Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/df533474-1b70-34fe-993a-3d573248861f.roa
File:                     df533474-1b70-34fe-993a-3d573248861f.roa (raw, json)
Hash identifier:          aKe843t5LAMBLNEMBN8m/ohMypswIpbVW0hk6RooswI=
Subject key identifier:   CA:09:24:29:C4:21:D3:AF:0D:46:AD:1E:C8:76:2B:AA:6A:B8:32:11
Certificate issuer:       /CN=29b74c4b-4f37-4598-ad09-a003a2e11fd3
Certificate serial:       010D0C9F4328584EF182058EFACD040080AD0880
Authority key identifier: B5:62:04:76:20:A7:DD:E4:40:F9:F6:94:90:7F:05:B4:9C:1A:EC:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/df533474-1b70-34fe-993a-3d573248861f.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     46392
IP address blocks:        216.215.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/29b74c4b-4f37-4598-ad09-a003a2e11fd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/29b74c4b-4f37-4598-ad09-a003a2e11fd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:05:8e:fa:cd:04:00:80:ad:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29b74c4b-4f37-4598-ad09-a003a2e11fd3
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=888361f9-be17-45f5-b7ef-d52266cf4d07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:03:52:51:08:7c:1e:cf:04:f0:e8:4b:fc:61:
                    4e:6f:89:1d:72:c2:20:1c:cb:f1:b7:6a:9d:0c:47:
                    e1:40:f1:d9:d1:6d:4a:8e:f2:77:b5:ff:f9:15:69:
                    24:bc:0f:5a:32:79:af:18:57:5d:56:b4:fb:42:05:
                    ab:20:f5:92:d3:4d:bf:e6:38:53:6f:c4:f0:d6:a3:
                    00:d4:59:35:82:73:8a:8c:84:b5:8e:13:b9:44:ce:
                    8d:3a:87:6e:55:de:30:3b:35:93:a9:64:6e:79:69:
                    63:a8:ed:7e:f2:34:34:8e:45:cb:bf:2b:17:d5:49:
                    cb:c4:0d:8b:0e:21:f2:58:dd:9e:24:05:33:36:dd:
                    f8:5d:52:a4:0f:02:b9:c7:19:26:73:95:3b:d9:fd:
                    ed:d8:58:f3:94:16:a9:14:1e:7f:1b:21:2d:23:54:
                    c9:8b:41:af:07:d6:a1:8b:2a:38:9f:27:87:04:c0:
                    34:15:9e:7f:18:bf:e7:fc:d9:85:90:02:94:1e:01:
                    50:a3:4b:60:72:b5:ab:50:3d:33:86:ad:ad:58:fe:
                    90:70:1d:c0:a8:cc:e6:7c:cb:b1:96:aa:ea:dd:9b:
                    bc:45:44:80:3e:e9:ef:b1:c9:76:4b:4c:c3:d6:2d:
                    d6:70:d0:8e:33:53:c4:95:87:ef:3c:80:f1:96:49:
                    18:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:09:24:29:C4:21:D3:AF:0D:46:AD:1E:C8:76:2B:AA:6A:B8:32:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/df533474-1b70-34fe-993a-3d573248861f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3/29b74c4b-4f37-4598-ad09-a003a2e11fd3.crl

            X509v3 Authority Key Identifier:
