Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2f1d7154-3db1-3ef9-ba5d-e8a0a9144506.roa
File:                     2f1d7154-3db1-3ef9-ba5d-e8a0a9144506.roa (raw, json)
Hash identifier:          HbwF5z1Nqof2VeRuGQzXludYy7IDpVo1VHOmQ8n61uE=
Subject key identifier:   15:49:E8:EE:70:E8:E8:C3:F4:7B:CE:D8:FA:15:3C:F0:65:E9:FE:C6
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584E7634DB8A618DC1B8D6562C00
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2f1d7154-3db1-3ef9-ba5d-e8a0a9144506.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     1742
IP address blocks:        199.94.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:db:8a:61:8d:c1:b8:d6:56:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=568cdde8-466a-4d9d-98f5-fed74bfe109f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:12:97:46:71:43:ff:ad:dd:94:7f:dd:2b:64:
                    d5:b0:f3:2d:a3:51:d8:d6:1a:d6:11:aa:74:ea:79:
                    b2:fb:38:9c:34:b5:bd:8a:72:49:8c:fb:6e:d3:be:
                    d6:dc:d3:ff:2b:e8:6e:c0:5b:76:fd:96:a2:b7:d5:
                    f8:c0:cb:87:00:82:71:ee:9e:b4:bf:6a:b0:b7:15:
                    53:e9:10:8b:e1:e5:cc:50:fc:c6:35:9b:bd:67:b2:
                    0d:4a:6a:07:40:d7:b5:ad:87:1e:ae:42:db:3d:49:
                    a1:a8:be:d4:9a:2d:3d:7e:8b:81:b9:3d:a4:2e:fa:
                    fd:7e:ec:71:d2:b1:a3:28:aa:58:d7:f2:bb:55:dd:
                    c9:b2:80:bd:f6:67:69:68:10:c7:10:f6:2a:d1:b4:
                    86:19:e9:5d:0a:a8:50:e4:7f:0f:30:77:1e:60:c9:
                    c8:c0:16:19:b8:ef:30:d9:71:fa:3f:f2:e2:18:61:
                    99:db:63:67:f9:0b:14:b7:4c:2d:cb:d7:bc:93:0c:
                    99:6e:b0:36:79:c9:04:c4:37:eb:bf:ce:4d:d6:21:
                    21:1e:68:2a:60:e3:f9:bb:4b:20:d8:05:a0:56:80:
                    95:12:57:ab:06:35:e0:f1:fb:2c:4d:6c:fa:2d:bd:
                    12:7f:82:c9:85:9a:45:9d:a3:c7:33:11:c9:9e:19:
                    db:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:49:E8:EE:70:E8:E8:C3:F4:7B:CE:D8:FA:15:3C:F0:65:E9:FE:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2f1d7154-3db1-3ef9-ba5d-e8a0a9144506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.94.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:c1:4e:13:4a:1e:52:46:8c:27:fd:f3:d5:5f:52:ad:ae:63:
         48:92:48:4c:ee:90:00:a6:f0:8b:1c:e5:f6:ed:12:70:ac:75:
         67:36:8a:69:5a:95:a2:4b:d5:a3:f3:a2:c4:e8:01:9b:ab:d7:
         27:c6:ec:85:2b:d2:94:57:91:05:6d:7d:6c:b3:a9:ce:20:99:
         7d:fc:bc:e0:c5:d3:65:88:9f:17:6b:5c:4a:33:58:70:a6:01:
         6c:2c:43:1a:cc:63:26:bc:10:ae:96:64:5c:58:10:29:b4:b5:
         91:43:fa:7c:a3:db:c3:53:0e:9a:7f:89:b1:f8:a1:f4:6e:65:
         85:1f:1c:f1:f3:ae:00:01:14:77:db:98:77:e0:de:80:f4:91:
         dd:53:df:77:05:1e:46:fb:a4:f9:12:a5:68:f8:16:05:b0:1f:
         cc:98:e4:fd:6a:bb:ce:e8:b8:bd:54:5f:c7:c4:14:e4:f4:6f:
         fe:6e:b7:3a:48:5a:c6:9c:95:5d:e4:41:7d:36:5f:5c:1a:33:
         80:cc:3a:b9:51:7e:37:09:d9:68:5e:95:73:10:6e:66:61:a5:
         90:38:94:28:50:9b:5f:98:c2:34:d7:c4:0f:e0:fd:b1:7f:6a:
         95:46:6a:f3:c8:5f:d8:b6:66:37:e4:7c:a8:6e:a4:aa:95:fb:
         dd:58:44:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NNuKYY3BuNZWLAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk
NTY4Y2RkZTgtNDY2YS00ZDlkLTk4ZjUtZmVkNzRiZmUxMDlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhKXRnFD/63dlH/dK2TVsPMto1HY1hrWEap0
6nmy+zicNLW9inJJjPtu077W3NP/K+huwFt2/Zait9X4wMuHAIJx7p60v2qwtxVT
6RCL4eXMUPzGNZu9Z7INSmoHQNe1rYcerkLbPUmhqL7Umi09fouBuT2kLvr9fuxx
0rGjKKpY1/K7Vd3JsoC99mdpaBDHEPYq0bSGGeldCqhQ5H8PMHceYMnIwBYZuO8w
2XH6P/LiGGGZ22Nn+QsUt0wty9e8kwyZbrA2eckExDfrv85N1iEhHmgqYOP5u0sg
2AWgVoCVElerBjXg8fssTWz6Lb0Sf4LJhZpFnaPHMxHJnhnbhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBVJ6O5w6OjD9HvO2PoVPPBl6f7GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMmYxZDcxNTQtM2RiMS0z
ZWY5LWJhNWQtZThhMGE5MTQ0NTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx148MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAILBThNKHlJGjCf989VfUq2uY0iSSEzukACm8Isc5fbtEnCsdWc2imla
laJL1aPzosToAZur1yfG7IUr0pRXkQVtfWyzqc4gmX38vODF02WInxdrXEozWHCm
AWwsQxrMYya8EK6WZFxYECm0tZFD+nyj28NTDpp/ibH4ofRuZYUfHPHzrgABFHfb
mHfg3oD0kd1T33cFHkb7pPkSpWj4FgWwH8yY5P1qu87ouL1UX8fEFOT0b/5utzpI
WsaclV3kQX02X1waM4DMOrlRfjcJ2WhelXMQbmZhpZA4lChQm1+YwjTXxA/g/bF/
apVGavPIX9i2ZjfkfKhupKqV+91YRCY=
-----END CERTIFICATE-----
Generated at Fri Jul 17 16:02:20 2026 by rpki-client