Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bdd570f9-f8f6-3a64-a971-860dedaf000e.roa
File:                     bdd570f9-f8f6-3a64-a971-860dedaf000e.roa (raw, json)
Hash identifier:          0Vcggbq07NTuBcSXf4hySHJV4grY0gtj0hJeyZr1e3s=
Subject key identifier:   03:88:B4:AA:21:E4:6A:E8:EF:48:F7:B7:41:27:DC:B3:03:B9:CD:0D
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584E5AB2C2A3EF3249A21B617880
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bdd570f9-f8f6-3a64-a971-860dedaf000e.roa
Signing time:             Wed 01 Jul 2026 12:31:27 +0000
ROA not before:           Wed 01 Jul 2026 12:31:27 +0000
ROA not after:            Tue 29 Sep 2026 12:31:27 +0000
asID:                     25645
IP address blocks:        209.42.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:b2:c2:a3:ef:32:49:a2:1b:61:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Jul  1 12:31:27 2026 GMT
            Not After : Sep 29 12:31:27 2026 GMT
        Subject: CN=065e32b1-210c-48f3-aec6-c2ade6076218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:38:43:87:a5:60:b1:15:87:54:9d:7a:c8:c6:
                    be:18:44:c4:a7:0c:49:22:52:1a:8c:12:9b:fb:01:
                    14:c5:5b:de:fe:3e:39:e2:f4:8b:61:84:3b:98:c6:
                    9c:e1:7f:a1:b3:d3:95:f2:6d:e8:8d:9a:a5:4b:2b:
                    08:94:b1:17:63:67:6f:cb:87:68:e5:80:4e:e0:cf:
                    ad:65:f2:24:65:f6:41:7b:35:6e:d8:69:11:69:c4:
                    d9:b8:c9:55:43:65:2c:16:46:e2:53:9d:bc:b7:09:
                    64:64:4b:1d:cb:c9:80:d4:15:90:e2:8b:ce:35:70:
                    ce:4b:3f:04:7c:a6:f4:c7:32:32:ac:74:7b:b2:13:
                    95:89:2b:91:af:62:c0:e6:50:41:5e:46:b7:3e:74:
                    f3:86:68:6a:d2:48:f6:7f:cf:58:a4:1d:88:6b:5a:
                    6e:4a:25:46:a4:25:5f:77:bc:60:91:0a:03:60:80:
                    a9:ce:db:17:65:4f:45:93:63:6d:71:f0:07:60:70:
                    35:4a:4e:e9:24:82:ea:db:68:6e:12:51:71:8b:2f:
                    c2:99:6b:a9:cf:60:1e:2d:b6:23:d0:fd:e3:c4:ff:
                    ea:aa:7b:e3:ab:e9:98:fe:aa:81:cc:2f:a1:34:d4:
                    1e:3a:ee:25:7e:99:f0:e6:f0:22:fa:fb:bd:71:94:
                    06:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:88:B4:AA:21:E4:6A:E8:EF:48:F7:B7:41:27:DC:B3:03:B9:CD:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/bdd570f9-f8f6-3a64-a971-860dedaf000e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.42.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:f1:b0:22:61:ec:af:db:9e:18:4b:ad:52:a9:40:01:1d:8f:
         b5:95:df:87:36:db:72:94:92:71:2e:0a:a5:e2:76:c2:c1:59:
         ed:b0:e4:b5:90:01:52:e5:cf:f5:c1:34:2b:2e:25:d4:5f:1d:
         3b:d3:2c:23:c3:f5:4f:77:d0:48:03:62:39:da:e1:9b:9b:58:
         66:81:6c:fd:cf:8b:ea:c1:a7:49:1d:26:01:55:c1:2f:74:10:
         8c:b7:6e:e5:98:67:e1:25:d7:7f:ee:07:bf:ad:fe:f0:72:2c:
         6d:d3:2e:a6:31:18:5b:62:5c:96:02:09:a4:e0:87:d4:05:cc:
         0a:9f:f1:a1:1b:3e:d3:7f:90:98:c8:8f:ad:69:bd:f9:8f:bc:
         44:a4:77:f9:cd:64:b9:f6:7b:2e:1f:72:13:83:7a:29:8e:6a:
         e0:e1:ee:24:1b:b7:23:f5:98:6f:ed:2a:c6:d9:d0:69:a2:f2:
         88:5c:7a:c6:a9:99:c5:b0:f9:a4:69:66:ff:52:bc:49:45:12:
         55:bf:fc:11:47:43:a0:d3:04:e7:10:5a:16:5b:d5:13:71:03:
         75:45:da:29:8f:b6:11:41:a7:a9:4a:5d:6b:eb:03:78:e9:8a:
         e6:3a:99:b9:cb:a5:d9:f4:73:93:19:36:37:c6:d6:9a:f2:78:
         26:c2:69:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5assKj7zJJohtheIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4
MzcwMB4XDTI2MDcwMTEyMzEyN1oXDTI2MDkyOTEyMzEyN1owLzEtMCsGA1UEAxMk
MDY1ZTMyYjEtMjEwYy00OGYzLWFlYzYtYzJhZGU2MDc2MjE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjhDh6VgsRWHVJ16yMa+GETEpwxJIlIajBKb
+wEUxVve/j454vSLYYQ7mMac4X+hs9OV8m3ojZqlSysIlLEXY2dvy4do5YBO4M+t
ZfIkZfZBezVu2GkRacTZuMlVQ2UsFkbiU528twlkZEsdy8mA1BWQ4ovONXDOSz8E
fKb0xzIyrHR7shOViSuRr2LA5lBBXka3PnTzhmhq0kj2f89YpB2Ia1puSiVGpCVf
d7xgkQoDYICpztsXZU9Fk2NtcfAHYHA1Sk7pJILq22huElFxiy/CmWupz2AeLbYj
0P3jxP/qqnvjq+mY/qqBzC+hNNQeOu4lfpnw5vAi+vu9cZQGqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAOItKoh5Gro70j3t0En3LMDuc0NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj
NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvYmRkNTcwZjktZjhmNi0z
YTY0LWE5NzEtODYwZGVkYWYwMDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm
MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2
ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx
YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SqzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGnxsCJh7K/bnhhLrVKpQAEdj7WV34c223KUknEuCqXidsLBWe2w5LWQ
AVLlz/XBNCsuJdRfHTvTLCPD9U930EgDYjna4ZubWGaBbP3Pi+rBp0kdJgFVwS90
EIy3buWYZ+El13/uB7+t/vByLG3TLqYxGFtiXJYCCaTgh9QFzAqf8aEbPtN/kJjI
j61pvfmPvESkd/nNZLn2ey4fchODeimOauDh7iQbtyP1mG/tKsbZ0Gmi8ohcesap
mcWw+aRpZv9SvElFElW//BFHQ6DTBOcQWhZb1RNxA3VF2imPthFBp6lKXWvrA3jp
iuY6mbnLpdn0c5MZNjfG1pryeCbCacA=
-----END CERTIFICATE-----
Generated at Thu Jul 16 05:20:24 2026 by rpki-client