                keyid:B5:62:04:76:20:A7:DD:E4:40:F9:F6:94:90:7F:05:B4:9C:1A:EC:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/29b74c4b-4f37-4598-ad09-a003a2e11fd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.215.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:3f:3d:e0:3f:44:dd:45:fd:63:85:cc:ce:c5:63:25:d9:fb:
         22:d7:8a:e6:72:91:cd:a7:93:e5:2c:6b:05:16:59:da:b4:90:
         c8:10:95:fb:b9:d3:be:66:f2:18:53:a1:97:d4:1c:38:86:93:
         4e:b2:e6:ea:68:fa:b5:ed:0e:a0:fa:83:f0:37:b0:a9:7e:85:
         e0:5c:1e:67:10:9b:63:f7:14:f0:f6:17:c0:02:68:4b:c7:33:
         f8:4e:b9:a8:a2:d1:17:0c:61:33:82:fd:5e:30:cc:d2:5d:03:
         24:ce:c0:a9:0b:f0:8e:b8:74:e9:5a:a7:cf:e1:f5:79:ae:dc:
         1f:e0:c2:68:0d:7f:40:ba:f3:75:86:bf:11:16:76:87:76:54:
         2e:9e:75:b2:a3:39:0a:51:2a:85:d9:69:1e:ed:a2:3c:bf:01:
         9b:11:ae:aa:48:c6:26:a4:9a:2e:4f:58:79:3b:e5:12:3b:b6:
         ec:2d:37:5d:5d:e6:5d:f0:b3:eb:d8:1e:df:12:f5:f1:0e:b9:
         3e:9e:e6:c8:a3:33:53:25:c9:51:21:aa:f1:cd:87:c3:de:11:
         74:fb:ea:ce:ee:4a:23:ec:ab:28:68:f9:8e:65:05:64:5e:38:
         21:dc:7c:71:e9:10:7d:32:90:5a:c4:40:cd:98:a6:05:a8:6e:
         02:4f:fa:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xggWO+s0EAICtCIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjliNzRjNGItNGYzNy00NTk4LWFkMDktYTAwM2EyZTEx
ZmQzMB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk
ODg4MzYxZjktYmUxNy00NWY1LWI3ZWYtZDUyMjY2Y2Y0ZDA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQNSUQh8Hs8E8OhL/GFOb4kdcsIgHMvxt2qd
DEfhQPHZ0W1KjvJ3tf/5FWkkvA9aMnmvGFddVrT7QgWrIPWS002/5jhTb8Tw1qMA
1Fk1gnOKjIS1jhO5RM6NOoduVd4wOzWTqWRueWljqO1+8jQ0jkXLvysX1UnLxA2L
DiHyWN2eJAUzNt34XVKkDwK5xxkmc5U72f3t2FjzlBapFB5/GyEtI1TJi0GvB9ah
iyo4nyeHBMA0FZ5/GL/n/NmFkAKUHgFQo0tgcrWrUD0zhq2tWP6QcB3AqMzmfMux
lqrq3Zu8RUSAPunvscl2S0zD1i3WcNCOM1PElYfvPIDxlkkYVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMoJJCnEIdOvDUatHsh2K6pquDIRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOWI3
NGM0Yi00ZjM3LTQ1OTgtYWQwOS1hMDAzYTJlMTFmZDMvZGY1MzM0NzQtMWI3MC0z
NGZlLTk5M2EtM2Q1NzMyNDg4NjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjliNzRjNGItNGYzNy00NTk4LWFk
MDktYTAwM2EyZTExZmQzLzI5Yjc0YzRiLTRmMzctNDU5OC1hZDA5LWEwMDNhMmUx
MWZkMy5jcmwwHwYDVR0jBBgwFoAUtWIEdiCn3eRA+faUkH8FtJwa7IswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yOWI3NGM0Yi00ZjM3LTQ1OTgtYWQwOS1hMDAz
YTJlMTFmZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Nc9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH0/PeA/RN1F/WOFzM7FYyXZ+yLXiuZykc2nk+UsawUWWdq0kMgQlfu5
075m8hhToZfUHDiGk06y5upo+rXtDqD6g/A3sKl+heBcHmcQm2P3FPD2F8ACaEvH
M/hOuaii0RcMYTOC/V4wzNJdAyTOwKkL8I64dOlap8/h9Xmu3B/gwmgNf0C683WG
vxEWdod2VC6edbKjOQpRKoXZaR7tojy/AZsRrqpIxiakmi5PWHk75RI7tuwtN11d
5l3ws+vYHt8S9fEOuT6e5sijM1MlyVEhqvHNh8PeEXT76s7uSiPsqyho+Y5lBWRe
OCHcfHHpEH0ykFrEQM2YpgWobgJP+qo=
-----END CERTIFICATE-----
Generated at Fri Sep 18 07:44:57 2026 by rpki-client