Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/5ff3a293-b7fe-35c3-952e-2b47cabbb1ab.roa
File:                     5ff3a293-b7fe-35c3-952e-2b47cabbb1ab.roa (raw, json)
Hash identifier:          Tl55pHBHYmkdeeVylIYxCuwHgTRKGfBBVYHogR3felo=
Subject key identifier:   C8:A4:A6:8A:77:A2:19:E2:2F:29:F3:E0:41:15:89:91:AD:73:92:06
Certificate issuer:       /CN=d0a791ca-4569-43e8-b02a-989f79143fe4
Certificate serial:       010D0C9F4328584E3E5F24415D15C159D3FA7000
Authority key identifier: 5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/5ff3a293-b7fe-35c3-952e-2b47cabbb1ab.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     393398
IP address blocks:        96.47.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:24:41:5d:15:c1:59:d3:fa:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0a791ca-4569-43e8-b02a-989f79143fe4
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=72327316-e68b-4db8-8e11-84f130cae0b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d7:9f:ed:61:41:be:cd:69:1b:9a:e5:18:d7:
                    ab:07:e1:f9:cd:a1:93:48:e8:2c:72:31:fd:5d:90:
                    1b:90:c4:dd:5c:1b:c6:14:41:23:b9:10:c0:1a:9b:
                    6b:73:f4:55:a4:cb:2c:c2:b7:d9:1e:91:ee:8d:1b:
                    bd:3e:6d:d0:84:c5:91:b7:fb:53:08:4c:e6:d1:aa:
                    10:a7:03:e0:57:ce:3f:54:e6:91:91:65:45:d1:0e:
                    82:3c:11:c1:82:ee:a3:26:d4:6d:65:a4:42:42:f5:
                    a0:92:1c:f2:54:4b:e9:61:1c:12:fe:6f:49:c2:0a:
                    e6:74:43:64:98:a4:e9:06:d0:c8:07:c5:30:8c:ed:
                    45:4c:8d:c1:4e:0f:c3:47:32:c4:78:e3:0a:dc:19:
                    85:94:d3:3d:c3:c3:b2:6e:4c:5e:da:80:cd:61:e7:
                    eb:d8:67:50:17:59:6a:26:ea:cf:36:d5:de:89:86:
                    4e:9e:d3:51:21:0b:68:cc:a2:18:37:0e:fd:bf:3f:
                    11:e5:4d:b2:7e:ed:6d:d9:b6:07:0d:18:b3:27:de:
                    43:f1:53:a0:7b:f3:8b:26:80:28:07:7a:d7:8b:aa:
                    e6:43:ed:de:4f:a1:ef:c4:83:f9:12:b2:4a:35:cf:
                    e1:da:3c:fa:80:92:c3:d7:2e:40:26:30:cb:64:8d:
                    19:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A4:A6:8A:77:A2:19:E2:2F:29:F3:E0:41:15:89:91:AD:73:92:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/5ff3a293-b7fe-35c3-952e-2b47cabbb1ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4/d0a791ca-4569-43e8-b02a-989f79143fe4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:64:4D:0B:3E:54:66:4E:07:88:16:32:F1:8B:C8:1E:C7:A1:81:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d0a791ca-4569-43e8-b02a-989f79143fe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.47.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:5d:58:29:2f:6e:98:be:bf:1c:95:b7:4c:7f:29:85:eb:7a:
