Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/f19ef184-af39-314d-a565-27db3982b4da.roa
File:                     f19ef184-af39-314d-a565-27db3982b4da.roa (raw, json)
Hash identifier:          Cd86XPH7Lt2eVjWK0tIhAf5AM7i1mQI3aCmJJFrpSGg=
Subject key identifier:   96:F1:E2:9E:9B:C7:33:30:B8:27:9E:B1:48:E3:DC:AC:73:36:95:F2
Certificate issuer:       /CN=260cabab-b89d-4556-b9b1-e5a87b9523b9
Certificate serial:       010D0C9F4328584DD4C0720E85E4D8EEF0F42B00
Authority key identifier: 80:87:C3:C4:10:0E:F3:6D:64:9B:3F:AC:82:67:48:43:74:E5:EE:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/f19ef184-af39-314d-a565-27db3982b4da.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     25710
IP address blocks:        23.249.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/260cabab-b89d-4556-b9b1-e5a87b9523b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/260cabab-b89d-4556-b9b1-e5a87b9523b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:72:0e:85:e4:d8:ee:f0:f4:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260cabab-b89d-4556-b9b1-e5a87b9523b9
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=19f6f313-3d48-46d9-bf52-e85233d3bfe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d1:51:ee:f7:ef:fc:2d:77:66:1c:5c:e5:2b:
                    d5:f2:61:42:02:03:45:ac:14:b4:af:87:b7:34:38:
                    36:96:08:b4:eb:07:d4:a7:82:e4:12:55:92:af:58:
                    d7:c9:10:c9:ea:41:47:e8:26:a7:81:ac:97:97:d8:
                    c7:2b:98:c1:4b:22:04:de:dc:01:bc:d0:79:5b:0f:
                    4f:30:80:2c:8d:dc:ab:38:4d:1c:ab:7d:1e:ad:37:
                    a3:29:f1:78:22:13:b5:3c:e7:20:2f:13:cf:00:fd:
                    0c:69:98:bb:95:86:12:15:3c:e1:bc:b0:a7:20:54:
                    62:65:c7:1f:19:06:60:8f:cf:c6:0b:b5:c6:bc:70:
                    da:7e:96:2f:27:3f:ed:d4:f6:b1:91:8c:2b:3c:18:
                    79:45:51:61:64:bd:d0:23:e0:29:3a:1f:14:77:98:
                    a6:7b:b8:83:4e:c0:15:2a:37:84:db:75:52:be:5c:
                    8f:46:8f:f4:8d:cc:f0:0e:7b:1d:5c:31:bd:e4:b0:
                    ad:36:e4:64:cb:97:72:8f:e8:9a:dd:04:99:74:f1:
                    f2:d3:37:9e:cf:42:42:9f:fc:70:5b:fd:e6:65:ec:
                    a6:9b:c9:48:7f:c6:3d:01:8f:4d:f4:f8:ea:71:86:
                    71:85:af:dd:dd:b8:41:c2:1d:30:3a:1d:a4:c8:95:
                    ac:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F1:E2:9E:9B:C7:33:30:B8:27:9E:B1:48:E3:DC:AC:73:36:95:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/f19ef184-af39-314d-a565-27db3982b4da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9/260cabab-b89d-4556-b9b1-e5a87b9523b9.crl

            X509v3 Authority Key Identifier:
