Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/013df68c-00f5-3240-bd13-f009643fe7d7.roa
File:                     013df68c-00f5-3240-bd13-f009643fe7d7.roa (raw, json)
Hash identifier:          A4YJ6h1oov/dl26ECoQyffeaMq8KNloD8xnXcqdUHCo=
Subject key identifier:   1F:79:4C:A5:E8:20:17:34:B8:6A:BF:4D:9E:DC:34:14:7B:CF:E4:EB
Certificate issuer:       /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
Certificate serial:       010D0C9F4328584EABB6E4F7FF629B280C60C000
Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/013df68c-00f5-3240-bd13-f009643fe7d7.roa
Signing time:             Thu 30 Jul 2026 13:00:12 +0000
ROA not before:           Thu 30 Jul 2026 13:00:12 +0000
ROA not after:            Wed 28 Oct 2026 13:00:12 +0000
asID:                     400556
IP address blocks:        216.109.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ab:b6:e4:f7:ff:62:9b:28:0c:60:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
        Validity
            Not Before: Jul 30 13:00:12 2026 GMT
            Not After : Oct 28 13:00:12 2026 GMT
        Subject: CN=470590ce-35fb-43e9-a5fe-d4843b990247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b9:df:4f:f8:9b:08:cc:89:18:10:eb:9d:7e:
                    19:25:e0:db:31:3a:39:2d:bd:1d:9e:02:8b:a4:1c:
                    f1:da:1a:c0:2a:26:0c:a1:38:42:aa:74:49:72:61:
                    06:c0:6d:a5:e9:eb:6a:02:81:d8:b1:0f:83:72:4a:
                    de:d0:99:ee:e7:3d:83:27:fc:9e:b8:25:92:6e:2c:
                    ac:41:44:be:37:b4:9f:56:6e:46:92:0f:2e:03:e7:
                    0e:e6:fa:25:59:83:f1:1a:9a:93:98:c1:ee:96:7f:
                    88:3e:0c:6c:53:e3:87:8e:c7:90:81:fb:5b:c4:c9:
                    44:dd:7b:24:8c:fa:6d:bd:c9:15:09:22:13:ea:8d:
                    05:5a:87:75:9b:3d:ac:96:34:b3:60:62:a7:2e:cd:
                    48:8c:59:fe:4c:9f:a4:a1:82:fa:3f:73:16:0a:2c:
                    93:c2:af:9c:c4:67:bc:de:e3:90:77:ce:3a:d5:05:
                    27:fd:00:53:e2:7d:ce:70:da:d6:75:80:2c:c0:14:
                    11:40:f8:0c:b8:01:a7:8a:fc:0e:a8:52:cb:ad:1e:
                    da:46:93:ad:28:13:19:2c:00:7b:06:dc:eb:1a:2a:
                    7b:03:5c:98:39:b1:ff:48:c8:c7:fb:e3:e1:c3:d7:
                    90:6a:4f:1a:05:2b:fe:c8:05:a5:36:54:68:b6:ce:
                    13:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:79:4C:A5:E8:20:17:34:B8:6A:BF:4D:9E:DC:34:14:7B:CF:E4:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/013df68c-00f5-3240-bd13-f009643fe7d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl

            X509v3 Authority Key Identifier:
                keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.109.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:99:c2:60:fb:18:43:ad:2a:1d:7d:8e:5c:91:4d:cf:6e:ab:
