLzEtMCsGA1UEAxMk
NTliYTdlYzAtNTkyYi00NWQ3LTlhMGYtNTFlMjIxN2IzMTRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWaisC7iwdn8GAydAVjW+yFPWBGvzgTxJk9o
LZmB9FC8Y7m8asroxA3alsQCqaJyOChkIwHcf5I8vfmxATX7/mVF/L8Zx1fr1KMm
O7suDIYWrQiFp9GdVvlcHZDM4ToX36UD0HBk81drSoM6JpZfU0fbWriPeha8B53b
WAOkCN8MTlWh+Yx8zy2Xl02U7oF1d5dZTJ8ZoO5srVVy4m2tRpGwClgG+axNNIKA
dKqlOsqRQ/x0FRg1nOAgzC8aldxcjIZ2LOy12APMbObOhfxP12PrN4DRFrgTCo9T
JALwma5NKlBRkgukaRLJujUE5x81oAOam6vcvYE/meiw/xjC8wIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFMTiql8/XgnYvRbrXg4fI+sbed8sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mYzAz
NTA2My1iYzBiLTQxYzAtOWY1MC05Y2ZhMGY5ZGI2OTcvMmY0ZWU4N2UtMGU4Mi0z
MWU5LTgzNjQtYzg4OTMwZTdkN2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZmMwMzUwNjMtYmMwYi00MWMwLTlm
NTAtOWNmYTBmOWRiNjk3L2ZjMDM1MDYzLWJjMGItNDFjMC05ZjUwLTljZmEwZjlk
YjY5Ny5jcmwwHwYDVR0jBBgwFoAUiUAtol04ogGn/UcxVCqNgd9OaiowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mYzAzNTA2My1iYzBiLTQxYzAtOWY1MC05Y2Zh
MGY5ZGI2OTcuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF4B8AwQA
wCuhMA4EAgACMAgDBgAmAvmgADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCExGAz1oAE0UjUgiYQHk6UWDP2
FKlGnldRm4vRh2fugVhSPdJR1v+41JloVSRHKIFuL0HCYXrI7KK18Hh71auOLpUz
rhUy3AvFDFrmlzDn7sq/tdfmeRyQI7raCK376VgF/xiRCmz4bTPOz03D06J6ljW8
FA4FT36hfsbOsZqdkfNml6eMyTBFPaNz58fhbJdT1a7D+IbteuHct4tB5qCkHnCG
7dRI3KV6XfPhbvsC/yacihBX4keJMNlelfqjVUrHjOdtAcIQbuTD16TRzwcCSIhA
UUTOZkxpxHs04E+z61JdI5ZVU5Po1DG8TpAJkY4nMbWnJq47CTnuEpSSGGje
-----END CERTIFICATE-----
Generated at Fri Jun 5 18:51:06 2026 by rpki-client