Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/087ef766-cc4c-38c4-b7c8-d3427883cbec.roa
File:                     087ef766-cc4c-38c4-b7c8-d3427883cbec.roa (raw, json)
Hash identifier:          +TEdjvFbL0Q4W4l3VTZgrHOWsGqpJiNIz23ty0ZNwPE=
Subject key identifier:   16:88:18:CA:E6:96:A0:F3:2A:4B:5D:EF:83:E4:67:D6:F7:92:BC:E6
Certificate issuer:       /CN=4e568c12-34e8-4ad5-b930-2a8c5573a764
Certificate serial:       010D0C9F4328584EA786E89F959D13E59DD32D00
Authority key identifier: 11:5C:19:8F:79:2E:76:42:C0:25:F8:F9:00:F9:37:59:BD:39:33:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/087ef766-cc4c-38c4-b7c8-d3427883cbec.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     53347
IP address blocks:        96.31.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/4e568c12-34e8-4ad5-b930-2a8c5573a764.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/4e568c12-34e8-4ad5-b930-2a8c5573a764.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:e8:9f:95:9d:13:e5:9d:d3:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e568c12-34e8-4ad5-b930-2a8c5573a764
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4072c893-64be-4ec2-9b83-ea85c369c761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:80:52:4e:52:40:2a:5c:66:50:4d:1f:97:69:
                    42:14:5d:0a:56:9d:62:3b:e6:41:40:5e:b3:2c:51:
                    f2:b1:5d:e4:2c:46:f4:49:45:90:07:9c:02:1e:23:
                    3f:69:ea:f1:f0:d8:2a:0f:ba:74:04:cf:c2:44:58:
                    3c:1c:f6:f1:a7:cb:15:66:40:30:9d:7a:ef:ac:25:
                    08:db:aa:e5:a2:dc:80:7f:1f:26:4a:6e:41:b1:27:
                    ae:91:e3:2e:ce:ea:ce:e5:d5:45:3c:6c:e7:fe:e2:
                    a7:65:3d:2e:38:5b:10:95:22:ab:ba:5d:b0:1c:d9:
                    ac:14:6b:f4:8f:21:cd:0e:87:94:60:72:7c:96:b7:
                    54:f2:72:d8:38:e5:5b:6c:21:83:d9:ac:ef:8b:9c:
                    34:38:96:d7:54:ca:6f:4f:84:90:01:97:02:26:98:
                    64:6f:b9:e7:2a:ea:27:29:ae:5c:a5:b9:a0:93:49:
                    ea:ef:5d:8f:97:dd:d3:80:47:df:38:5c:e7:39:3f:
                    5f:2a:0d:ad:dc:88:eb:59:02:25:30:f7:e7:d7:5d:
                    e5:21:a7:7d:34:58:c3:73:61:d9:a5:a4:75:3d:ca:
                    45:b5:4d:cf:5f:d0:a6:33:24:e5:95:bd:b1:4a:b4:
                    15:19:6c:e3:a7:8a:d3:94:c6:9d:30:14:33:56:38:
                    1a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:88:18:CA:E6:96:A0:F3:2A:4B:5D:EF:83:E4:67:D6:F7:92:BC:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/087ef766-cc4c-38c4-b7c8-d3427883cbec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764/4e568c12-34e8-4ad5-b930-2a8c5573a764.crl

            X509v3 Authority Key Identifier:
