Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/f1cdda9e-83f8-3ccb-b1c2-5a941832c8dd.roa
File:                     f1cdda9e-83f8-3ccb-b1c2-5a941832c8dd.roa (raw, json)
Hash identifier:          VEmOUkvof9DDLYPtIMoLNP6FVB3N1rp2jkpiaGGN0JM=
Subject key identifier:   E4:AC:3C:6C:1D:41:83:01:2C:8C:6E:87:04:7A:01:2E:A8:7C:56:EC
Certificate issuer:       /CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
Certificate serial:       010D0C9F4328584E66DA19DAA303A20D79EF8B80
Authority key identifier: 26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/f1cdda9e-83f8-3ccb-b1c2-5a941832c8dd.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     3855
IP address blocks:        204.13.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:19:da:a3:03:a2:0d:79:ef:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=5449009d-bb57-453e-88fa-340b2ab7f4d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:07:1d:06:2d:82:8c:1a:35:6f:54:6b:07:62:
                    bc:67:ce:d5:af:2e:e9:8d:37:4c:8e:a3:42:a9:30:
                    9a:6f:3b:9d:b3:78:6c:3d:44:b1:39:82:3e:6c:c3:
                    08:6e:91:f9:b3:b6:97:20:5e:36:ea:ad:b5:54:3b:
                    0e:26:1c:69:7d:cc:37:bd:a8:ea:3c:21:f5:6c:ab:
                    7b:5d:68:17:20:93:12:c3:49:d7:aa:e1:0d:5b:cd:
                    30:b8:c9:66:71:c8:e9:58:8e:ed:01:eb:cb:66:c9:
                    35:01:a5:84:76:6b:89:7f:98:2c:62:89:7d:ba:d3:
                    46:73:62:9a:23:94:c2:b4:89:25:11:03:94:fd:14:
                    33:9c:fd:69:8f:01:7e:fa:45:a4:9f:b2:54:98:94:
                    11:a8:24:9e:6e:0b:ef:78:c1:1a:9c:6f:95:67:f0:
                    3a:32:69:c2:e8:06:5c:c7:eb:8f:1e:42:aa:8d:9b:
                    92:b5:f2:cf:f7:f9:c8:27:7d:9b:40:5e:63:b1:26:
                    2d:4f:ff:04:d4:9d:38:b8:eb:c2:f0:64:47:f0:51:
                    5b:33:6b:2d:52:38:c8:81:43:36:4e:a3:b8:5e:59:
                    41:e6:92:2b:d1:bc:0c:3a:85:81:52:a6:9b:f4:26:
                    e0:bf:ed:c6:8b:7b:a9:58:5a:93:f2:1e:0f:64:fa:
                    e5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AC:3C:6C:1D:41:83:01:2C:8C:6E:87:04:7A:01:2E:A8:7C:56:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/f1cdda9e-83f8-3ccb-b1c2-5a941832c8dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl

            X509v3 Authority Key Identifier:
                keyid:26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.13.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:fd:70:e0:cc:10:df:29:a2:22:af:5f:ff:25:ba:8b:df:7e:
         fd:df:d1:a7:04:e6:b6:0b:1a:50:5b:4c:89:85:b9:35:ce:41:
         6c:87:94:d8:a1:64:b1:ca:a1:93:19:8d:7a:cf:37:e7:42:13:
         04:a0:97:03:07:6d:69:34:83:48:d0:1f:6a:e8:8f:2e:d5:62:
         f7:3e:10:36:d1:c2:aa:69:b4:f6:11:36:a5:5a:b0:7e:11:02:
         fa:64:6d:d9:ae:e1:dd:05:c9:b8:83:84:a7:b9:82:c5:7e:67:
         45:a3:49:68:46:aa:fd:45:ee:74:b1:05:46:05:81:96:af:1e:
         1c:28:98:bd:6a:d2:54:9d:1d:b3:ac:ca:b0:42:e2:12:96:78:
         b1:4c:5b:51:a8:03:2b:9a:64:2d:7e:92:0c:ac:0d:37:51:9d:
         93:be:42:e0:f1:8d:3a:3b:c4:dc:e8:7c:d2:45:32:da:19:71:
         05:f1:22:56:6f:85:46:d8:1f:b9:01:ac:4b:d6:f6:74:a5:6a:
         8c:6d:62:35:ab:18:5e:2d:f3:a6:8e:4c:16:46:40:2b:0c:bb:
         a1:d7:a0:24:34:06:c3:7b:d1:aa:ed:14:1f:59:5a:24:d5:ef:
         8f:7d:35:0b:c4:59:58:d1:f6:54:de:3e:46:aa:e8:1f:20:f7:
         15:2b:65:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2hnaowOiDXnvi4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTNmYWRhNDktYjM1My00YTY5LTliMzItMWI2YWIzNzI5
ZGIxMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk
NTQ0OTAwOWQtYmI1Ny00NTNlLTg4ZmEtMzQwYjJhYjdmNGQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygcdBi2CjBo1b1RrB2K8Z87Vry7pjTdMjqNC
qTCabzuds3hsPUSxOYI+bMMIbpH5s7aXIF426q21VDsOJhxpfcw3vajqPCH1bKt7
XWgXIJMSw0nXquENW80wuMlmccjpWI7tAevLZsk1AaWEdmuJf5gsYol9utNGc2Ka
I5TCtIklEQOU/RQznP1pjwF++kWkn7JUmJQRqCSebgvveMEanG+VZ/A6MmnC6AZc
x+uPHkKqjZuStfLP9/nIJ32bQF5jsSYtT/8E1J04uOvC8GRH8FFbM2stUjjIgUM2
TqO4XllB5pIr0bwMOoWBUqab9Cbgv+3Gi3upWFqT8h4PZPrlcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOSsPGwdQYMBLIxuhwR6AS6ofFbsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lM2Zh
ZGE0OS1iMzUzLTRhNjktOWIzMi0xYjZhYjM3MjlkYjEvZjFjZGRhOWUtODNmOC0z
Y2NiLWIxYzItNWE5NDE4MzJjOGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTNmYWRhNDktYjM1My00YTY5LTli
MzItMWI2YWIzNzI5ZGIxL2UzZmFkYTQ5LWIzNTMtNGE2OS05YjMyLTFiNmFiMzcy
OWRiMS5jcmwwHwYDVR0jBBgwFoAUJuly3fKragsPZSkTRy/Y3+UGPZ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lM2ZhZGE0OS1iMzUzLTRhNjktOWIzMi0xYjZh
YjM3MjlkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzA0YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACz9cODMEN8poiKvX/8luovffv3f0acE5rYLGlBbTImFuTXOQWyHlNih
ZLHKoZMZjXrPN+dCEwSglwMHbWk0g0jQH2rojy7VYvc+EDbRwqpptPYRNqVasH4R
Avpkbdmu4d0FybiDhKe5gsV+Z0WjSWhGqv1F7nSxBUYFgZavHhwomL1q0lSdHbOs
yrBC4hKWeLFMW1GoAyuaZC1+kgysDTdRnZO+QuDxjTo7xNzofNJFMtoZcQXxIlZv
hUbYH7kBrEvW9nSlaoxtYjWrGF4t86aOTBZGQCsMu6HXoCQ0BsN70artFB9ZWiTV
7499NQvEWVjR9lTePkaq6B8g9xUrZeA=
-----END CERTIFICATE-----
Generated at Mon Jul 13 12:50:51 2026 by rpki-client