         18:b7:2e:de:08:39:77:e4:17:48:6e:92:1c:05:59:5a:a8:78:
         22:78:5a:28:33:25:c9:79:20:b4:9a:80:f4:5c:8d:54:ab:a2:
         f7:73:fc:29:82:b5:94:55:3a:5c:95:53:bc:07:4a:6f:2f:aa:
         fc:2e:28:ab:cc:06:8c:0f:25:06:9e:22:ec:00:64:d5:c3:8d:
         91:f1:14:c9:c4:76:9f:48:92:d8:df:71:70:4a:7a:c5:0b:f0:
         87:2c:a8:4f:4d:66:08:d7:23:87:46:0d:73:dd:88:75:fe:60:
         ae:2e:01:e7:13:df:35:25:85:4d:1b:0d:16:bb:da:e6:c9:be:
         e5:89:59:97:0b:47:3b:a8:81:4b:a6:4b:5b:69:dc:d7:ba:38:
         d7:38:45:17:a4:24:8f:78:a3:01:fe:db:76:09:95:6a:8f:47:
         95:10:03:3a:ee:a4:42:2a:84:80:04:11:d9:fe:6d:b8:9a:e1:
         59:e0:e1:40:ba:65:c0:1b:f1:3e:b2:25:22:c4:9e:d9:9b:8f:
         64:79:42:4d:e5:e4:68:86:e6:0f:6b:26:02:fe:41:8c:7f:95:
         89:02:e7:e7:39:47:20:5b:7a:e1:68:52:03:b3:b9:56:c5:21:
         3b:80:69:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4+XyRBXRXBWdP6cAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDBhNzkxY2EtNDU2OS00M2U4LWIwMmEtOTg5Zjc5MTQz
ZmU0MB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk
NzIzMjczMTYtZTY4Yi00ZGI4LThlMTEtODRmMTMwY2FlMGIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtef7WFBvs1pG5rlGNerB+H5zaGTSOgscjH9
XZAbkMTdXBvGFEEjuRDAGptrc/RVpMsswrfZHpHujRu9Pm3QhMWRt/tTCEzm0aoQ
pwPgV84/VOaRkWVF0Q6CPBHBgu6jJtRtZaRCQvWgkhzyVEvpYRwS/m9JwgrmdENk
mKTpBtDIB8UwjO1FTI3BTg/DRzLEeOMK3BmFlNM9w8Oybkxe2oDNYefr2GdQF1lq
JurPNtXeiYZOntNRIQtozKIYNw79vz8R5U2yfu1t2bYHDRizJ95D8VOge/OLJoAo
B3rXi6rmQ+3eT6HvxIP5ErJKNc/h2jz6gJLD1y5AJjDLZI0ZWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMikpop3ohniLynz4EEViZGtc5IGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3
OTFjYS00NTY5LTQzZTgtYjAyYS05ODlmNzkxNDNmZTQvNWZmM2EyOTMtYjdmZS0z
NWMzLTk1MmUtMmI0N2NhYmJiMWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDBhNzkxY2EtNDU2OS00M2U4LWIw
MmEtOTg5Zjc5MTQzZmU0L2QwYTc5MWNhLTQ1NjktNDNlOC1iMDJhLTk4OWY3OTE0
M2ZlNC5jcmwwHwYDVR0jBBgwFoAUXWRNCz5UZk4HiBYy8YvIHsehgRMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kMGE3OTFjYS00NTY5LTQzZTgtYjAyYS05ODlm
NzkxNDNmZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYC8jMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHVdWCkvbpi+vxyVt0x/KYXrehi3Lt4IOXfkF0hukhwFWVqoeCJ4Wigz
Jcl5ILSagPRcjVSrovdz/CmCtZRVOlyVU7wHSm8vqvwuKKvMBowPJQaeIuwAZNXD
jZHxFMnEdp9IktjfcXBKesUL8IcsqE9NZgjXI4dGDXPdiHX+YK4uAecT3zUlhU0b
DRa72ubJvuWJWZcLRzuogUumS1tp3Ne6ONc4RRekJI94owH+23YJlWqPR5UQAzru
pEIqhIAEEdn+bbia4Vng4UC6ZcAb8T6yJSLEntmbj2R5Qk3l5GiG5g9rJgL+QYx/
lYkC5+c5RyBbeuFoUgOzuVbFITuAaek=
-----END CERTIFICATE-----
Generated at Wed Jul 22 02:05:07 2026 by rpki-client