                keyid:11:5C:19:8F:79:2E:76:42:C0:25:F8:F9:00:F9:37:59:BD:39:33:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4e568c12-34e8-4ad5-b930-2a8c5573a764.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.31.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:47:18:bd:d2:db:08:48:de:61:0d:4d:23:f2:ba:42:63:9f:
         ad:d3:da:3d:55:92:10:0b:19:e8:40:1b:11:fd:8e:d8:b8:4f:
         77:48:f0:6b:ef:b7:33:e9:0e:f9:fe:dc:5e:50:53:50:4c:75:
         b8:d3:0f:6f:8b:b0:20:98:0e:66:ee:5e:38:7a:05:03:53:8c:
         da:5d:ab:c3:d0:77:9c:99:4f:2f:c7:dc:d0:d7:bc:fd:b8:c5:
         8d:fc:81:ab:2c:a6:c2:88:c0:86:5e:f1:ca:f4:4b:3c:c5:92:
         5b:bf:1c:75:c7:e7:f3:1d:4d:4a:f1:2e:d2:1d:a2:7d:2c:b4:
         0d:ce:c4:46:86:de:fd:b1:97:b2:23:ca:94:8f:8c:40:15:52:
         cb:ab:c1:5a:52:2c:19:ce:fb:96:70:05:c9:8d:91:1e:f7:2c:
         f9:2f:f2:a6:81:81:68:f4:ce:fd:e9:15:89:b1:8d:81:e9:86:
         07:64:bf:d0:1c:01:fc:64:aa:f8:41:b7:22:cf:f3:d2:d8:89:
         ef:90:34:cb:00:43:a1:75:d2:fb:6a:c2:d9:fe:04:c1:aa:72:
         8a:cd:d4:ed:49:e2:70:11:08:29:1b:0d:79:72:b6:dc:3f:a2:
         be:c9:a9:72:c4:bb:06:7a:0b:a2:8e:76:26:0a:69:62:39:0d:
         8a:9f:e3:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhuiflZ0T5Z3TLQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU1NjhjMTItMzRlOC00YWQ1LWI5MzAtMmE4YzU1NzNh
NzY0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NDA3MmM4OTMtNjRiZS00ZWMyLTliODMtZWE4NWMzNjljNzYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIBSTlJAKlxmUE0fl2lCFF0KVp1iO+ZBQF6z
LFHysV3kLEb0SUWQB5wCHiM/aerx8NgqD7p0BM/CRFg8HPbxp8sVZkAwnXrvrCUI
26rlotyAfx8mSm5BsSeukeMuzurO5dVFPGzn/uKnZT0uOFsQlSKrul2wHNmsFGv0
jyHNDoeUYHJ8lrdU8nLYOOVbbCGD2azvi5w0OJbXVMpvT4SQAZcCJphkb7nnKuon
Ka5cpbmgk0nq712Pl93TgEffOFznOT9fKg2t3IjrWQIlMPfn113lIad9NFjDc2HZ
paR1PcpFtU3PX9CmMyTllb2xSrQVGWzjp4rTlMadMBQzVjgapwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBaIGMrmlqDzKktd74PkZ9b3krzmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZTU2
OGMxMi0zNGU4LTRhZDUtYjkzMC0yYThjNTU3M2E3NjQvMDg3ZWY3NjYtY2M0Yy0z
OGM0LWI3YzgtZDM0Mjc4ODNjYmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGU1NjhjMTItMzRlOC00YWQ1LWI5
MzAtMmE4YzU1NzNhNzY0LzRlNTY4YzEyLTM0ZTgtNGFkNS1iOTMwLTJhOGM1NTcz
YTc2NC5jcmwwHwYDVR0jBBgwFoAUEVwZj3kudkLAJfj5APk3Wb05M9cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80ZTU2OGMxMi0zNGU4LTRhZDUtYjkzMC0yYThj
NTU3M2E3NjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYB8AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFVHGL3S2whI3mENTSPyukJjn63T2j1VkhALGehAGxH9jti4T3dI8Gvv
tzPpDvn+3F5QU1BMdbjTD2+LsCCYDmbuXjh6BQNTjNpdq8PQd5yZTy/H3NDXvP24
xY38gasspsKIwIZe8cr0SzzFklu/HHXH5/MdTUrxLtIdon0stA3OxEaG3v2xl7Ij
ypSPjEAVUsurwVpSLBnO+5ZwBcmNkR73LPkv8qaBgWj0zv3pFYmxjYHphgdkv9Ac
AfxkqvhBtyLP89LYie+QNMsAQ6F10vtqwtn+BMGqcorN1O1J4nARCCkbDXlyttw/
or7JqXLEuwZ6C6KOdiYKaWI5DYqf43Q=
-----END CERTIFICATE-----
Generated at Thu Aug 13 13:05:53 2026 by rpki-client