Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/a1e8a46b-559f-3e06-b83d-c999472ef340.roa
File:                     a1e8a46b-559f-3e06-b83d-c999472ef340.roa (raw, json)
Hash identifier:          dzYwp8oHkoLuFP8Mtu11YuFfhifAP9oCtn7ZbY9HvRo=
Subject key identifier:   18:67:96:CD:B1:EE:65:6B:93:3F:BF:03:3E:C1:38:E9:8F:B4:A4:40
Certificate issuer:       /CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc
Certificate serial:       010D0C9F4328584E376488831E13D729C4072C00
Authority key identifier: 79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/a1e8a46b-559f-3e06-b83d-c999472ef340.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     852
IP address blocks:        199.58.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:88:83:1e:13:d7:29:c4:07:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=8c989929-04d3-4b4d-a4e5-81f1169efb88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:48:65:65:19:04:88:c2:25:6b:1e:a0:3d:d3:
                    1e:be:36:00:c8:b8:4e:04:25:1b:fd:41:e2:b8:58:
                    be:85:cc:ff:64:49:4b:19:20:a0:b8:0c:94:0c:d4:
                    03:05:f3:74:a0:ab:d5:e4:11:26:70:cb:8f:02:a8:
                    23:b3:90:9a:90:d5:c0:8c:6a:ae:7b:02:fa:51:57:
                    94:30:5e:ed:58:0e:ab:18:21:6e:00:77:02:cc:a3:
                    f2:3c:56:04:fc:bc:e1:4a:58:2c:43:d4:28:06:36:
                    cd:91:7b:12:21:6e:a0:b2:e4:fc:8b:88:81:16:f9:
                    23:d5:ec:7a:82:a0:98:3b:8f:cd:b9:dc:4d:98:43:
                    c6:b9:8b:42:57:2f:1b:4b:4d:5e:27:fa:b5:c5:c2:
                    4b:92:98:03:cd:f6:20:ab:cf:71:26:c8:e9:8a:3b:
                    63:33:f4:b9:4a:80:d7:55:e2:2a:1e:cb:74:d7:96:
                    9f:9a:7c:22:07:c6:a6:32:d9:3a:b1:e7:cb:c8:6e:
                    ae:a9:45:8c:3a:9d:aa:6c:04:0d:3d:da:c4:fd:61:
                    88:a5:b4:6b:f2:db:2c:d0:51:4f:e7:60:c3:17:5a:
                    6b:15:23:28:66:2a:fd:3f:ab:77:18:64:19:6d:21:
                    82:ab:8b:6d:1f:7e:02:37:d6:fb:72:12:cc:d8:a4:
                    5f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:67:96:CD:B1:EE:65:6B:93:3F:BF:03:3E:C1:38:E9:8F:B4:A4:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/a1e8a46b-559f-3e06-b83d-c999472ef340.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl

            X509v3 Authority Key Identifier:
                keyid:79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.58.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:0e:95:0f:0d:bc:0c:ea:dd:c8:6d:52:39:10:0f:d7:5d:18:
         dc:53:4b:2c:7f:13:3b:7e:5a:e5:a7:48:26:b0:9e:11:6e:7d:
         54:ac:14:4a:d8:46:e4:a6:b8:47:b4:e5:91:44:62:bb:21:86:
         9f:94:52:40:93:e1:24:f0:2d:85:ee:51:b1:77:27:73:65:bf:
         ad:83:18:f7:77:12:ad:c7:c9:80:d6:27:50:33:4a:71:c2:61:
         66:5f:fb:98:e0:7c:78:63:47:c1:36:96:ff:18:d9:78:ff:5e:
         c0:f1:5b:2b:ff:13:29:98:de:b1:2e:b6:f1:71:7a:b8:0c:99:
         8d:3a:55:38:2b:88:bb:8f:11:4b:d2:09:09:0d:3b:5b:2c:89:
         64:45:5c:c0:09:73:69:a2:df:92:fe:99:92:a8:bc:13:9e:a1:
         67:8b:ce:8d:ee:6d:39:71:de:d4:4b:d0:f1:40:fa:89:9a:50:
         97:ab:fd:47:b6:1c:28:66:98:c6:83:11:f1:a1:a5:1f:c2:a3:
         cd:1f:c7:b1:ea:a2:45:45:ad:a8:6e:67:2d:20:41:6e:20:5f:
         95:f2:b2:d6:9a:45:ad:d2:18:15:5b:df:78:d0:f4:68:75:7b:
         f0:07:fb:79:99:c7:03:95:06:e3:bb:ca:8d:fa:61:33:fa:d8:
         07:01:5c:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43ZIiDHhPXKcQHLAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzM2MzZiNzEtZmQwOS00ZWU5LTlmM2UtNTUyZTUzNTZh
NGZjMB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk
OGM5ODk5MjktMDRkMy00YjRkLWE0ZTUtODFmMTE2OWVmYjg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEhlZRkEiMIlax6gPdMevjYAyLhOBCUb/UHi
uFi+hcz/ZElLGSCguAyUDNQDBfN0oKvV5BEmcMuPAqgjs5CakNXAjGquewL6UVeU
MF7tWA6rGCFuAHcCzKPyPFYE/LzhSlgsQ9QoBjbNkXsSIW6gsuT8i4iBFvkj1ex6
gqCYO4/NudxNmEPGuYtCVy8bS01eJ/q1xcJLkpgDzfYgq89xJsjpijtjM/S5SoDX
VeIqHst015afmnwiB8amMtk6sefLyG6uqUWMOp2qbAQNPdrE/WGIpbRr8tss0FFP
52DDF1prFSMoZir9P6t3GGQZbSGCq4ttH34CN9b7chLM2KRfTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBhnls2x7mVrkz+/Az7BOOmPtKRAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMzYz
NmI3MS1mZDA5LTRlZTktOWYzZS01NTJlNTM1NmE0ZmMvYTFlOGE0NmItNTU5Zi0z
ZTA2LWI4M2QtYzk5OTQ3MmVmMzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzM2MzZiNzEtZmQwOS00ZWU5LTlm
M2UtNTUyZTUzNTZhNGZjL2MzNjM2YjcxLWZkMDktNGVlOS05ZjNlLTU1MmU1MzU2
YTRmYy5jcmwwHwYDVR0jBBgwFoAUeW0JazRG4DATFKcMfmazw0snvNkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMzYzNmI3MS1mZDA5LTRlZTktOWYzZS01NTJl
NTM1NmE0ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzr/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB4OlQ8NvAzq3chtUjkQD9ddGNxTSyx/Ezt+WuWnSCawnhFufVSsFErY
RuSmuEe05ZFEYrshhp+UUkCT4STwLYXuUbF3J3Nlv62DGPd3Eq3HyYDWJ1AzSnHC
YWZf+5jgfHhjR8E2lv8Y2Xj/XsDxWyv/EymY3rEutvFxergMmY06VTgriLuPEUvS
CQkNO1ssiWRFXMAJc2mi35L+mZKovBOeoWeLzo3ubTlx3tRL0PFA+omaUJer/Ue2
HChmmMaDEfGhpR/Co80fx7HqokVFrahuZy0gQW4gX5XystaaRa3SGBVb33jQ9Gh1
e/AH+3mZxwOVBuO7yo36YTP62AcBXEc=
-----END CERTIFICATE-----
Generated at Wed Jul 15 01:48:39 2026 by rpki-client