Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/ff612d58-3187-3ab9-be3f-9129fc6a474a.roa
File:                     ff612d58-3187-3ab9-be3f-9129fc6a474a.roa (raw, json)
Hash identifier:          bvqIPbdVrJ3kYdM0gn0EZHjCyWSOrOzx6yJU0Q10c24=
Subject key identifier:   65:EA:96:82:5C:A1:05:96:25:E4:1F:16:20:5B:CD:A6:D4:57:F8:17
Certificate issuer:       /CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
Certificate serial:       010D0C9F4328584EBC771611FDFF80335AA5E700
Authority key identifier: 11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/ff612d58-3187-3ab9-be3f-9129fc6a474a.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     5650
IP address blocks:        23.239.172.0/24 maxlen: 24
                          107.155.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:16:11:fd:ff:80:33:5a:a5:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=4fd547ab-bc43-4d23-95ff-f0557ed4f4b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9b:22:da:7d:ae:ab:46:cd:b1:55:20:4a:27:
                    be:44:97:a9:12:16:2e:59:fe:b6:91:6f:ac:ee:a4:
                    ea:61:85:0d:cc:8a:07:c5:ff:69:b5:77:41:52:c5:
                    73:a6:2a:6b:aa:11:74:d0:03:19:c4:31:a6:32:07:
                    00:11:80:ae:98:69:8e:13:22:6c:a3:d9:8a:01:f7:
                    3e:25:26:3c:65:ae:19:20:0b:33:3e:51:07:15:1b:
                    2f:6b:29:f8:4e:c3:0b:b7:b9:e4:9a:0a:0f:fa:bd:
                    3b:24:73:50:eb:97:60:1d:f0:27:22:9a:5d:ec:fd:
                    0c:2e:c2:fd:ab:1e:40:db:ad:0d:4d:5a:4d:50:8c:
                    bb:de:ca:32:67:6c:73:b4:31:d5:26:e6:ba:75:1e:
                    ea:03:7f:56:7a:d6:de:0d:06:bf:31:19:4d:18:59:
                    0d:c7:46:20:a3:c0:b8:d5:a0:75:d2:26:25:82:13:
                    e6:6e:37:2a:4d:63:6b:f4:cc:a1:bd:4a:7d:40:d7:
                    a3:1a:26:c6:eb:c5:fc:92:ee:ea:e9:86:f9:b6:23:
                    95:7d:f1:e4:5d:17:1c:ee:e9:19:d7:1c:47:34:25:
                    9e:5a:99:7b:16:46:07:14:04:ca:6e:c3:8f:fa:05:
                    73:54:34:85:53:ed:d7:6a:10:98:ae:b8:c5:45:b5:
                    29:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EA:96:82:5C:A1:05:96:25:E4:1F:16:20:5B:CD:A6:D4:57:F8:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/ff612d58-3187-3ab9-be3f-9129fc6a474a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl

            X509v3 Authority Key Identifier:
                keyid:11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.239.172.0/24
                  107.155.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:cf:85:5f:40:26:48:10:db:19:12:fa:3d:e2:69:c9:d0:c5:
         9c:9f:14:8d:e9:f9:80:51:61:5a:c8:e4:bb:1b:9f:bc:c2:32:
         63:60:c1:29:49:14:2c:dc:cd:3b:8e:bf:05:91:81:96:4d:aa:
         fa:52:40:7c:86:b8:11:22:a4:77:a2:9b:41:c2:1a:a5:e8:ba:
         3d:6d:f4:e0:bc:9d:ed:28:80:9d:2e:93:7f:df:3d:1f:4c:b8:
         ae:e5:bc:1e:5b:33:66:07:bc:6b:b3:ce:2f:8e:28:47:dd:21:
         56:de:ec:62:9b:44:86:fe:e0:79:a3:f5:e3:f8:54:26:33:d4:
         df:1e:06:90:d5:2e:76:fb:76:59:59:7e:37:02:cb:be:9d:7d:
         fd:75:bc:43:ce:55:cc:6e:61:c2:51:23:72:cf:11:60:be:eb:
         b9:20:54:34:ce:2c:5e:33:95:d4:9e:e6:ef:6e:5d:14:95:a7:
         eb:24:55:5c:54:a4:1e:1b:9a:c8:7e:e6:05:3a:ca:07:9c:78:
         be:fe:fd:94:53:8f:3a:8e:1e:8e:b2:82:09:1c:b7:e6:64:99:
         dd:ff:87:df:4a:50:08:04:e9:90:7e:23:eb:5d:f0:28:b1:88:
         43:be:69:cb:72:da:70:fa:85:71:3c:85:38:42:e4:1e:62:8f:
         a9:1d:4e:63
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE68dxYR/f+AM1ql5wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjODViYTQtOGQ3Mi00OGVkLWExNjYtYTc2ZGMyZjA0
Mjg3MB4XDTI2MDgwNTEzMDAxMloXDTI2MTEwMzE0MDAxMlowLzEtMCsGA1UEAxMk
NGZkNTQ3YWItYmM0My00ZDIzLTk1ZmYtZjA1NTdlZDRmNGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJsi2n2uq0bNsVUgSie+RJepEhYuWf62kW+s
7qTqYYUNzIoHxf9ptXdBUsVzpiprqhF00AMZxDGmMgcAEYCumGmOEyJso9mKAfc+
JSY8Za4ZIAszPlEHFRsvayn4TsMLt7nkmgoP+r07JHNQ65dgHfAnIppd7P0MLsL9
qx5A260NTVpNUIy73soyZ2xztDHVJua6dR7qA39WetbeDQa/MRlNGFkNx0Ygo8C4
1aB10iYlghPmbjcqTWNr9MyhvUp9QNejGibG68X8ku7q6Yb5tiOVffHkXRcc7ukZ
1xxHNCWeWpl7FkYHFATKbsOP+gVzVDSFU+3XahCYrrjFRbUpWwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFGXqloJcoQWWJeQfFiBbzabUV/gXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4
NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZkYzJmMDQyODcvZmY2MTJkNTgtMzE4Ny0z
YWI5LWJlM2YtOTEyOWZjNmE0NzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWZjODViYTQtOGQ3Mi00OGVkLWEx
NjYtYTc2ZGMyZjA0Mjg3LzFmYzg1YmE0LThkNzItNDhlZC1hMTY2LWE3NmRjMmYw
NDI4Ny5jcmwwHwYDVR0jBBgwFoAUEbxdAebJG/t/I+XSIpHWtCikkgkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZk
YzJmMDQyODcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF++sAwQA
a5v0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAIDPhV9AJkgQ2xkS+j3iacnQxZyfFI3p+YBRYVrI5Lsbn7zC
MmNgwSlJFCzczTuOvwWRgZZNqvpSQHyGuBEipHeim0HCGqXouj1t9OC8ne0ogJ0u
k3/fPR9MuK7lvB5bM2YHvGuzzi+OKEfdIVbe7GKbRIb+4Hmj9eP4VCYz1N8eBpDV
Lnb7dllZfjcCy76dff11vEPOVcxuYcJRI3LPEWC+67kgVDTOLF4zldSe5u9uXRSV
p+skVVxUpB4bmsh+5gU6ygeceL7+/ZRTjzqOHo6yggkct+Zkmd3/h99KUAgE6ZB+
I+td8CixiEO+acty2nD6hXE8hThC5B5ij6kdTmM=
-----END CERTIFICATE-----
Generated at Sun Sep 13 07:12:48 2026 by rpki-client