Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/d98ff242-b4f1-3965-86dc-a85d09eab58c.roa
File:                     d98ff242-b4f1-3965-86dc-a85d09eab58c.roa (raw, json)
Hash identifier:          JKhAb7LQOnljRbLg32sWDf0RPRsG1ekFoLQIVTN/P+o=
Subject key identifier:   DD:D5:7E:09:72:E2:6F:13:D3:70:D2:3C:F7:09:4A:B6:7E:6A:01:98
Certificate issuer:       /CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd
Certificate serial:       010D0C9F4328584EA786FEA8A4A8905D2BC5E533
Authority key identifier: C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/d98ff242-b4f1-3965-86dc-a85d09eab58c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15164
IP address blocks:        192.111.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:fe:a8:a4:a8:90:5d:2b:c5:e5:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=58ac4659-fd5e-444e-bf77-dc5a0c5fa8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9f:db:2e:76:14:37:63:78:3b:4c:71:13:c5:
                    2e:3a:2a:23:10:4f:e7:13:09:d7:46:92:20:a9:68:
                    f7:68:f5:a7:8e:d7:70:98:c7:87:34:8f:a3:c5:79:
                    6f:77:9b:ef:a0:79:71:65:c0:81:47:d7:37:ed:ce:
                    d5:e6:08:aa:7c:26:50:f4:b3:2f:eb:d4:48:5a:ef:
                    2c:1d:05:ce:80:b2:40:47:4d:f3:f5:bd:6e:21:b7:
                    c4:c0:55:2b:e1:cf:bc:73:5d:16:24:33:c5:3d:5e:
                    52:4a:36:99:40:f7:a9:a5:c5:29:30:3d:4a:1c:dc:
                    f1:4a:c3:de:8f:77:c7:75:9b:ac:89:31:61:ce:62:
                    6c:7b:68:52:c5:a6:18:24:6a:21:f3:5e:09:b4:c6:
                    10:f7:e9:07:08:1b:89:77:60:59:e3:6e:79:57:b3:
                    7e:ab:f8:e6:d0:f2:75:3d:b1:c5:f5:2f:b6:cd:86:
                    78:75:3b:e5:2e:ce:35:7a:30:8a:c7:31:ca:28:31:
                    ae:53:b1:7e:24:5b:2a:18:d4:ff:1b:37:b6:5a:36:
                    0b:b3:c1:84:79:16:16:f7:6d:a0:ce:98:6f:00:d4:
                    c9:d6:f5:b5:92:4a:f7:5b:4a:3b:49:42:5a:ce:af:
                    80:ff:ee:7d:0f:50:4d:1f:e4:d2:91:bb:0e:10:25:
                    f0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D5:7E:09:72:E2:6F:13:D3:70:D2:3C:F7:09:4A:B6:7E:6A:01:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/d98ff242-b4f1-3965-86dc-a85d09eab58c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.crl

            X509v3 Authority Key Identifier:
                keyid:C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:95:68:66:9f:89:9d:81:cf:79:33:36:e0:20:11:16:c7:91:
         31:34:c7:cb:90:e1:ad:22:f9:83:2f:01:4b:48:7c:6a:b0:0a:
         27:7a:1a:d5:0a:3b:72:42:c1:f5:7a:98:1e:a8:02:f4:06:b9:
         0f:66:0f:39:60:d4:e7:9b:48:11:17:0f:cb:df:b1:32:e2:1b:
         d9:a5:4a:9b:9a:9a:58:30:f9:2c:4c:63:24:52:fd:7f:58:80:
         46:4c:a7:d3:ce:7c:3b:37:cd:eb:1c:e6:f3:15:81:20:ba:8f:
         46:3f:50:4f:85:29:df:68:07:9e:2c:bb:b1:6b:7b:d5:df:57:
         b4:21:20:41:7a:64:bc:dc:ab:5d:fc:85:de:95:f7:33:6e:cd:
         a8:95:b7:9e:b0:51:82:c0:b1:3e:5f:3c:35:f1:ec:b7:a3:aa:
         b3:eb:e4:07:02:5a:6e:cf:fb:b0:45:b1:00:5a:48:7b:c4:d7:
         ec:0e:32:e6:f9:3b:9c:aa:a9:f4:5f:84:6d:fa:b3:bb:ac:1d:
         76:00:cc:3f:2f:61:27:02:05:4a:c5:bd:bb:ac:3b:78:5f:94:
         ba:29:0f:12:15:64:fb:18:05:96:31:f2:8a:be:41:af:d4:f1:
         07:3a:87:ff:4a:f7:e1:74:d3:05:cb:6c:bb:06:61:2f:dc:73:
         c8:0b:b4:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhv6opKiQXSvF5TMwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmVlN2I2N2UtNWU0Zi00YTA1LWE1OWUtOWU4MjBjODk4
ZmNkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NThhYzQ2NTktZmQ1ZS00NDRlLWJmNzctZGM1YTBjNWZhOGM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZ/bLnYUN2N4O0xxE8UuOiojEE/nEwnXRpIg
qWj3aPWnjtdwmMeHNI+jxXlvd5vvoHlxZcCBR9c37c7V5giqfCZQ9LMv69RIWu8s
HQXOgLJAR03z9b1uIbfEwFUr4c+8c10WJDPFPV5SSjaZQPeppcUpMD1KHNzxSsPe
j3fHdZusiTFhzmJse2hSxaYYJGoh814JtMYQ9+kHCBuJd2BZ4255V7N+q/jm0PJ1
PbHF9S+2zYZ4dTvlLs41ejCKxzHKKDGuU7F+JFsqGNT/Gze2WjYLs8GEeRYW922g
zphvANTJ1vW1kkr3W0o7SUJazq+A/+59D1BNH+TSkbsOECXwTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN3Vfgly4m8T03DSPPcJSrZ+agGYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZWU3
YjY3ZS01ZTRmLTRhMDUtYTU5ZS05ZTgyMGM4OThmY2QvZDk4ZmYyNDItYjRmMS0z
OTY1LTg2ZGMtYTg1ZDA5ZWFiNThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmVlN2I2N2UtNWU0Zi00YTA1LWE1
OWUtOWU4MjBjODk4ZmNkL2ZlZTdiNjdlLTVlNGYtNGEwNS1hNTllLTllODIwYzg5
OGZjZC5jcmwwHwYDVR0jBBgwFoAUyUCeXczprJIdAfK0l1qNJ/cvAbIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mZWU3YjY3ZS01ZTRmLTRhMDUtYTU5ZS05ZTgy
MGM4OThmY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFaVaGafiZ2Bz3kzNuAgERbHkTE0x8uQ4a0i+YMvAUtIfGqwCid6GtUK
O3JCwfV6mB6oAvQGuQ9mDzlg1OebSBEXD8vfsTLiG9mlSpuamlgw+SxMYyRS/X9Y
gEZMp9POfDs3zesc5vMVgSC6j0Y/UE+FKd9oB54su7Fre9XfV7QhIEF6ZLzcq138
hd6V9zNuzaiVt56wUYLAsT5fPDXx7LejqrPr5AcCWm7P+7BFsQBaSHvE1+wOMub5
O5yqqfRfhG36s7usHXYAzD8vYScCBUrFvbusO3hflLopDxIVZPsYBZYx8oq+Qa/U
8Qc6h/9K9+F00wXLbLsGYS/cc8gLtBA=
-----END CERTIFICATE-----
Generated at Wed Jul 29 22:41:32 2026 by rpki-client