Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/31f47ee8-dd8f-3613-b4d0-a09df2a7cb71.roa
File:                     31f47ee8-dd8f-3613-b4d0-a09df2a7cb71.roa (raw, json)
Hash identifier:          1LL4JVCRPSK1+/s5a5L6p91Vo679WJh/cKT+2Q/j82c=
Subject key identifier:   F6:EA:12:62:B4:84:83:38:7D:FF:8A:B6:6A:87:13:AC:36:6F:F8:44
Certificate issuer:       /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
Certificate serial:       010D0C9F4328584EDC91F5136BAAC57B934A4880
Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/31f47ee8-dd8f-3613-b4d0-a09df2a7cb71.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     26658
IP address blocks:        172.87.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:f5:13:6b:aa:c5:7b:93:4a:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=292df45f-cb37-4e62-8c72-c8d725966b26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f4:cf:2a:0d:a4:e0:ef:77:9a:60:d0:39:f6:
                    a7:20:72:40:e4:4c:a4:56:9b:37:88:0e:88:e8:de:
                    73:cd:7b:ea:4f:b2:95:2d:78:65:51:73:c1:a0:43:
                    d3:13:61:43:70:b3:a7:3f:d3:ff:5c:1e:85:e9:7f:
                    d2:5c:86:17:80:0e:fa:a1:bb:d6:21:53:e7:b4:0d:
                    5c:b0:2e:f7:69:11:0b:db:f6:b2:d5:db:43:c9:9e:
                    02:04:2c:7e:31:5d:53:4b:14:74:fd:a5:a1:99:84:
                    47:f5:46:48:16:3e:ba:69:e8:ca:1a:2d:06:19:f5:
                    ac:25:18:6c:29:2e:ca:f3:a1:ca:ae:df:6d:8b:77:
                    76:3c:f0:e1:56:f8:0f:48:17:e7:81:30:4f:b7:71:
                    58:ea:4d:23:29:20:6f:f1:3a:98:3a:ec:04:ce:9b:
                    3b:54:8b:e0:f4:2c:b2:11:10:52:eb:7d:37:12:d6:
                    c6:85:04:4a:b2:7f:f5:57:d0:94:e5:71:31:01:b3:
                    13:c2:ee:51:65:20:e1:5d:e5:f5:ba:41:33:67:c9:
                    2c:0c:4a:01:6e:eb:f1:ef:5b:e3:ea:c4:44:ff:46:
                    6c:97:dc:d7:8e:b6:5d:18:c5:fa:c9:f9:92:d6:a0:
                    31:66:c4:88:57:d7:b4:0b:b3:ec:9f:3c:63:c4:69:
                    a7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:EA:12:62:B4:84:83:38:7D:FF:8A:B6:6A:87:13:AC:36:6F:F8:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/31f47ee8-dd8f-3613-b4d0-a09df2a7cb71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl

            X509v3 Authority Key Identifier:
                keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.87.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:38:65:b3:bd:da:a2:1e:cf:84:1e:92:61:f1:98:c6:17:1c:
         43:ff:a7:50:d4:a7:8d:eb:0e:b4:23:ce:0f:b6:58:1e:9a:d0:
         ad:ac:e6:5c:b7:bf:8e:80:67:1f:04:5b:8d:ab:a4:ce:90:ae:
         8a:71:33:a8:16:99:f0:ba:ad:ef:d7:59:15:14:7b:44:86:82:
         08:7a:e6:82:6c:d5:b2:b9:5f:5a:6e:19:cf:45:31:59:2b:4b:
         d5:08:89:d3:4d:c7:02:3c:87:1b:f5:cf:ff:5d:25:a3:81:96:
         8b:c6:8b:01:07:9f:dd:3a:fb:d3:d4:50:64:64:fd:d4:7a:ae:
         ea:ea:08:fd:f0:c1:aa:01:f8:f0:a6:55:ef:fe:e0:b3:a3:93:
         30:c3:39:71:8d:24:48:97:ae:8c:5c:dd:5d:aa:9e:2f:5c:93:
         d9:1d:c9:c9:8e:3b:d0:a5:1b:2b:d7:d5:aa:25:88:c9:e6:a1:
         02:51:f5:fc:46:5f:d1:12:40:08:f0:68:e1:3c:68:b1:ca:ba:
         0f:56:d7:e5:67:05:14:4d:03:6b:03:6d:bb:ae:3c:c9:0f:32:
         95:5b:49:09:d5:5b:f8:80:18:e0:2a:d9:e0:d9:72:03:5f:96:
         05:a5:ef:f9:7d:c2:ed:58:de:5f:0d:95:63:9e:17:6b:cc:3f:
         04:5f:7e:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckfUTa6rFe5NKSIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDUzOWIzZGEtMWY0Yi00NzY3LWFjZjYtZDRkNzE0NjY0
YTZkMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
MjkyZGY0NWYtY2IzNy00ZTYyLThjNzItYzhkNzI1OTY2YjI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PTPKg2k4O93mmDQOfanIHJA5EykVps3iA6I
6N5zzXvqT7KVLXhlUXPBoEPTE2FDcLOnP9P/XB6F6X/SXIYXgA76obvWIVPntA1c
sC73aREL2/ay1dtDyZ4CBCx+MV1TSxR0/aWhmYRH9UZIFj66aejKGi0GGfWsJRhs
KS7K86HKrt9ti3d2PPDhVvgPSBfngTBPt3FY6k0jKSBv8TqYOuwEzps7VIvg9Cyy
ERBS6303EtbGhQRKsn/1V9CU5XExAbMTwu5RZSDhXeX1ukEzZ8ksDEoBbuvx71vj
6sRE/0Zsl9zXjrZdGMX6yfmS1qAxZsSIV9e0C7PsnzxjxGmnUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPbqEmK0hIM4ff+KtmqHE6w2b/hEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5
YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3MTQ2NjRhNmQvMzFmNDdlZTgtZGQ4Zi0z
NjEzLWI0ZDAtYTA5ZGYyYTdjYjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDUzOWIzZGEtMWY0Yi00NzY3LWFj
ZjYtZDRkNzE0NjY0YTZkLzQ1MzliM2RhLTFmNGItNDc2Ny1hY2Y2LWQ0ZDcxNDY2
NGE2ZC5jcmwwHwYDVR0jBBgwFoAUEWnSZ4Q9hZGCSKGcf8H3W8AjBLgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS80NTM5YjNkYS0xZjRiLTQ3NjctYWNmNi1kNGQ3
MTQ2NjRhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrFfIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACA4ZbO92qIez4QekmHxmMYXHEP/p1DUp43rDrQjzg+2WB6a0K2s5ly3
v46AZx8EW42rpM6QropxM6gWmfC6re/XWRUUe0SGggh65oJs1bK5X1puGc9FMVkr
S9UIidNNxwI8hxv1z/9dJaOBlovGiwEHn906+9PUUGRk/dR6rurqCP3wwaoB+PCm
Ve/+4LOjkzDDOXGNJEiXroxc3V2qni9ck9kdycmOO9ClGyvX1aoliMnmoQJR9fxG
X9ESQAjwaOE8aLHKug9W1+VnBRRNA2sDbbuuPMkPMpVbSQnVW/iAGOAq2eDZcgNf
lgWl7/l9wu1Y3l8NlWOeF2vMPwRffi8=
-----END CERTIFICATE-----
Generated at Wed Aug 19 15:16:04 2026 by rpki-client