Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/0c68a07a-2977-36b0-8f06-cbee243f8cca.roa
File:                     0c68a07a-2977-36b0-8f06-cbee243f8cca.roa (raw, json)
Hash identifier:          Yt8GsvYUqeJCeRfu1JEaZM/nlCP0g4CsE755Yfex808=
Subject key identifier:   88:E0:95:CE:42:07:88:9C:66:92:9D:BF:5C:28:D7:47:C2:4C:FA:92
Certificate issuer:       /CN=4ee6a656-8b84-4850-8417-d53e22107f20
Certificate serial:       010D0C9F4328584E6CF90FEBA7D5DA03895C9980
Authority key identifier: 99:42:C4:9F:48:55:B1:8C:62:93:0C:14:E0:D9:39:D4:39:86:CC:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/0c68a07a-2977-36b0-8f06-cbee243f8cca.roa
Signing time:             Wed 08 Jul 2026 01:37:39 +0000
ROA not before:           Wed 08 Jul 2026 01:37:39 +0000
ROA not after:            Tue 06 Oct 2026 01:37:39 +0000
asID:                     24459
IP address blocks:        199.231.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/4ee6a656-8b84-4850-8417-d53e22107f20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/4ee6a656-8b84-4850-8417-d53e22107f20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:f9:0f:eb:a7:d5:da:03:89:5c:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee6a656-8b84-4850-8417-d53e22107f20
        Validity
            Not Before: Jul  8 01:37:39 2026 GMT
            Not After : Oct  6 01:37:39 2026 GMT
        Subject: CN=b4764e6f-9a2d-403d-9161-fb6232aed145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cb:b8:25:94:48:21:cf:93:54:71:5b:68:6c:
                    70:33:b8:c2:72:bb:7d:a1:3e:42:e7:84:9c:81:10:
                    ac:a7:29:21:ac:43:ff:e2:9b:01:90:16:df:0c:64:
                    45:8f:5c:1d:09:49:8d:c2:87:9d:a1:13:a6:28:69:
                    33:03:38:43:fc:68:ce:51:44:cf:39:5f:ab:63:33:
                    76:01:3b:95:b1:87:a6:72:f0:ee:94:a0:53:a5:a3:
                    97:76:36:bd:4f:36:de:5f:20:34:e6:5b:ea:18:86:
                    5f:44:7c:d1:da:61:4a:d1:41:fd:0b:26:a5:24:73:
                    f4:ff:9c:30:3b:34:ef:7a:42:2c:72:9e:3e:29:39:
                    63:3a:73:0a:47:b1:d7:a9:ae:a3:c8:38:75:49:0a:
                    76:a0:9a:d3:94:9d:ea:06:9f:11:3a:30:b7:e0:45:
                    a1:1b:cb:40:ea:f6:23:ff:7c:29:ef:18:f8:7f:fb:
                    3c:5b:9f:62:04:cd:93:37:96:f9:9b:98:9f:96:72:
                    46:3c:2e:0d:87:90:60:bc:22:3b:a5:30:fd:c1:c5:
                    b5:c7:9f:8e:88:85:c2:68:9b:18:cb:43:da:69:a5:
                    f9:3a:6d:21:af:0e:5e:b4:80:54:6d:cb:15:53:39:
                    fe:05:2b:99:be:b1:55:71:96:00:b2:36:19:bf:ad:
                    6b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E0:95:CE:42:07:88:9C:66:92:9D:BF:5C:28:D7:47:C2:4C:FA:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/0c68a07a-2977-36b0-8f06-cbee243f8cca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20/4ee6a656-8b84-4850-8417-d53e22107f20.crl

            X509v3 Authority Key Identifier:
