Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/a6046402-6cd1-38ca-8857-62866dfdfdc3.roa
File:                     a6046402-6cd1-38ca-8857-62866dfdfdc3.roa (raw, json)
Hash identifier:          PBFSpeZsSSadV4/Sm+pCE1JNsJMSTY9QAef9xOV6cNc=
Subject key identifier:   B4:25:23:35:47:5F:36:C5:2D:52:62:BB:39:5E:DF:46:97:C4:BC:CD
Certificate issuer:       /CN=dafe2535-2dc5-4d47-b03e-d44eea26032f
Certificate serial:       010D0C9F4328584E4AEF49E5F5BFCB9FB3B487C0
Authority key identifier: 37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/a6046402-6cd1-38ca-8857-62866dfdfdc3.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     3257
IP address blocks:        63.246.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:49:e5:f5:bf:cb:9f:b3:b4:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dafe2535-2dc5-4d47-b03e-d44eea26032f
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=d40c869f-6131-4035-be50-ed74189ed905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:94:8a:d3:1f:b8:61:80:13:0f:a5:60:b6:26:
                    0b:89:fd:29:a3:7b:9c:87:3b:e0:cc:6a:48:ce:81:
                    02:85:2f:02:1e:b0:54:95:3a:a5:a9:5b:f0:97:78:
                    e8:6f:4b:70:01:3f:11:a8:7d:57:0d:6a:25:2d:fa:
                    dc:a5:5e:9c:83:3a:f6:88:be:5a:6a:ad:7f:e3:79:
                    40:9c:fa:7d:58:7f:60:fd:92:9b:db:fb:29:94:7c:
                    b2:6a:cb:a8:b7:d0:47:ba:b7:b8:cb:11:48:aa:ea:
                    0a:96:a1:df:4a:7a:62:36:a7:f9:6a:84:b1:db:86:
                    6f:14:f1:90:f4:d1:f0:d7:aa:65:bc:cb:39:33:53:
                    9b:f3:28:4a:78:2a:ae:c0:3a:f0:28:1c:b2:65:be:
                    4e:3e:4a:b3:54:a0:33:e2:21:dd:03:5d:d4:1c:35:
                    20:6d:d9:a5:b8:3c:70:43:fe:bb:c3:77:0b:9a:53:
                    e8:63:0f:22:8e:5d:9e:a8:71:80:48:c6:73:f3:34:
                    66:cc:d1:7d:99:a0:db:87:93:da:78:62:8b:03:49:
                    06:83:b8:da:31:65:67:68:77:5c:33:91:f3:39:b2:
                    34:c6:20:c8:47:b0:45:2f:6f:33:e5:b7:d9:69:df:
                    d6:14:6f:cc:14:b4:3a:71:17:2b:ea:68:22:29:2c:
                    1e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:25:23:35:47:5F:36:C5:2D:52:62:BB:39:5E:DF:46:97:C4:BC:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/a6046402-6cd1-38ca-8857-62866dfdfdc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl

            X509v3 Authority Key Identifier:
                keyid:37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:5d:d6:62:af:e4:38:08:a0:27:04:c3:1b:f8:9c:ca:49:c5:
         7a:03:43:a2:ff:a1:01:26:95:2c:31:4e:5b:e3:70:29:f1:5f:
         71:a9:92:d6:02:40:41:14:70:3d:9b:dd:15:75:71:a5:f6:57:
         6f:4c:4d:be:ed:be:3d:16:5b:e8:16:21:53:4c:26:e4:75:5f:
         97:86:8f:f1:a4:81:bf:50:1c:ec:9d:02:8b:a4:de:4c:b1:69:
         52:8e:2e:77:05:4f:6d:d6:ec:5d:12:55:ae:44:fd:50:6c:17:
         c5:6a:14:c1:5b:84:3e:2a:3d:15:b3:8b:98:d3:b8:f6:67:bd:
         c2:61:16:13:05:5e:00:58:6a:b8:e4:5a:fb:61:ee:5f:46:f9:
         93:d6:aa:67:2f:7e:db:fc:d3:64:3e:30:09:ab:cd:c2:22:ce:
         f7:6c:0f:69:bb:14:79:8e:20:32:46:1a:da:9d:80:1c:53:ff:
         ef:0e:41:4e:0f:16:49:e8:de:92:89:5c:bb:b9:cb:51:e8:d7:
         60:85:17:05:29:38:eb:38:f4:a5:ea:99:f6:10:f5:d2:27:e8:
         ec:c0:08:b2:ad:5c:44:3d:38:1f:21:7c:49:10:67:d4:de:7f:
         6f:08:5b:e9:48:86:4f:33:ca:1d:3c:16:31:f5:d9:38:bc:71:
         6e:4d:1a:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K70nl9b/Ln7O0h8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGFmZTI1MzUtMmRjNS00ZDQ3LWIwM2UtZDQ0ZWVhMjYw
MzJmMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk
ZDQwYzg2OWYtNjEzMS00MDM1LWJlNTAtZWQ3NDE4OWVkOTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZSK0x+4YYATD6VgtiYLif0po3uchzvgzGpI
zoEChS8CHrBUlTqlqVvwl3job0twAT8RqH1XDWolLfrcpV6cgzr2iL5aaq1/43lA
nPp9WH9g/ZKb2/splHyyasuot9BHure4yxFIquoKlqHfSnpiNqf5aoSx24ZvFPGQ
9NHw16plvMs5M1Ob8yhKeCquwDrwKByyZb5OPkqzVKAz4iHdA13UHDUgbdmluDxw
Q/67w3cLmlPoYw8ijl2eqHGASMZz8zRmzNF9maDbh5PaeGKLA0kGg7jaMWVnaHdc
M5HzObI0xiDIR7BFL28z5bfZad/WFG/MFLQ6cRcr6mgiKSwerQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLQlIzVHXzbFLVJiuzle30aXxLzNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZl
MjUzNS0yZGM1LTRkNDctYjAzZS1kNDRlZWEyNjAzMmYvYTYwNDY0MDItNmNkMS0z
OGNhLTg4NTctNjI4NjZkZmRmZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGFmZTI1MzUtMmRjNS00ZDQ3LWIw
M2UtZDQ0ZWVhMjYwMzJmL2RhZmUyNTM1LTJkYzUtNGQ0Ny1iMDNlLWQ0NGVlYTI2
MDMyZi5jcmwwHwYDVR0jBBgwFoAUN8t1jDs52bn6L7Uc75kQZ5e56xAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZlMjUzNS0yZGM1LTRkNDctYjAzZS1kNDRl
ZWEyNjAzMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP/Y0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHld1mKv5DgIoCcEwxv4nMpJxXoDQ6L/oQEmlSwxTlvjcCnxX3GpktYC
QEEUcD2b3RV1caX2V29MTb7tvj0WW+gWIVNMJuR1X5eGj/Gkgb9QHOydAouk3kyx
aVKOLncFT23W7F0SVa5E/VBsF8VqFMFbhD4qPRWzi5jTuPZnvcJhFhMFXgBYarjk
Wvth7l9G+ZPWqmcvftv802Q+MAmrzcIizvdsD2m7FHmOIDJGGtqdgBxT/+8OQU4P
Fkno3pKJXLu5y1Ho12CFFwUpOOs49KXqmfYQ9dIn6OzACLKtXEQ9OB8hfEkQZ9Te
f28IW+lIhk8zyh08FjH12Ti8cW5NGgg=
-----END CERTIFICATE-----
Generated at Wed Jul 8 18:03:56 2026 by rpki-client