Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/25a9da26-b2ba-3291-a8a9-abcd3abfd2ad.roa
File:                     25a9da26-b2ba-3291-a8a9-abcd3abfd2ad.roa (raw, json)
Hash identifier:          DAoIEMo+SeY3osxVLHp6Oe+YOAjl9Xx2t4a7vCplfA0=
Subject key identifier:   4C:FA:0E:FF:F8:03:1D:B3:EB:9D:7C:26:76:61:8B:B5:98:86:AB:81
Certificate issuer:       /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Certificate serial:       010D0C9F4328584DD30FAFC00E6E605129C87E40
Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/25a9da26-b2ba-3291-a8a9-abcd3abfd2ad.roa
Signing time:             Wed 13 May 2026 22:28:45 +0000
ROA not before:           Wed 13 May 2026 22:28:45 +0000
ROA not after:            Tue 11 Aug 2026 22:28:45 +0000
asID:                     125
IP address blocks:        199.62.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:0f:af:c0:0e:6e:60:51:29:c8:7e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
        Validity
            Not Before: May 13 22:28:45 2026 GMT
            Not After : Aug 11 22:28:45 2026 GMT
        Subject: CN=d8b07398-2d75-4ed3-9b96-8ede05f74dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3d:65:dc:74:31:f1:e7:e3:61:85:11:54:95:
                    ba:c2:05:79:e3:e5:c1:fd:00:aa:96:c1:2d:47:63:
                    a6:69:3d:5e:5e:f0:77:6d:c9:9f:e0:dc:9a:66:d3:
                    7d:02:9c:68:cd:84:28:71:3b:c5:b6:97:d8:88:fb:
                    17:38:b7:ac:a8:f0:46:2c:65:36:25:3b:55:1a:fa:
                    46:49:d3:fd:0a:a4:31:bf:99:d0:f5:92:6a:e2:63:
                    f7:2c:aa:a3:e4:27:f2:52:7e:48:60:40:ae:3d:d2:
                    da:c4:1a:73:ad:4a:ec:2a:f2:94:38:c1:97:47:4d:
                    7d:95:c2:ca:8a:4d:de:b0:c0:d9:a2:14:3c:b7:e0:
                    a6:6b:b2:25:23:c0:80:09:40:73:4c:20:bb:d9:1d:
                    e5:89:ee:f4:67:00:11:a2:46:3d:cc:df:f2:b1:af:
                    35:8b:10:e5:06:30:10:24:6b:06:48:cf:53:67:1b:
                    9a:1c:7b:8f:18:fd:2b:0c:0c:91:a7:9b:b2:e5:31:
                    0b:f5:ba:6c:1a:4b:ab:78:2d:7d:93:32:76:4a:55:
                    c3:11:1c:20:97:a3:20:bf:65:72:71:7f:7f:ce:09:
                    45:d8:77:2f:62:db:b0:17:64:93:70:61:7d:d0:62:
                    cc:fa:62:cc:bc:53:b2:c8:68:b7:d8:4d:99:21:ed:
                    ab:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:FA:0E:FF:F8:03:1D:B3:EB:9D:7C:26:76:61:8B:B5:98:86:AB:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/25a9da26-b2ba-3291-a8a9-abcd3abfd2ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl

            X509v3 Authority Key Identifier:
                keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.62.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:c1:70:52:a8:3b:09:3e:3a:90:a3:bc:90:4d:8c:a9:d1:86:
         90:02:ca:58:0d:54:88:96:11:82:ff:c1:86:ad:de:d6:a5:a1:
         d0:6c:34:53:16:b2:ec:42:94:52:67:9b:84:1a:3f:4b:80:ce:
         6c:59:8d:7f:e5:ce:d8:b6:68:8a:2b:41:26:da:e5:5c:0a:2c:
         48:83:cd:38:f8:80:3c:f4:e8:8b:d7:86:1d:55:36:e8:98:e9:
         bb:59:e9:8a:17:6d:83:4f:f3:95:d8:d2:6d:d7:9a:f6:88:18:
         44:49:8d:0e:16:81:b1:e7:2e:f0:21:a0:54:0d:8b:bb:b8:bb:
         f4:78:9e:f7:7a:d9:e3:9e:a0:b3:27:f4:8e:52:07:30:cf:f7:
         3e:87:4e:3d:a6:2c:1d:e1:c6:2e:3a:c0:a4:5c:aa:dd:fe:90:
         75:4d:33:c1:ef:9a:93:05:2a:3b:6d:6b:7d:12:55:aa:40:22:
         83:a3:3d:16:98:ff:67:79:21:4f:3d:37:cd:32:03:81:db:fc:
         32:cd:dd:c0:9b:73:31:5f:44:c4:e1:be:70:d4:cd:7a:10:10:
         23:dc:07:2a:14:52:cc:2a:a5:19:84:93:b8:3e:cb:20:cf:75:
         72:7c:85:62:5c:fb:1a:d0:7a:0d:e3:7a:5b:b8:15:6c:1c:0a:
         03:6b:03:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3TD6/ADm5gUSnIfkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh
YjVjMB4XDTI2MDUxMzIyMjg0NVoXDTI2MDgxMTIyMjg0NVowLzEtMCsGA1UEAxMk
ZDhiMDczOTgtMmQ3NS00ZWQzLTliOTYtOGVkZTA1Zjc0ZGZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT1l3HQx8efjYYURVJW6wgV54+XB/QCqlsEt
R2OmaT1eXvB3bcmf4NyaZtN9ApxozYQocTvFtpfYiPsXOLesqPBGLGU2JTtVGvpG
SdP9CqQxv5nQ9ZJq4mP3LKqj5CfyUn5IYECuPdLaxBpzrUrsKvKUOMGXR019lcLK
ik3esMDZohQ8t+Cma7IlI8CACUBzTCC72R3lie70ZwARokY9zN/ysa81ixDlBjAQ
JGsGSM9TZxuaHHuPGP0rDAyRp5uy5TEL9bpsGkureC19kzJ2SlXDERwgl6Mgv2Vy
cX9/zglF2HcvYtuwF2STcGF90GLM+mLMvFOyyGi32E2ZIe2rQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEz6Dv/4Ax2z6518JnZhi7WYhquBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx
MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvMjVhOWRhMjYtYjJiYS0z
MjkxLWE4YTktYWJjZDNhYmZkMmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj
ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy
YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw
YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxz6NMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEnBcFKoOwk+OpCjvJBNjKnRhpACylgNVIiWEYL/wYat3talodBsNFMW
suxClFJnm4QaP0uAzmxZjX/lzti2aIorQSba5VwKLEiDzTj4gDz06IvXhh1VNuiY
6btZ6YoXbYNP85XY0m3XmvaIGERJjQ4WgbHnLvAhoFQNi7u4u/R4nvd62eOeoLMn
9I5SBzDP9z6HTj2mLB3hxi46wKRcqt3+kHVNM8HvmpMFKjtta30SVapAIoOjPRaY
/2d5IU89N80yA4Hb/DLN3cCbczFfRMThvnDUzXoQECPcByoUUswqpRmEk7g+yyDP
dXJ8hWJc+xrQeg3jelu4FWwcCgNrA8E=
-----END CERTIFICATE-----
Generated at Thu May 14 09:52:46 2026 by rpki-client