                keyid:99:42:C4:9F:48:55:B1:8C:62:93:0C:14:E0:D9:39:D4:39:86:CC:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4ee6a656-8b84-4850-8417-d53e22107f20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.231.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:e6:52:74:4c:33:80:ec:90:73:12:d7:b0:34:9f:e1:9e:1b:
         58:b5:b8:ac:56:c6:d6:6d:14:b7:e3:cf:fc:16:3f:b4:7a:4a:
         cd:5e:6b:ea:06:87:e6:d0:37:1a:ae:84:68:57:2d:bf:28:de:
         8d:60:de:7f:1a:45:0f:9e:b5:04:c5:19:11:7d:17:24:c0:f5:
         0f:97:ad:77:90:56:2d:fb:55:4e:77:35:56:5e:52:37:d9:37:
         2a:f0:d6:21:f3:4a:05:72:69:60:2d:3e:29:6c:e1:96:57:6b:
         a4:ec:10:fd:6d:08:2e:e0:73:9d:59:5c:e1:61:5d:75:af:ed:
         7a:40:1f:b9:b8:f1:8c:25:76:15:f7:f0:bb:cc:ec:4b:85:ca:
         57:7a:23:a7:4a:f9:96:32:47:ba:be:56:e5:88:97:84:a7:f5:
         c2:6c:34:ad:b0:73:20:f6:91:7b:35:43:c0:0d:2c:e1:0e:d0:
         6b:45:84:1f:87:6b:ee:bb:06:b1:42:42:43:e1:61:ad:7e:51:
         13:5a:da:8d:b2:95:64:29:12:0a:d2:36:16:ec:7b:1e:84:f6:
         1c:af:24:b7:3e:97:a0:8d:1f:09:01:d0:52:33:41:d4:b2:4f:
         13:df:a3:58:64:5a:46:35:a1:a2:5b:05:60:9e:42:f5:5b:ea:
         0e:23:59:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5s+Q/rp9XaA4lcmYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVlNmE2NTYtOGI4NC00ODUwLTg0MTctZDUzZTIyMTA3
ZjIwMB4XDTI2MDcwODAxMzczOVoXDTI2MTAwNjAxMzczOVowLzEtMCsGA1UEAxMk
YjQ3NjRlNmYtOWEyZC00MDNkLTkxNjEtZmI2MjMyYWVkMTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisu4JZRIIc+TVHFbaGxwM7jCcrt9oT5C54Sc
gRCspykhrEP/4psBkBbfDGRFj1wdCUmNwoedoROmKGkzAzhD/GjOUUTPOV+rYzN2
ATuVsYemcvDulKBTpaOXdja9TzbeXyA05lvqGIZfRHzR2mFK0UH9CyalJHP0/5ww
OzTvekIscp4+KTljOnMKR7HXqa6jyDh1SQp2oJrTlJ3qBp8ROjC34EWhG8tA6vYj
/3wp7xj4f/s8W59iBM2TN5b5m5iflnJGPC4Nh5BgvCI7pTD9wcW1x5+OiIXCaJsY
y0PaaaX5Om0hrw5etIBUbcsVUzn+BSuZvrFVcZYAsjYZv61rlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIjglc5CB4icZpKdv1wo10fCTPqSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80ZWU2
YTY1Ni04Yjg0LTQ4NTAtODQxNy1kNTNlMjIxMDdmMjAvMGM2OGEwN2EtMjk3Ny0z
NmIwLThmMDYtY2JlZTI0M2Y4Y2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNGVlNmE2NTYtOGI4NC00ODUwLTg0
MTctZDUzZTIyMTA3ZjIwLzRlZTZhNjU2LThiODQtNDg1MC04NDE3LWQ1M2UyMjEw
N2YyMC5jcmwwHwYDVR0jBBgwFoAUmULEn0hVsYxikwwU4Nk51DmGzDYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi80ZWU2YTY1Ni04Yjg0LTQ4NTAtODQxNy1kNTNl
MjIxMDdmMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx+dMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG7mUnRMM4DskHMS17A0n+GeG1i1uKxWxtZtFLfjz/wWP7R6Ss1ea+oG
h+bQNxquhGhXLb8o3o1g3n8aRQ+etQTFGRF9FyTA9Q+XrXeQVi37VU53NVZeUjfZ
Nyrw1iHzSgVyaWAtPils4ZZXa6TsEP1tCC7gc51ZXOFhXXWv7XpAH7m48YwldhX3
8LvM7EuFyld6I6dK+ZYyR7q+VuWIl4Sn9cJsNK2wcyD2kXs1Q8ANLOEO0GtFhB+H
a+67BrFCQkPhYa1+URNa2o2ylWQpEgrSNhbsex6E9hyvJLc+l6CNHwkB0FIzQdSy
TxPfo1hkWkY1oaJbBWCeQvVb6g4jWQA=
-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:12 2026 by rpki-client