Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d0528f6f-caa1-3fc0-806a-10d3cacc965c.roa
File:                     d0528f6f-caa1-3fc0-806a-10d3cacc965c.roa (raw, json)
Hash identifier:          Wjvr7OyW+HkCz1BAl/p/KP671WXCAGOdg9vGwDU8oC0=
Subject key identifier:   82:1B:84:05:22:69:A0:4A:62:D1:BC:5D:28:66:26:7B:BE:A7:F0:B9
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584E104EE99D359C4A0B6F421500
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d0528f6f-caa1-3fc0-806a-10d3cacc965c.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     273452
IP address blocks:        200.15.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:e9:9d:35:9c:4a:0b:6f:42:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=176cb985-9c56-479f-a273-e625d01530ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9d:7f:cc:47:a4:5e:e3:4f:7b:f9:10:3e:28:
                    05:07:84:73:32:82:1a:b7:dc:eb:4b:55:01:66:0b:
                    2a:a2:bc:34:51:5f:67:96:e0:f1:2d:00:e2:7f:07:
                    00:40:a0:46:31:e5:63:80:22:d2:21:00:ef:5f:a5:
                    01:e0:d2:9e:5e:69:ec:f8:c6:4b:e9:88:2f:ab:41:
                    1d:fc:d1:8c:be:bb:cb:4c:2a:a7:e1:cf:6b:45:91:
                    c7:69:1b:29:c2:8b:02:a8:1f:41:d7:96:48:d7:4b:
                    d3:26:79:60:30:65:e6:8c:cf:9d:18:68:49:d4:bb:
                    19:ee:4a:b1:fd:c1:b9:e3:dc:1f:7c:e6:2c:64:fb:
                    99:49:1f:df:80:2a:9c:00:55:d3:07:5d:46:2e:a4:
                    92:34:8d:0d:2c:71:63:ea:54:51:8f:c2:fa:ba:9f:
                    77:a8:29:1f:68:09:ce:4b:aa:54:c1:01:2d:38:0d:
                    7a:1f:58:f6:a0:08:7f:18:42:04:3d:ea:d3:eb:d1:
                    b2:d9:9d:e9:1c:9e:dd:5f:bf:45:65:89:5d:ba:7f:
                    55:9a:e0:a9:c4:34:7f:55:f1:a1:a9:12:c8:5a:6c:
                    0c:31:3c:04:db:b0:61:a0:36:65:d6:41:6e:ef:d6:
                    2b:3c:d4:48:bc:86:8e:2e:25:14:3a:0e:ec:a5:08:
                    ff:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1B:84:05:22:69:A0:4A:62:D1:BC:5D:28:66:26:7B:BE:A7:F0:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d0528f6f-caa1-3fc0-806a-10d3cacc965c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.15.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:b1:99:33:f1:07:91:25:09:cc:dc:69:c8:e1:42:72:49:2f:
         b8:17:2a:a6:39:f8:ac:72:f5:67:52:fb:d7:e7:bb:3d:f1:3e:
         8d:31:9f:cb:f7:48:29:80:3f:70:30:a1:33:d2:70:f0:7f:16:
         e5:39:3b:14:b1:30:22:7f:50:7f:c6:06:e6:a2:2a:ff:91:2e:
         71:05:97:fc:c0:36:48:ff:61:f4:00:77:a6:80:d6:1d:09:73:
         47:8c:8f:f4:64:ad:a6:eb:49:5d:22:f0:fa:b0:b7:3d:e2:92:
         2a:ed:f3:f3:ca:8d:4f:e7:fd:a6:42:d0:20:1a:7e:75:48:bc:
         fb:33:5f:e3:c7:61:e5:f9:6e:06:ee:cf:c1:2e:de:d3:95:3a:
         75:35:a1:aa:88:59:dc:14:16:da:ed:4d:4e:b6:7d:e7:8f:7c:
         d4:15:e1:be:4b:3d:64:b9:96:ca:1c:79:75:d1:5b:3e:f2:fa:
         36:10:86:60:13:c8:89:9f:a5:a7:ae:2a:ba:81:0f:71:8c:ae:
         ac:49:bb:de:bc:0e:fa:23:7a:ac:0a:e0:41:38:ee:b3:f1:d2:
         0d:86:1e:73:8c:19:93:db:e1:09:8e:6b:3d:ce:c4:6f:31:c4:
         f5:57:6d:0f:92:7e:c2:05:8f:c3:76:b7:1b:e4:d4:9b:21:ae:
         15:b9:05:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTumdNZxKC29CFQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk
MTc2Y2I5ODUtOWM1Ni00NzlmLWEyNzMtZTYyNWQwMTUzMGZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZ1/zEekXuNPe/kQPigFB4RzMoIat9zrS1UB
Zgsqorw0UV9nluDxLQDifwcAQKBGMeVjgCLSIQDvX6UB4NKeXmns+MZL6Ygvq0Ed
/NGMvrvLTCqn4c9rRZHHaRspwosCqB9B15ZI10vTJnlgMGXmjM+dGGhJ1LsZ7kqx
/cG549wffOYsZPuZSR/fgCqcAFXTB11GLqSSNI0NLHFj6lRRj8L6up93qCkfaAnO
S6pUwQEtOA16H1j2oAh/GEIEPerT69Gy2Z3pHJ7dX79FZYldun9VmuCpxDR/VfGh
qRLIWmwMMTwE27BhoDZl1kFu79YrPNRIvIaOLiUUOg7spQj/hQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIIbhAUiaaBKYtG8XShmJnu+p/C5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZDA1MjhmNmYtY2FhMS0z
ZmMwLTgwNmEtMTBkM2NhY2M5NjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByA8MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHexmTPxB5ElCczcacjhQnJJL7gXKqY5+Kxy9WdS+9fnuz3xPo0xn8v3
SCmAP3AwoTPScPB/FuU5OxSxMCJ/UH/GBuaiKv+RLnEFl/zANkj/YfQAd6aA1h0J
c0eMj/RkrabrSV0i8Pqwtz3ikirt8/PKjU/n/aZC0CAafnVIvPszX+PHYeX5bgbu
z8Eu3tOVOnU1oaqIWdwUFtrtTU62feePfNQV4b5LPWS5lsoceXXRWz7y+jYQhmAT
yImfpaeuKrqBD3GMrqxJu968DvojeqwK4EE47rPx0g2GHnOMGZPb4QmOaz3OxG8x
xPVXbQ+SfsIFj8N2txvk1JshrhW5BXE=
-----END CERTIFICATE-----
Generated at Wed Jun 10 22:13:20 2026 by rpki-client