Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0fe82fc7-2614-4323-834d-49d5cfc7fe59/96ca6b8c-236c-3dd3-a8bb-caff2e6ace44.roa
File:                     96ca6b8c-236c-3dd3-a8bb-caff2e6ace44.roa (raw, json)
Hash identifier:          UXnFc2/XBQnOSxY8WTzlSeQqtbVCor2Rg+WWovcDupI=
Subject key identifier:   40:38:28:9A:24:92:A6:F1:8D:41:1E:4C:47:53:1B:DE:60:0C:51:A7
Certificate issuer:       /CN=0fe82fc7-2614-4323-834d-49d5cfc7fe59
Certificate serial:       010D0C9F4328584ED5FCB6D4AB09875FC25C82C0
Authority key identifier: F5:AF:D9:7F:44:87:5F:A6:9E:80:CA:D3:34:43:B1:D2:0F:4D:13:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0fe82fc7-2614-4323-834d-49d5cfc7fe59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0fe82fc7-2614-4323-834d-49d5cfc7fe59/96ca6b8c-236c-3dd3-a8bb-caff2e6ace44.roa
Signing time:             Fri 14 Aug 2026 16:24:53 +0000
ROA not before:           Fri 14 Aug 2026 16:24:53 +0000
ROA not after:            Thu 12 Nov 2026 17:24:53 +0000
asID:                     27631
IP address blocks:        199.59.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0fe82fc7-2614-4323-834d-49d5cfc7fe59/0fe82fc7-2614-4323-834d-49d5cfc7fe59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0fe82fc7-2614-4323-834d-49d5cfc7fe59/0fe82fc7-2614-4323-834d-49d5cfc7fe59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0fe82fc7-2614-4323-834d-49d5cfc7fe59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d5:fc:b6:d4:ab:09:87:5f:c2:5c:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fe82fc7-2614-4323-834d-49d5cfc7fe59
        Validity
            Not Before: Aug 14 16:24:53 2026 GMT
            Not After : Nov 12 17:24:53 2026 GMT
        Subject: CN=f0460fd9-172d-40bb-959e-519c9c0836de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d7:6b:6c:22:a9:16:b4:84:82:26:9c:2e:39:
                    de:49:a3:7d:44:6f:64:4e:a5:64:0d:af:71:c0:a5:
                    84:3e:95:8c:8a:aa:7e:56:3e:ba:28:47:dd:78:2f:
                    e8:39:20:11:71:e5:f9:4a:f7:19:dc:07:13:5f:ee:
                    6c:5a:f1:d7:f9:37:6a:04:5b:78:84:51:e3:0e:b4:
                    3d:1e:82:2c:36:ac:71:93:0f:ca:fe:fa:ba:0f:c0:
                    68:18:b6:53:0b:d1:48:b0:ac:15:61:04:b6:a2:70:
                    d9:47:95:8e:25:a4:a7:48:2a:2b:ee:f6:f8:b0:e0:
                    b9:6e:09:84:16:a9:fd:0d:0f:cd:44:3f:e6:82:7a:
                    1e:a8:de:e8:6b:b4:aa:c6:5c:56:16:c5:fe:1c:b0:
                    9f:08:4c:76:ea:65:61:32:23:76:ae:80:44:11:f1:
                    e9:57:a0:f1:5d:c0:86:96:02:20:c6:cb:c6:6b:b0:
                    ea:cc:dd:e2:10:24:78:b9:96:22:3c:d2:08:21:58:
                    68:c8:97:38:0a:ab:ab:5e:e0:05:8a:a7:83:06:22:
                    3d:fb:a2:7f:1e:93:f5:ec:00:57:23:1a:72:14:0f:
                    a5:8a:c4:51:7d:90:95:44:11:75:0c:94:54:5d:54:
                    68:f7:30:f0:06:b0:4d:d3:3f:55:ef:dc:3b:8f:ba:
                    5b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:38:28:9A:24:92:A6:F1:8D:41:1E:4C:47:53:1B:DE:60:0C:51:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0fe82fc7-2614-4323-834d-49d5cfc7fe59/96ca6b8c-236c-3dd3-a8bb-caff2e6ace44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0fe82fc7-2614-4323-834d-49d5cfc7fe59/0fe82fc7-2614-4323-834d-49d5cfc7fe59.crl

