Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/3d40fcbe-3f96-39a0-8e03-57f5f9c54ab4.roa
File:                     3d40fcbe-3f96-39a0-8e03-57f5f9c54ab4.roa (raw, json)
Hash identifier:          F9ZdyD4L7DWjj/BJIx0g8ZEaSEfyvSjOLjxmwSd7OIM=
Subject key identifier:   00:74:DC:1C:1A:D8:BA:66:88:A6:91:33:F8:41:E5:FC:5E:EE:FD:73
Certificate issuer:       /CN=810c5fd9-ee7e-4b9a-9584-b706f11e175b
Certificate serial:       010D0C9F4328584EA5AA776B6972A4B55C3E1A00
Authority key identifier: 2F:5E:1D:3A:7B:EA:7B:7B:DD:0E:BE:DF:01:52:18:50:B0:DB:0F:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/3d40fcbe-3f96-39a0-8e03-57f5f9c54ab4.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     30513
IP address blocks:        199.188.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:77:6b:69:72:a4:b5:5c:3e:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810c5fd9-ee7e-4b9a-9584-b706f11e175b
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=a7d26521-3f81-4ce0-8ea1-fd96f523e704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:60:7d:48:42:86:2e:e1:e0:28:b4:af:82:c5:
                    66:1e:33:48:2b:52:fd:31:35:89:30:be:ca:ee:6f:
                    88:13:99:25:38:75:f0:18:2d:d9:8a:6a:19:ba:31:
                    4c:90:93:3a:14:cc:05:3b:99:82:7e:e8:a8:9c:4a:
                    4d:96:73:9f:f4:f6:ae:ba:92:44:0c:16:cd:cb:81:
                    17:e4:aa:2d:f7:bf:fc:b6:c2:e8:84:ac:c7:6a:f7:
                    08:bf:6b:7b:e6:53:8b:1e:d2:b6:b5:28:6b:26:0e:
                    cd:66:b2:15:d9:41:6b:d5:bd:d0:26:04:fa:3c:ba:
                    ac:19:a1:5c:71:6e:6f:10:f6:c5:e1:be:47:73:3a:
                    a3:6a:56:0f:35:37:de:9c:95:0b:f4:5b:f2:56:ef:
                    94:fb:7e:1c:99:01:78:d3:4e:1a:b9:1f:39:77:e7:
                    a3:7f:ef:cb:74:53:f0:c2:08:ae:59:0d:a2:af:e8:
                    02:2c:15:41:ab:91:a0:9a:42:2f:ee:f0:aa:61:e6:
                    01:2d:d6:2b:6d:be:6d:4b:09:e9:7b:b7:63:75:6e:
                    dd:a0:39:56:d3:c1:55:5d:55:87:61:e9:7e:38:ee:
                    2e:51:5f:76:ef:c7:98:7c:f6:61:d2:03:8a:ca:7b:
                    14:4a:47:2d:02:4c:5e:7a:89:6c:59:05:f5:dd:a2:
                    70:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:74:DC:1C:1A:D8:BA:66:88:A6:91:33:F8:41:E5:FC:5E:EE:FD:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/3d40fcbe-3f96-39a0-8e03-57f5f9c54ab4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.crl

            X509v3 Authority Key Identifier:
                keyid:2F:5E:1D:3A:7B:EA:7B:7B:DD:0E:BE:DF:01:52:18:50:B0:DB:0F:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:36:7a:3e:c7:6f:50:45:a4:ef:9e:db:8c:1d:77:bb:3e:c1:
