Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/32607b24-2be3-3e02-9907-19ab759052e2.roa
File:                     32607b24-2be3-3e02-9907-19ab759052e2.roa (raw, json)
Hash identifier:          6411ht4HQwgluL4faK1rpq86DM30/ZaGNzE/dB9bIFw=
Subject key identifier:   97:AA:A8:C8:28:10:1E:82:F8:D6:10:81:C6:C0:B6:91:F9:F8:06:7D
Certificate issuer:       /CN=0a4ce5e6-29f4-4552-bf3b-5510aa3b5052
Certificate serial:       010D0C9F4328584D95F0012D354A9A6B4A38FEC0
Authority key identifier: 6F:D9:11:69:B9:73:1F:5C:48:7D:CE:11:8A:21:CE:B1:3F:F5:F9:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/32607b24-2be3-3e02-9907-19ab759052e2.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     19905
IP address blocks:        204.89.58.0/24 maxlen: 24
                          204.89.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:01:2d:35:4a:9a:6b:4a:38:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a4ce5e6-29f4-4552-bf3b-5510aa3b5052
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=0a85f0cb-c604-4bfb-ac35-b6e60302c210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fe:38:13:2e:e7:d7:5c:ea:ed:1a:ac:c0:ef:
                    b8:85:3b:16:07:fd:5d:05:32:db:1c:b0:97:e5:67:
                    8b:67:1f:83:37:af:63:20:99:44:ab:19:8b:c7:49:
                    c5:7c:2b:70:a0:79:2c:7f:c9:93:08:28:9f:75:0a:
                    8e:43:9d:4d:ff:04:23:25:02:98:dd:be:55:2e:ce:
                    b8:4c:96:c6:e9:cd:89:c1:5c:24:ea:ff:25:5f:41:
                    6a:8f:ed:d2:9c:04:d3:3e:a3:e6:5a:29:aa:18:6a:
                    99:67:a6:a8:a2:92:fa:b7:a1:8b:f3:2c:a4:79:25:
                    79:aa:4c:91:ff:d5:1c:2d:2e:0a:fd:c2:1d:3e:51:
                    73:c0:04:ad:1a:b2:1d:51:20:36:6a:27:0f:70:bd:
                    58:73:3f:8f:ed:92:ac:a4:27:b4:16:ba:43:06:1b:
                    c6:7c:6d:97:4b:84:72:37:03:15:27:cb:6e:e0:ad:
                    15:d7:6c:24:c0:e3:f3:86:40:99:e2:02:eb:92:96:
                    22:55:7c:8e:5e:30:3c:c4:41:61:cd:b0:cd:e1:60:
                    c5:a2:42:a3:9b:c8:5e:1f:bb:84:ad:41:42:c9:f0:
                    af:e2:c1:7e:dd:d9:ab:6d:cb:86:08:a4:82:d7:c1:
                    89:85:a8:69:db:2f:fb:5e:d8:77:b4:7b:d7:e6:b9:
                    24:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AA:A8:C8:28:10:1E:82:F8:D6:10:81:C6:C0:B6:91:F9:F8:06:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/32607b24-2be3-3e02-9907-19ab759052e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D9:11:69:B9:73:1F:5C:48:7D:CE:11:8A:21:CE:B1:3F:F5:F9:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0a4ce5e6-29f4-4552-bf3b-5510aa3b5052.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.89.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:7d:29:4e:ce:77:ac:a0:1c:5f:90:17:a4:19:b7:59:24:a5:
