Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/cdd67ff2-97d5-3579-93be-e5765981e16f.roa
File:                     cdd67ff2-97d5-3579-93be-e5765981e16f.roa (raw, json)
Hash identifier:          nRTpORxdH/+u381D/kWNs52g2ZnGisqbaspVyxVuLik=
Subject key identifier:   2B:43:C1:A2:23:C7:D2:DD:86:74:F3:FA:E8:E0:8A:30:07:91:8B:1F
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584ECBD1C8B9E1BB4C411D6EF520
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/cdd67ff2-97d5-3579-93be-e5765981e16f.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     14555
IP address blocks:        198.23.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:c8:b9:e1:bb:4c:41:1d:6e:f5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=7ee22efc-0781-4390-b2c4-30791a83ead0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cb:a2:20:07:10:a8:43:b9:55:57:cf:17:da:
                    95:ab:e4:f5:3e:d5:10:4d:e8:21:b8:c2:78:21:ef:
                    80:bc:4d:db:4e:f7:b6:e3:53:a2:77:c1:a5:3b:cd:
                    1a:0f:e4:94:4f:61:d0:f8:0c:5f:f0:16:32:38:15:
                    a5:7b:06:9f:6a:05:37:80:b1:85:82:19:44:b5:a9:
                    38:19:43:a5:0d:18:3b:1a:01:23:5a:3a:fd:c4:5d:
                    93:26:7f:5b:b7:e8:cd:f7:45:21:c7:64:cb:ec:64:
                    ea:36:06:94:b7:3e:36:74:28:30:2a:d8:1c:a5:9e:
                    18:37:ba:43:af:da:06:23:23:62:65:72:3b:47:bc:
                    bd:b8:20:fc:e0:de:ea:7a:2e:05:b8:7b:5e:e2:71:
                    aa:76:fd:b6:08:ea:19:c1:1b:02:e6:1b:cd:75:c8:
                    ff:5e:62:14:5e:fe:40:40:2e:0b:5a:47:3e:a7:da:
                    eb:f0:63:7e:35:1a:7e:30:c3:f3:15:77:b1:26:47:
                    c9:d9:a7:3b:3a:9d:21:e6:c7:26:aa:ee:e6:24:75:
                    5e:d3:c6:e1:f1:72:bc:fa:cd:f6:21:9a:48:0a:8f:
                    29:89:40:01:2e:32:b3:73:5b:53:9e:8f:8b:ae:5e:
                    74:f9:7b:2b:e0:98:b8:e3:57:6a:9a:b8:de:78:da:
                    db:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:43:C1:A2:23:C7:D2:DD:86:74:F3:FA:E8:E0:8A:30:07:91:8B:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/cdd67ff2-97d5-3579-93be-e5765981e16f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.23.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:1a:e2:4f:0d:55:b7:7c:6f:76:91:33:e8:40:5c:c3:e4:83:
         5b:ef:22:56:f8:48:9f:41:33:94:ab:ba:49:0a:42:20:a1:62:
         b9:a6:a4:89:87:a6:6c:9f:8f:90:f8:92:7e:82:b8:fa:24:52:
         bd:3b:0b:67:f3:e7:84:41:b3:89:e3:2e:9e:91:49:42:0b:fe:
         18:68:6c:90:7c:da:0e:ca:dd:6a:65:90:bc:3b:ec:08:2e:77:
         e0:96:68:38:61:a2:ff:43:12:0f:5e:21:a2:f7:ec:0c:0a:61:
         e5:af:d5:89:bf:f9:56:ef:db:9b:a9:90:e9:42:e9:6b:60:29:
         6e:e9:cc:66:dc:7a:b6:52:d6:57:bc:34:25:c4:aa:ae:e7:71:
         d0:f8:17:c7:23:9e:23:5b:3b:b9:1c:22:39:98:39:ec:28:d8:
         4f:c0:a3:9b:4b:5e:e0:ce:fb:1a:db:80:44:42:d0:94:9c:15:
         a3:74:59:00:be:ef:6b:0e:a8:d5:b6:ad:20:b8:16:3e:6e:ed:
         e5:aa:ba:c2:37:e3:d4:a1:5e:5d:27:3b:22:c2:22:d3:a0:51:
         a4:24:ff:66:48:27:5e:6e:e5:e0:84:9f:f3:fc:7a:d3:69:f4:
         22:5b:47:a0:61:31:80:3c:08:50:fa:e0:2f:b8:3f:af:33:e0:
         91:68:42:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0ci54btMQR1u9SAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IxNDM3MTMtNzkyMy00ZTRkLTk0NzYtYjhlNWNlMWNh
OWM5MB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk
N2VlMjJlZmMtMDc4MS00MzkwLWIyYzQtMzA3OTFhODNlYWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsuiIAcQqEO5VVfPF9qVq+T1PtUQTeghuMJ4
Ie+AvE3bTve241Oid8GlO80aD+SUT2HQ+Axf8BYyOBWlewafagU3gLGFghlEtak4
GUOlDRg7GgEjWjr9xF2TJn9bt+jN90Uhx2TL7GTqNgaUtz42dCgwKtgcpZ4YN7pD
r9oGIyNiZXI7R7y9uCD84N7qei4FuHte4nGqdv22COoZwRsC5hvNdcj/XmIUXv5A
QC4LWkc+p9rr8GN+NRp+MMPzFXexJkfJ2ac7Op0h5scmqu7mJHVe08bh8XK8+s32
IZpICo8piUABLjKzc1tTno+Lrl50+Xsr4Ji441dqmrjeeNrbOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCtDwaIjx9LdhnTz+ujgijAHkYsfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0
MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1Y2UxY2E5YzkvY2RkNjdmZjItOTdkNS0z
NTc5LTkzYmUtZTU3NjU5ODFlMTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2IxNDM3MTMtNzkyMy00ZTRkLTk0
NzYtYjhlNWNlMWNhOWM5LzdiMTQzNzEzLTc5MjMtNGU0ZC05NDc2LWI4ZTVjZTFj
YTljOS5jcmwwHwYDVR0jBBgwFoAUYdUy6W27yi6kNGeQ5T4cjK+y2TAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1
Y2UxY2E5YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhc8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB8a4k8NVbd8b3aRM+hAXMPkg1vvIlb4SJ9BM5SrukkKQiChYrmmpImH
pmyfj5D4kn6CuPokUr07C2fz54RBs4njLp6RSUIL/hhobJB82g7K3WplkLw77Agu
d+CWaDhhov9DEg9eIaL37AwKYeWv1Ym/+Vbv25upkOlC6WtgKW7pzGbcerZS1le8
NCXEqq7ncdD4F8cjniNbO7kcIjmYOewo2E/Ao5tLXuDO+xrbgERC0JScFaN0WQC+
72sOqNW2rSC4Fj5u7eWqusI349ShXl0nOyLCItOgUaQk/2ZIJ15u5eCEn/P8etNp
9CJbR6BhMYA8CFD64C+4P68z4JFoQjQ=
-----END CERTIFICATE-----
Generated at Sat Sep 5 10:06:40 2026 by rpki-client