Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/aca5a587-8c73-3704-8f63-dd592c75316a.roa
File:                     aca5a587-8c73-3704-8f63-dd592c75316a.roa (raw, json)
Hash identifier:          vsy4t+IvBLUUNSEe/MCkusFGRpAKFNRq33a12rF59xc=
Subject key identifier:   DE:8E:C2:73:8B:7E:70:D3:86:9E:31:82:09:B7:46:B3:0A:7C:76:7A
Certificate issuer:       /CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc
Certificate serial:       010D0C9F4328584E3764888F8F8BA9E7264D5CC0
Authority key identifier: 79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/aca5a587-8c73-3704-8f63-dd592c75316a.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     174
IP address blocks:        199.58.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:88:8f:8f:8b:a9:e7:26:4d:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3636b71-fd09-4ee9-9f3e-552e5356a4fc
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=7735777a-dfe4-4ca4-95fe-622ea70e4ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a1:24:96:ed:bf:26:d8:db:89:65:66:0c:72:
                    80:45:97:7a:49:b9:e0:2e:7d:67:47:4d:d6:b5:b7:
                    bc:13:7d:03:a2:2d:a2:14:55:7b:a4:16:21:be:30:
                    25:c4:77:65:c5:56:04:03:5c:17:99:df:ef:c2:ea:
                    3e:de:19:5f:4d:e0:0b:1d:d4:72:f0:5d:be:69:02:
                    84:39:5f:a9:d3:70:52:25:f8:1b:a7:96:d2:0b:66:
                    9d:fc:99:af:f7:79:57:c7:18:da:3b:05:a1:b0:6a:
                    b6:87:35:af:ec:01:70:e4:aa:5a:a0:15:ac:fe:b6:
                    f8:e4:6f:45:62:1d:91:e4:a4:70:f0:97:9f:82:9c:
                    a0:44:01:5a:09:37:b5:cb:e5:e1:5e:f7:0d:e0:e3:
                    5e:89:2f:13:f5:f4:c2:1f:2f:59:d5:d9:3f:9f:3d:
                    e4:72:8b:36:64:7e:c5:e1:b2:6f:f0:41:06:cc:90:
                    57:7c:bb:c8:70:96:5c:c8:70:29:11:73:58:78:d4:
                    58:28:4e:72:ea:17:82:b7:d3:53:f8:05:28:6a:2d:
                    60:d5:22:ed:c8:ea:d1:66:04:d7:d3:aa:5c:76:aa:
                    08:33:54:94:10:c5:9c:bb:d1:2d:a7:b4:5d:5c:eb:
                    6d:3c:b3:ab:7e:23:f3:40:16:27:73:b5:80:84:78:
                    e7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8E:C2:73:8B:7E:70:D3:86:9E:31:82:09:B7:46:B3:0A:7C:76:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/aca5a587-8c73-3704-8f63-dd592c75316a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.crl

            X509v3 Authority Key Identifier:
                keyid:79:6D:09:6B:34:46:E0:30:13:14:A7:0C:7E:66:B3:C3:4B:27:BC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c3636b71-fd09-4ee9-9f3e-552e5356a4fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.58.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:e4:0b:58:de:c4:69:a7:9c:33:b7:ee:56:c1:49:65:48:76:
         84:02:5e:9c:8b:f5:50:30:af:29:9b:66:39:89:75:56:e2:97:
         0f:dc:c4:f7:0a:90:f1:9d:2a:17:e4:d6:f5:42:03:93:25:8a:
         b1:c2:ec:bf:20:d9:ca:e6:5c:c6:3b:ef:e7:de:a0:d3:5a:33:
         78:d6:45:cc:19:2d:47:97:cb:f1:83:5c:52:ed:bb:26:5e:a9:
         02:c0:d8:e5:b1:9c:f1:52:0f:2c:eb:f6:01:d6:4e:91:8c:b0:
         14:05:c5:54:f5:b6:11:bd:1c:b8:01:fa:7d:45:85:d2:86:ff:
         d7:d6:65:58:8f:ce:89:af:35:52:93:ea:83:0a:c9:cd:e8:9d:
         c1:47:29:8c:03:0b:85:e8:89:e9:3d:52:42:39:50:7d:b2:c9:
         98:26:1d:c9:e3:19:64:d5:18:c1:fb:6c:9f:86:31:19:2f:6a:
         38:6e:93:06:aa:73:bd:f2:62:a0:1e:49:86:42:8f:1c:09:0c:
         c9:8d:2b:51:bc:9d:74:a8:71:7a:21:b5:d8:55:a9:f6:c3:e0:
         87:f1:f5:b6:d0:b4:b5:98:3d:23:72:2d:0b:f0:34:78:b6:71:
         0b:39:81:88:e0:db:27:83:0e:f6:81:bb:63:64:9f:2c:fa:b2:
         f3:8a:86:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43ZIiPj4up5yZNXMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzM2MzZiNzEtZmQwOS00ZWU5LTlmM2UtNTUyZTUzNTZh
NGZjMB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk
NzczNTc3N2EtZGZlNC00Y2E0LTk1ZmUtNjIyZWE3MGU0YmE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKEklu2/JtjbiWVmDHKARZd6SbngLn1nR03W
tbe8E30Doi2iFFV7pBYhvjAlxHdlxVYEA1wXmd/vwuo+3hlfTeALHdRy8F2+aQKE
OV+p03BSJfgbp5bSC2ad/Jmv93lXxxjaOwWhsGq2hzWv7AFw5KpaoBWs/rb45G9F
Yh2R5KRw8JefgpygRAFaCTe1y+XhXvcN4ONeiS8T9fTCHy9Z1dk/nz3kcos2ZH7F
4bJv8EEGzJBXfLvIcJZcyHApEXNYeNRYKE5y6heCt9NT+AUoai1g1SLtyOrRZgTX
06pcdqoIM1SUEMWcu9Etp7RdXOttPLOrfiPzQBYnc7WAhHjnmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN6OwnOLfnDThp4xggm3RrMKfHZ6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMzYz
NmI3MS1mZDA5LTRlZTktOWYzZS01NTJlNTM1NmE0ZmMvYWNhNWE1ODctOGM3My0z
NzA0LThmNjMtZGQ1OTJjNzUzMTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzM2MzZiNzEtZmQwOS00ZWU5LTlm
M2UtNTUyZTUzNTZhNGZjL2MzNjM2YjcxLWZkMDktNGVlOS05ZjNlLTU1MmU1MzU2
YTRmYy5jcmwwHwYDVR0jBBgwFoAUeW0JazRG4DATFKcMfmazw0snvNkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMzYzNmI3MS1mZDA5LTRlZTktOWYzZS01NTJl
NTM1NmE0ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzr/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABLkC1jexGmnnDO37lbBSWVIdoQCXpyL9VAwrymbZjmJdVbilw/cxPcK
kPGdKhfk1vVCA5MlirHC7L8g2crmXMY77+feoNNaM3jWRcwZLUeXy/GDXFLtuyZe
qQLA2OWxnPFSDyzr9gHWTpGMsBQFxVT1thG9HLgB+n1FhdKG/9fWZViPzomvNVKT
6oMKyc3oncFHKYwDC4Xoiek9UkI5UH2yyZgmHcnjGWTVGMH7bJ+GMRkvajhukwaq
c73yYqAeSYZCjxwJDMmNK1G8nXSocXohtdhVqfbD4Ifx9bbQtLWYPSNyLQvwNHi2
cQs5gYjg2yeDDvaBu2Nknyz6svOKhtM=
-----END CERTIFICATE-----
Generated at Sun Jul 12 23:52:51 2026 by rpki-client