            X509v3 Authority Key Identifier:
                keyid:F5:AF:D9:7F:44:87:5F:A6:9E:80:CA:D3:34:43:B1:D2:0F:4D:13:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0fe82fc7-2614-4323-834d-49d5cfc7fe59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.59.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:a4:5e:67:70:ed:f2:4e:63:85:0a:a4:70:2d:d1:86:ee:9d:
         53:b9:1e:ff:91:7f:fe:dd:96:c4:93:b5:b6:99:9c:b5:7e:5d:
         e0:2d:aa:d2:38:9f:07:f2:c2:0d:fe:93:c0:1e:30:b3:13:52:
         f4:c5:bf:67:56:97:03:71:76:73:1c:ec:d5:42:12:88:82:5a:
         52:5a:60:cd:22:ab:0a:fe:00:bc:92:7e:5c:ec:8f:10:c4:35:
         4c:b2:f1:2d:08:02:5b:3e:70:cc:de:05:2e:e6:7e:09:82:aa:
         e2:7b:a5:b5:e4:e0:8c:22:01:05:1e:62:5c:ff:fc:04:43:1e:
         fb:9a:ae:10:bb:f4:40:42:96:55:1a:1f:44:50:c3:73:28:a3:
         57:5c:cb:72:03:cb:3f:a5:2b:c0:0d:23:73:12:c4:88:0c:07:
         39:8a:cb:22:01:e8:4d:36:c2:96:9f:55:66:a3:c4:b2:76:bf:
         16:91:44:44:14:da:38:0a:c1:a4:59:f8:d0:9e:6e:85:8f:54:
         d0:80:35:98:64:e3:1c:17:de:fa:61:a5:04:ce:6a:e7:72:e5:
         af:4c:46:00:81:32:f1:0f:7b:0c:c4:fb:b4:bd:61:8f:b2:d1:
         97:37:97:5e:5e:99:fe:c4:db:4f:db:fb:1e:fd:0a:57:15:31:
         f7:17:7c:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7V/LbUqwmHX8JcgsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGZlODJmYzctMjYxNC00MzIzLTgzNGQtNDlkNWNmYzdm
ZTU5MB4XDTI2MDgxNDE2MjQ1M1oXDTI2MTExMjE3MjQ1M1owLzEtMCsGA1UEAxMk
ZjA0NjBmZDktMTcyZC00MGJiLTk1OWUtNTE5YzljMDgzNmRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhddrbCKpFrSEgiacLjneSaN9RG9kTqVkDa9x
wKWEPpWMiqp+Vj66KEfdeC/oOSARceX5SvcZ3AcTX+5sWvHX+TdqBFt4hFHjDrQ9
HoIsNqxxkw/K/vq6D8BoGLZTC9FIsKwVYQS2onDZR5WOJaSnSCor7vb4sOC5bgmE
Fqn9DQ/NRD/mgnoeqN7oa7SqxlxWFsX+HLCfCEx26mVhMiN2roBEEfHpV6DxXcCG
lgIgxsvGa7DqzN3iECR4uZYiPNIIIVhoyJc4CqurXuAFiqeDBiI9+6J/HpP17ABX
IxpyFA+lisRRfZCVRBF1DJRUXVRo9zDwBrBN0z9V79w7j7pbdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEA4KJokkqbxjUEeTEdTG95gDFGnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8wZmU4
MmZjNy0yNjE0LTQzMjMtODM0ZC00OWQ1Y2ZjN2ZlNTkvOTZjYTZiOGMtMjM2Yy0z
ZGQzLWE4YmItY2FmZjJlNmFjZTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvMGZlODJmYzctMjYxNC00MzIzLTgz
NGQtNDlkNWNmYzdmZTU5LzBmZTgyZmM3LTI2MTQtNDMyMy04MzRkLTQ5ZDVjZmM3
ZmU1OS5jcmwwHwYDVR0jBBgwFoAU9a/Zf0SHX6aegMrTNEOx0g9NEw4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi8wZmU4MmZjNy0yNjE0LTQzMjMtODM0ZC00OWQ1
Y2ZjN2ZlNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxztKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEakXmdw7fJOY4UKpHAt0YbunVO5Hv+Rf/7dlsSTtbaZnLV+XeAtqtI4
nwfywg3+k8AeMLMTUvTFv2dWlwNxdnMc7NVCEoiCWlJaYM0iqwr+ALySflzsjxDE
NUyy8S0IAls+cMzeBS7mfgmCquJ7pbXk4IwiAQUeYlz//ARDHvuarhC79EBCllUa
H0RQw3Moo1dcy3IDyz+lK8ANI3MSxIgMBzmKyyIB6E02wpafVWajxLJ2vxaRREQU
2jgKwaRZ+NCeboWPVNCANZhk4xwX3vphpQTOaudy5a9MRgCBMvEPewzE+7S9YY+y
0Zc3l15emf7E20/b+x79ClcVMfcXfOI=
-----END CERTIFICATE-----
Generated at Wed Aug 26 13:53:03 2026 by rpki-client