         9a:6f:1e:2f:df:e8:45:c0:75:dc:1e:93:35:b5:d3:7e:79:f1:
         2c:9f:f9:95:11:00:ec:49:3e:87:81:7f:a0:b1:d2:20:31:92:
         dd:3e:03:23:db:29:c3:9b:6e:a7:61:52:f8:97:cc:1b:af:5e:
         9e:d1:43:f4:70:ec:ff:d9:f1:8b:6c:f3:86:74:1e:8d:ef:c4:
         67:5a:20:2d:0b:50:08:ee:28:de:a6:8a:1e:09:86:94:ba:0d:
         af:4e:dd:e8:97:66:5a:0e:c6:ee:10:10:8c:e5:9f:70:02:37:
         dc:78:4c:4b:0d:4e:b5:a3:3a:aa:c0:c0:08:7a:28:13:1b:d4:
         ef:2f:f2:b1:73:ed:64:b3:0b:30:83:ce:2f:6a:03:40:96:d8:
         20:d0:8d:f0:32:bc:74:c3:41:7a:a2:33:79:b2:70:4a:9f:f4:
         01:7f:24:92:5c:27:07:73:50:92:09:c6:73:71:ef:53:58:61:
         29:83:22:02:98:71:4b:10:78:f5:d9:7d:f1:8f:e0:7d:ce:20:
         8b:31:5b:92:d9:8a:6f:85:b6:2a:89:b5:c0:b1:f1:59:59:26:
         84:81:1b:ad:cf:92:1f:26:5d:ec:4d:0a:4c:27:7e:f2:3e:40:
         17:10:a8:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqndraXKktVw+GgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODEwYzVmZDktZWU3ZS00YjlhLTk1ODQtYjcwNmYxMWUx
NzViMB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk
YTdkMjY1MjEtM2Y4MS00Y2UwLThlYTEtZmQ5NmY1MjNlNzA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGB9SEKGLuHgKLSvgsVmHjNIK1L9MTWJML7K
7m+IE5klOHXwGC3ZimoZujFMkJM6FMwFO5mCfuionEpNlnOf9PauupJEDBbNy4EX
5Kot97/8tsLohKzHavcIv2t75lOLHtK2tShrJg7NZrIV2UFr1b3QJgT6PLqsGaFc
cW5vEPbF4b5HczqjalYPNTfenJUL9FvyVu+U+34cmQF4004auR85d+ejf+/LdFPw
wgiuWQ2ir+gCLBVBq5GgmkIv7vCqYeYBLdYrbb5tSwnpe7djdW7doDlW08FVXVWH
Yel+OO4uUV9278eYfPZh0gOKynsUSkctAkxeeolsWQX13aJwIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAB03Bwa2LpmiKaRM/hB5fxe7v1zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84MTBj
NWZkOS1lZTdlLTRiOWEtOTU4NC1iNzA2ZjExZTE3NWIvM2Q0MGZjYmUtM2Y5Ni0z
OWEwLThlMDMtNTdmNWY5YzU0YWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODEwYzVmZDktZWU3ZS00YjlhLTk1
ODQtYjcwNmYxMWUxNzViLzgxMGM1ZmQ5LWVlN2UtNGI5YS05NTg0LWI3MDZmMTFl
MTc1Yi5jcmwwHwYDVR0jBBgwFoAUL14dOnvqe3vdDr7fAVIYULDbDyowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84MTBjNWZkOS1lZTdlLTRiOWEtOTU4NC1iNzA2
ZjExZTE3NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx7wOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFk2ej7Hb1BFpO+e24wdd7s+wZpvHi/f6EXAddwekzW103558Syf+ZUR
AOxJPoeBf6Cx0iAxkt0+AyPbKcObbqdhUviXzBuvXp7RQ/Rw7P/Z8Yts84Z0Ho3v
xGdaIC0LUAjuKN6mih4JhpS6Da9O3eiXZloOxu4QEIzln3ACN9x4TEsNTrWjOqrA
wAh6KBMb1O8v8rFz7WSzCzCDzi9qA0CW2CDQjfAyvHTDQXqiM3mycEqf9AF/JJJc
JwdzUJIJxnNx71NYYSmDIgKYcUsQePXZffGP4H3OIIsxW5LZim+FtiqJtcCx8VlZ
JoSBG63Pkh8mXexNCkwnfvI+QBcQqJQ=
-----END CERTIFICATE-----
Generated at Wed Jul 29 20:37:39 2026 by rpki-client