Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/ab4c49e6-70a7-364a-859e-9e88bba251d9.roa
File:                     ab4c49e6-70a7-364a-859e-9e88bba251d9.roa (raw, json)
Hash identifier:          yUDOOnAI5M9O1OEKzpx28ygzT+vjfJFLmlTkZ5JOT34=
Subject key identifier:   FF:51:08:02:C2:F1:E6:5C:F7:8A:DC:99:93:E8:98:8E:39:9F:9D:4B
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F4328584DEDE0989FB25DF77678B17A80
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/ab4c49e6-70a7-364a-859e-9e88bba251d9.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     54518
IP address blocks:        209.143.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:98:9f:b2:5d:f7:76:78:b1:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=c7c44aa3-824b-42f1-9b8a-46e25343cf07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:41:59:c1:b7:66:fb:93:ce:63:cd:94:ee:4c:
                    63:7b:90:e1:f5:35:08:29:a2:20:12:f8:04:07:bc:
                    df:bb:66:18:a9:78:63:03:95:ac:0d:a1:16:ed:6a:
                    6b:bf:63:2c:3d:e7:b4:24:97:1e:06:18:e6:09:0b:
                    15:a8:b9:f4:3e:b6:cd:e2:f0:40:d4:37:ca:7e:cf:
                    0b:59:9e:ba:c3:bd:7c:ef:90:ec:e7:7e:15:36:64:
                    a8:99:0e:f9:67:5d:5d:c7:02:df:94:91:e5:a8:ca:
                    ff:78:68:80:41:34:ef:71:16:6e:a6:66:ca:49:e0:
                    21:78:5e:6e:c1:5f:de:9e:9f:a8:aa:9e:af:94:70:
                    bd:db:d7:9f:fa:2a:97:ed:57:04:f1:e8:05:3f:7c:
                    97:22:32:38:2e:09:ef:9d:c9:0f:9b:4d:30:a4:85:
                    8d:74:1f:ff:f4:c2:92:9e:02:87:29:57:74:e5:5f:
                    0d:1d:1b:21:5d:57:37:ac:2c:ac:7e:93:53:ab:1e:
                    e7:51:3a:7c:b6:48:9c:f1:67:e2:ec:11:d7:dd:3f:
                    d8:1c:a6:16:4f:13:58:d0:f7:5a:54:03:06:1e:bb:
                    c3:fe:6e:1f:71:52:00:a2:91:3d:b7:d6:0a:7f:5f:
                    d8:f4:ae:d9:da:48:b0:7d:56:7a:2b:28:b4:0a:40:
                    42:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:51:08:02:C2:F1:E6:5C:F7:8A:DC:99:93:E8:98:8E:39:9F:9D:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/ab4c49e6-70a7-364a-859e-9e88bba251d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.143.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:2a:10:a5:66:04:f6:5f:a5:b0:9f:70:9e:17:01:d8:37:ff:
         e6:19:7b:7f:9f:f3:ff:51:0e:ee:00:de:2f:36:de:1c:3b:7d:
         b5:35:98:9a:ae:c4:e7:cd:f8:e7:91:09:7c:c2:78:62:5d:4d:
         e7:77:46:04:c1:59:d7:09:a6:66:f3:7c:cd:a2:1e:63:6b:85:
         8a:4f:a1:55:9b:09:26:2e:46:87:77:6b:ef:bf:62:dc:5b:55:
         a7:c0:55:9d:fb:c4:bb:5d:53:ff:57:61:df:40:28:58:e3:11:
         f3:c2:f5:1a:cf:d0:87:6a:9c:5b:de:cf:31:78:ff:a4:01:10:
         5b:42:89:54:eb:62:48:8d:20:45:04:97:91:29:ad:cf:bd:3c:
         e2:42:6b:76:04:be:95:42:1b:60:8d:0c:51:9c:a9:7a:4e:87:
         83:b7:ac:a2:a0:58:d8:ff:20:02:16:2e:6c:f7:b8:cf:7a:24:
         8e:43:25:2c:01:2c:e5:0c:85:0a:77:43:3f:cb:40:5a:7a:9f:
         e1:97:c3:58:d6:29:f7:9a:5d:24:5c:d1:3d:1b:e0:7a:a0:ab:
         cb:d5:db:11:32:57:8a:d0:52:aa:62:42:f6:d0:dc:07:ce:a4:
         ec:98:67:6f:a7:6f:15:27:11:5a:26:58:99:81:eb:fe:5f:d2:
         d4:e8:ae:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3t4Jifsl33dnixeoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy
NTE2MB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk
YzdjNDRhYTMtODI0Yi00MmYxLTliOGEtNDZlMjUzNDNjZjA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkFZwbdm+5POY82U7kxje5Dh9TUIKaIgEvgE
B7zfu2YYqXhjA5WsDaEW7Wprv2MsPee0JJceBhjmCQsVqLn0PrbN4vBA1DfKfs8L
WZ66w71875Ds534VNmSomQ75Z11dxwLflJHlqMr/eGiAQTTvcRZupmbKSeAheF5u
wV/enp+oqp6vlHC929ef+iqX7VcE8egFP3yXIjI4LgnvnckPm00wpIWNdB//9MKS
ngKHKVd05V8NHRshXVc3rCysfpNTqx7nUTp8tkic8Wfi7BHX3T/YHKYWTxNY0Pda
VAMGHrvD/m4fcVIAopE9t9YKf1/Y9K7Z2kiwfVZ6Kyi0CkBC7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP9RCALC8eZc94rcmZPomI45n51LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk
M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvYWI0YzQ5ZTYtNzBhNy0z
NjRhLTg1OWUtOWU4OGJiYTI1MWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl
MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1
MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1
MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y9KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADQqEKVmBPZfpbCfcJ4XAdg3/+YZe3+f8/9RDu4A3i823hw7fbU1mJqu
xOfN+OeRCXzCeGJdTed3RgTBWdcJpmbzfM2iHmNrhYpPoVWbCSYuRod3a++/Ytxb
VafAVZ37xLtdU/9XYd9AKFjjEfPC9RrP0IdqnFvezzF4/6QBEFtCiVTrYkiNIEUE
l5Eprc+9POJCa3YEvpVCG2CNDFGcqXpOh4O3rKKgWNj/IAIWLmz3uM96JI5DJSwB
LOUMhQp3Qz/LQFp6n+GXw1jWKfeaXSRc0T0b4Hqgq8vV2xEyV4rQUqpiQvbQ3AfO
pOyYZ2+nbxUnEVomWJmB6/5f0tTortE=
-----END CERTIFICATE-----
Generated at Fri Jun 12 12:43:14 2026 by rpki-client