         55:b7:13:2a:3e:d1:36:ac:f7:a3:47:2a:60:07:58:20:8c:75:
         e7:cf:c6:8a:66:6c:74:65:83:87:9c:81:f3:3e:6f:ab:2d:6e:
         27:39:ef:e6:75:85:ef:1f:f9:3f:11:c2:42:e5:97:8a:b8:32:
         14:57:e4:86:d7:71:ad:34:fa:02:98:71:50:de:ba:bb:5a:05:
         7b:65:02:1d:1c:e7:de:53:88:69:bb:e8:84:c5:cb:91:f7:ae:
         bb:b7:ea:cf:14:8e:85:da:07:1b:9b:a4:46:97:5b:46:6a:f8:
         06:56:e7:3b:9b:e6:2c:9a:1a:74:df:16:56:20:b4:0d:8e:49:
         21:1f:b4:d3:fb:4b:c6:22:98:ac:f0:52:18:ff:08:91:af:69:
         5f:54:bb:f4:98:b3:38:e0:bd:0e:73:42:1f:0b:14:83:c1:f4:
         f8:90:df:35:7d:2c:80:f9:2f:61:c1:90:5d:8c:87:77:09:bc:
         e1:0a:c7:a0:b9:86:ef:a0:e4:ee:97:48:1b:ee:1e:c0:eb:7a:
         8e:7a:69:8b:50:5c:1e:fa:f3:b0:5d:03:fc:35:7b:9e:c6:f4:
         83:fe:8b:70:28:d5:bd:68:5d:70:c5:b2:af:5b:c0:76:78:7e:
         5a:f0:e5:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8AEtNUqaa0o4/sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE0Y2U1ZTYtMjlmNC00NTUyLWJmM2ItNTUxMGFhM2I1
MDUyMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk
MGE4NWYwY2ItYzYwNC00YmZiLWFjMzUtYjZlNjAzMDJjMjEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/44Ey7n11zq7RqswO+4hTsWB/1dBTLbHLCX
5WeLZx+DN69jIJlEqxmLx0nFfCtwoHksf8mTCCifdQqOQ51N/wQjJQKY3b5VLs64
TJbG6c2JwVwk6v8lX0Fqj+3SnATTPqPmWimqGGqZZ6aoopL6t6GL8yykeSV5qkyR
/9UcLS4K/cIdPlFzwAStGrIdUSA2aicPcL1Ycz+P7ZKspCe0FrpDBhvGfG2XS4Ry
NwMVJ8tu4K0V12wkwOPzhkCZ4gLrkpYiVXyOXjA8xEFhzbDN4WDFokKjm8heH7uE
rUFCyfCv4sF+3dmrbcuGCKSC18GJhahp2y/7Xth3tHvX5rkk0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJeqqMgoEB6C+NYQgcbAtpH5+AZ9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wYTRj
ZTVlNi0yOWY0LTQ1NTItYmYzYi01NTEwYWEzYjUwNTIvMzI2MDdiMjQtMmJlMy0z
ZTAyLTk5MDctMTlhYjc1OTA1MmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGE0Y2U1ZTYtMjlmNC00NTUyLWJm
M2ItNTUxMGFhM2I1MDUyLzBhNGNlNWU2LTI5ZjQtNDU1Mi1iZjNiLTU1MTBhYTNi
NTA1Mi5jcmwwHwYDVR0jBBgwFoAUb9kRablzH1xIfc4RiiHOsT/1+SUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wYTRjZTVlNi0yOWY0LTQ1NTItYmYzYi01NTEw
YWEzYjUwNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzFk6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADd9KU7Od6ygHF+QF6QZt1kkpVW3Eyo+0Tas96NHKmAHWCCMdefPxopm
bHRlg4ecgfM+b6stbic57+Z1he8f+T8RwkLll4q4MhRX5IbXca00+gKYcVDeurta
BXtlAh0c595TiGm76ITFy5H3rru36s8UjoXaBxubpEaXW0Zq+AZW5zub5iyaGnTf
FlYgtA2OSSEftNP7S8YimKzwUhj/CJGvaV9Uu/SYszjgvQ5zQh8LFIPB9PiQ3zV9
LID5L2HBkF2Mh3cJvOEKx6C5hu+g5O6XSBvuHsDreo56aYtQXB7687BdA/w1e57G
9IP+i3Ao1b1oXXDFsq9bwHZ4flrw5RU=
-----END CERTIFICATE-----
Generated at Fri May 8 16:26:29 2026 by rpki-client