Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/124454ca-b830-36b5-a709-5f3fb0c7f5dc.roa
File:                     124454ca-b830-36b5-a709-5f3fb0c7f5dc.roa (raw, json)
Hash identifier:          EoN6YVcxI6n7rpDGe0Y2bKT3aV85T1AShNbBRJKzRsM=
Subject key identifier:   85:DF:04:72:A6:C0:97:4C:F4:02:A4:5A:49:4E:9F:F8:67:EF:74:4B
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584E78FF7B76A9B72E5B42E4A580
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/124454ca-b830-36b5-a709-5f3fb0c7f5dc.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     13576
IP address blocks:        216.249.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:7b:76:a9:b7:2e:5b:42:e4:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=27a44c6e-bc8f-44da-a590-c9313ee7c61d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:33:ac:36:73:c6:d4:90:01:0f:fa:dc:10:ce:
                    da:fb:e7:7d:d2:b4:c7:93:ae:a0:f8:76:61:13:0c:
                    7a:bc:aa:a9:a0:3a:5b:96:0e:13:eb:41:ac:58:d8:
                    b6:9d:21:ca:3a:49:e4:1e:16:cc:8a:7b:d3:02:7b:
                    c0:d4:9b:f7:b1:f5:6b:89:07:bd:4e:27:79:36:7b:
                    42:2f:98:1c:fa:5e:ec:f2:e8:51:50:c8:f8:08:dc:
                    8b:90:2c:58:28:ad:99:fb:a1:f8:c8:69:5f:4d:6c:
                    58:dd:10:fc:5b:93:60:02:3b:59:c2:5d:e7:3d:cb:
                    90:17:ac:e9:9a:46:e7:21:fb:6a:42:29:d7:bc:7d:
                    98:18:c4:5a:57:f3:b2:40:c7:3f:9e:86:7d:60:94:
                    88:fa:21:f3:a9:3a:34:0e:45:c3:f0:8f:85:bc:2c:
                    87:3f:05:5d:e6:83:34:cd:78:ba:33:ca:80:5d:a3:
                    4c:17:88:c5:23:2a:7f:ac:aa:88:0d:48:91:38:f4:
                    a1:0b:18:f3:72:d6:67:9f:05:95:13:6d:3e:e4:ae:
                    02:8f:0f:9d:4a:87:05:95:b1:5c:b1:92:d3:b8:11:
                    77:54:5f:83:b4:8d:89:85:0b:89:fa:da:d3:07:ba:
                    92:9d:cf:65:07:4e:b8:a6:73:ae:a1:14:af:bc:bf:
                    4d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DF:04:72:A6:C0:97:4C:F4:02:A4:5A:49:4E:9F:F8:67:EF:74:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/124454ca-b830-36b5-a709-5f3fb0c7f5dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.249.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:51:be:c9:34:a4:e0:97:db:8d:2e:1f:dc:8c:ee:f8:c0:a3:
         4c:6b:3e:ba:b3:cf:c6:79:52:2e:da:2b:7f:a7:5a:d7:fa:5d:
         e2:0f:58:72:c1:c4:69:54:db:39:5f:11:73:f8:46:8f:4b:45:
         34:d4:40:f7:0a:86:68:28:79:d2:bf:f5:c0:69:30:7a:b5:26:
         c4:cb:02:cf:c4:66:e2:e3:e8:71:03:f5:1b:79:a7:4a:ac:4c:
         cd:67:3a:3b:91:31:0c:b3:37:2a:b0:49:d9:59:bd:09:73:e0:
         ea:1d:37:9a:af:76:38:69:6c:29:5a:37:ee:ca:e9:f8:75:7e:
         81:1a:88:56:4c:d7:00:d3:33:f0:d2:a8:38:e0:f6:f7:9c:d4:
         ca:45:0b:2d:ce:63:7a:2b:fd:c3:77:23:cb:ce:b5:e2:e7:62:
         19:3c:cc:02:d7:ba:41:d8:57:fb:0c:00:b2:d3:85:05:d1:9f:
         02:fa:eb:f7:6e:78:9b:7e:77:ac:2f:d6:89:3c:35:b8:d5:25:
         9b:f5:d1:a9:4e:a8:f2:b6:15:8e:d6:4b:8e:44:f0:cd:87:db:
         1e:f0:bd:03:91:bd:93:1f:69:67:39:e1:f9:ad:34:e8:15:35:
         1c:14:58:7b:00:77:2f:98:2a:e4:8b:3d:7c:e8:ff:01:7d:d5:
         73:4a:0d:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/3t2qbcuW0LkpYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4
NWVmMB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk
MjdhNDRjNmUtYmM4Zi00NGRhLWE1OTAtYzkzMTNlZTdjNjFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozOsNnPG1JABD/rcEM7a++d90rTHk66g+HZh
Ewx6vKqpoDpblg4T60GsWNi2nSHKOknkHhbMinvTAnvA1Jv3sfVriQe9Tid5NntC
L5gc+l7s8uhRUMj4CNyLkCxYKK2Z+6H4yGlfTWxY3RD8W5NgAjtZwl3nPcuQF6zp
mkbnIftqQinXvH2YGMRaV/OyQMc/noZ9YJSI+iHzqTo0DkXD8I+FvCyHPwVd5oM0
zXi6M8qAXaNMF4jFIyp/rKqIDUiROPShCxjzctZnnwWVE20+5K4Cjw+dSocFlbFc
sZLTuBF3VF+DtI2JhQuJ+trTB7qSnc9lB064pnOuoRSvvL9NWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIXfBHKmwJdM9AKkWklOn/hn73RLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm
YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMTI0NDU0Y2EtYjgzMC0z
NmI1LWE3MDktNWYzZmIwYzdmNWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2
ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm
ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh
ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PnwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALdRvsk0pOCX240uH9yM7vjAo0xrPrqzz8Z5Ui7aK3+nWtf6XeIPWHLB
xGlU2zlfEXP4Ro9LRTTUQPcKhmgoedK/9cBpMHq1JsTLAs/EZuLj6HED9Rt5p0qs
TM1nOjuRMQyzNyqwSdlZvQlz4OodN5qvdjhpbClaN+7K6fh1foEaiFZM1wDTM/DS
qDjg9vec1MpFCy3OY3or/cN3I8vOteLnYhk8zALXukHYV/sMALLThQXRnwL66/du
eJt+d6wv1ok8NbjVJZv10alOqPK2FY7WS45E8M2H2x7wvQORvZMfaWc54fmtNOgV
NRwUWHsAdy+YKuSLPXzo/wF91XNKDcw=
-----END CERTIFICATE-----
Generated at Wed Jul 22 01:14:20 2026 by rpki-client