         dd:fd:32:c9:7a:8e:e5:a2:84:d2:2e:29:36:8b:d2:7c:7f:01:
         54:b6:5e:d2:05:67:82:4e:44:f7:d1:de:1f:5a:ff:31:1c:31:
         8a:75:18:33:a0:a1:2f:1e:ac:d9:9f:66:21:b7:e3:d0:90:18:
         7e:ea:64:e9:f2:29:d9:dd:86:81:09:80:26:6b:d6:fd:3c:f4:
         72:83:a0:7d:85:41:ed:5d:ff:41:76:8f:68:7d:cd:ca:5c:f8:
         07:8b:55:4b:05:f7:50:54:44:c6:be:47:d3:eb:cc:44:99:af:
         af:c1:b4:ce:cc:f2:60:96:b7:f0:42:4f:c3:6b:a5:1e:af:26:
         9b:e7:38:68:32:dd:af:13:93:76:ef:a5:7f:bd:19:d8:fe:e7:
         b2:70:4c:0a:b6:ca:ff:e6:4a:85:56:84:f9:ae:b5:b9:7b:dd:
         63:54:7e:92:9c:e2:c4:43:f7:a2:5f:ea:bf:94:43:c0:3a:e5:
         02:31:9a:3e:6b:52:b7:a7:9a:f2:52:a2:53:e4:76:5b:45:3b:
         a6:1f:8a:0c:e2:0f:38:38:b9:3c:2b:1f:7e:68:be:41:8c:b8:
         85:fc:06:4d:0c:da:40:c9:ad:a2:a7:5f:70:8f:be:e3:d7:08:
         c4:6e:36:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6rtuT3/2KbKAxgwAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjN2YyM2YtYjBhMC00ZDJjLWE4YTItMzYwNWM2ZjA4
ZTljMB4XDTI2MDczMDEzMDAxMloXDTI2MTAyODEzMDAxMlowLzEtMCsGA1UEAxMk
NDcwNTkwY2UtMzVmYi00M2U5LWE1ZmUtZDQ4NDNiOTkwMjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7nfT/ibCMyJGBDrnX4ZJeDbMTo5Lb0dngKL
pBzx2hrAKiYMoThCqnRJcmEGwG2l6etqAoHYsQ+Dckre0Jnu5z2DJ/yeuCWSbiys
QUS+N7SfVm5Gkg8uA+cO5volWYPxGpqTmMHuln+IPgxsU+OHjseQgftbxMlE3Xsk
jPptvckVCSIT6o0FWod1mz2sljSzYGKnLs1IjFn+TJ+koYL6P3MWCiyTwq+cxGe8
3uOQd8461QUn/QBT4n3OcNrWdYAswBQRQPgMuAGnivwOqFLLrR7aRpOtKBMZLAB7
BtzrGip7A1yYObH/SMjH++Phw9eQak8aBSv+yAWlNlRots4T6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB95TKXoIBc0uGq/TZ7cNBR7z+TrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3
ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1YzZmMDhlOWMvMDEzZGY2OGMtMDBmNS0z
MjQwLWJkMTMtZjAwOTY0M2ZlN2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWZjN2YyM2YtYjBhMC00ZDJjLWE4
YTItMzYwNWM2ZjA4ZTljLzFmYzdmMjNmLWIwYTAtNGQyYy1hOGEyLTM2MDVjNmYw
OGU5Yy5jcmwwHwYDVR0jBBgwFoAUGy7JMmnAka14g/B1ftT7/uA8pgwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xZmM3ZjIzZi1iMGEwLTRkMmMtYThhMi0zNjA1
YzZmMDhlOWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2G2xMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANWZwmD7GEOtKh19jlyRTc9uq939Msl6juWihNIuKTaL0nx/AVS2XtIF
Z4JORPfR3h9a/zEcMYp1GDOgoS8erNmfZiG349CQGH7qZOnyKdndhoEJgCZr1v08
9HKDoH2FQe1d/0F2j2h9zcpc+AeLVUsF91BURMa+R9PrzESZr6/BtM7M8mCWt/BC
T8NrpR6vJpvnOGgy3a8Tk3bvpX+9Gdj+57JwTAq2yv/mSoVWhPmutbl73WNUfpKc
4sRD96Jf6r+UQ8A65QIxmj5rUrenmvJSolPkdltFO6YfigziDzg4uTwrH35ovkGM
uIX8Bk0M2kDJraKnX3CPvuPXCMRuNkg=
-----END CERTIFICATE-----
Generated at Tue Aug 4 15:04:14 2026 by rpki-client