                keyid:80:87:C3:C4:10:0E:F3:6D:64:9B:3F:AC:82:67:48:43:74:E5:EE:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/260cabab-b89d-4556-b9b1-e5a87b9523b9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:32:61:d7:b0:44:1d:81:f0:7f:a8:8e:c6:48:03:ef:5f:dd:
         32:a7:01:85:e9:42:a1:d9:67:82:f6:65:5a:5c:a9:85:98:e2:
         5d:66:d4:64:56:e3:4a:de:6a:d9:84:78:c1:69:0b:23:bf:91:
         19:74:ee:27:3f:5a:d5:55:83:29:0c:9b:d3:50:2d:cd:79:77:
         1c:0b:ba:aa:06:19:22:25:27:18:5f:70:b1:8e:a2:80:f3:8b:
         89:95:f8:d0:d2:3b:70:98:e6:cc:d8:2e:98:40:8d:b3:25:f2:
         07:5f:df:53:8a:3c:66:6a:12:15:4e:d8:13:72:13:f4:e8:6e:
         68:50:6c:ec:05:2c:aa:14:0a:ec:17:1c:97:43:bc:94:d4:f3:
         29:0b:39:3d:f7:9c:d9:2f:f4:68:05:ff:8f:24:28:aa:85:d3:
         99:ec:2c:b8:e4:cb:d8:75:d8:2b:2c:61:07:be:84:c8:59:0c:
         c9:08:31:0c:a8:36:0f:ae:82:0a:09:7a:79:fb:02:4b:0e:ad:
         14:f3:e9:db:47:c8:89:c0:dc:cd:dc:a4:71:20:e2:1e:5e:cf:
         1c:54:c7:98:13:2a:e5:3a:c5:73:87:3a:f1:51:a4:84:82:c6:
         60:92:24:ca:68:7a:aa:09:06:55:1d:55:97:30:fb:37:bd:2e:
         64:ab:26:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3UwHIOheTY7vD0KwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjYwY2FiYWItYjg5ZC00NTU2LWI5YjEtZTVhODdiOTUy
M2I5MB4XDTI2MDUxNDEzMDAzMVoXDTI2MDgxMjEzMDAzMVowLzEtMCsGA1UEAxMk
MTlmNmYzMTMtM2Q0OC00NmQ5LWJmNTItZTg1MjMzZDNiZmUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNFR7vfv/C13Zhxc5SvV8mFCAgNFrBS0r4e3
NDg2lgi06wfUp4LkElWSr1jXyRDJ6kFH6CangayXl9jHK5jBSyIE3twBvNB5Ww9P
MIAsjdyrOE0cq30erTejKfF4IhO1POcgLxPPAP0MaZi7lYYSFTzhvLCnIFRiZccf
GQZgj8/GC7XGvHDafpYvJz/t1PaxkYwrPBh5RVFhZL3QI+ApOh8Ud5ime7iDTsAV
KjeE23VSvlyPRo/0jczwDnsdXDG95LCtNuRky5dyj+ia3QSZdPHy0zeez0JCn/xw
W/3mZeymm8lIf8Y9AY9N9PjqcYZxha/d3bhBwh0wOh2kyJWstQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJbx4p6bxzMwuCeesUjj3KxzNpXyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yNjBj
YWJhYi1iODlkLTQ1NTYtYjliMS1lNWE4N2I5NTIzYjkvZjE5ZWYxODQtYWYzOS0z
MTRkLWE1NjUtMjdkYjM5ODJiNGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjYwY2FiYWItYjg5ZC00NTU2LWI5
YjEtZTVhODdiOTUyM2I5LzI2MGNhYmFiLWI4OWQtNDU1Ni1iOWIxLWU1YTg3Yjk1
MjNiOS5jcmwwHwYDVR0jBBgwFoAUgIfDxBAO821kmz+sgmdIQ3Tl7u4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yNjBjYWJhYi1iODlkLTQ1NTYtYjliMS1lNWE4
N2I5NTIzYjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/kgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAYyYdewRB2B8H+ojsZIA+9f3TKnAYXpQqHZZ4L2ZVpcqYWY4l1m1GRW
40reatmEeMFpCyO/kRl07ic/WtVVgykMm9NQLc15dxwLuqoGGSIlJxhfcLGOooDz
i4mV+NDSO3CY5szYLphAjbMl8gdf31OKPGZqEhVO2BNyE/TobmhQbOwFLKoUCuwX
HJdDvJTU8ykLOT33nNkv9GgF/48kKKqF05nsLLjky9h12CssYQe+hMhZDMkIMQyo
Ng+uggoJenn7AksOrRTz6dtHyInA3M3cpHEg4h5ezxxUx5gTKuU6xXOHOvFRpISC
xmCSJMpoeqoJBlUdVZcw+ze9LmSrJgk=
-----END CERTIFICATE-----
Generated at Fri May 22 18:30:31 2026 by rpki-client