Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/af380cd9-c9a1-3809-8ede-6999c45a5c50.roa
File:                     af380cd9-c9a1-3809-8ede-6999c45a5c50.roa (raw, json)
Hash identifier:          Igvn7x0iVP1FK6O6pWodveEw9zC4lQTF2L/k+6T9SmQ=
Subject key identifier:   AE:F2:76:DB:CD:D3:D1:A0:B1:A0:5B:EE:87:4B:0D:96:C2:DB:DE:AA
Certificate issuer:       /CN=5f6f7623-0788-410a-b9dd-8040879aa924
Certificate serial:       010D0C9F4328584ED001DB28F3589065853C09C0
Authority key identifier: 6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/af380cd9-c9a1-3809-8ede-6999c45a5c50.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     19197
IP address blocks:        69.41.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:db:28:f3:58:90:65:85:3c:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6f7623-0788-410a-b9dd-8040879aa924
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=d08116db-448a-4604-8749-9bec1d6d2f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:40:57:b6:62:31:bd:17:28:4b:42:e5:24:49:
                    93:62:9b:4c:0e:db:2f:71:09:4a:65:fe:57:4a:63:
                    68:00:51:6a:48:38:61:c5:8d:bc:3b:79:e6:8b:72:
                    1d:93:42:b8:df:3f:82:f0:4b:42:09:36:2b:f5:4c:
                    b5:4c:be:9f:11:1c:7d:e6:9d:53:d5:99:ab:a6:89:
                    ce:43:44:bf:66:09:fb:1c:bc:1b:87:a8:fa:5b:89:
                    c4:a0:73:d0:7e:f9:fb:3f:8a:4f:6b:69:66:4f:0b:
                    f2:0a:15:a2:68:df:4e:3c:4d:62:94:e9:17:5d:ae:
                    d8:0f:68:20:df:01:09:8c:aa:95:bf:69:3c:2f:44:
                    a5:64:3e:d0:21:86:19:1a:c7:ce:e3:79:d7:10:81:
                    2f:1c:7b:a9:e2:74:29:c0:6d:0d:e9:53:83:14:93:
                    94:19:48:2d:4f:ed:4c:57:3a:b4:90:d7:da:ff:99:
                    42:88:33:bd:e5:c3:2a:81:fe:44:95:8c:7a:ea:bf:
                    8e:20:fb:0f:d6:1f:f2:3d:20:38:b0:cd:1d:2d:0d:
                    68:6c:ed:a8:c2:d2:38:a8:16:fe:7a:da:fd:a2:aa:
                    20:f8:65:9e:73:b2:21:49:45:3b:4a:54:97:a0:c2:
                    d8:b2:0a:72:4f:bc:4d:5d:bc:a3:9d:ea:00:5f:bb:
                    31:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F2:76:DB:CD:D3:D1:A0:B1:A0:5B:EE:87:4B:0D:96:C2:DB:DE:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/af380cd9-c9a1-3809-8ede-6999c45a5c50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e3:df:26:37:5f:8f:9e:5d:73:76:34:0e:5a:5f:99:19:57:a1:
         b7:e7:16:ee:30:86:a1:12:21:8b:9d:d6:8c:a7:62:f0:12:4c:
         69:16:da:71:42:7c:27:57:a2:9c:b4:2c:b6:75:16:2a:4b:df:
         c9:2f:fc:89:55:5b:e9:27:29:ca:6b:22:2b:18:82:e1:b7:f2:
         b7:3a:1d:2b:06:6d:ec:65:60:c6:29:e8:58:f6:3d:32:c2:51:
         e4:0a:96:99:3a:e2:c9:d6:f6:ac:bb:b6:6e:c8:35:08:34:70:
         4d:4b:f5:61:da:f3:07:df:1b:1f:6b:bc:d3:e2:0a:44:4a:d9:
         e8:19:f9:03:d6:e9:fd:ef:13:fa:76:6d:de:18:4e:0f:04:2a:
         52:4d:eb:6e:4c:4d:2e:9f:ea:1a:9f:ce:0e:23:38:de:0e:6f:
         8c:02:5f:08:94:4e:14:46:05:26:ca:e0:9d:35:ad:60:9d:19:
         f9:cf:df:3a:e5:ac:bf:32:57:75:96:43:15:00:61:01:b5:9c:
         fd:88:ec:d5:ef:62:d8:b7:fe:3a:5b:4c:d4:c3:a3:8c:d3:a8:
         ae:f9:6a:bf:d0:a4:01:87:55:e3:41:d7:cb:94:07:3a:31:70:
         08:7c:8a:e0:d4:60:6c:35:0c:8f:32:be:5c:21:ff:2f:d3:f5:
         ce:cc:29:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAdso81iQZYU8CcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWY2Zjc2MjMtMDc4OC00MTBhLWI5ZGQtODA0MDg3OWFh
OTI0MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk
ZDA4MTE2ZGItNDQ4YS00NjA0LTg3NDktOWJlYzFkNmQyZjk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kBXtmIxvRcoS0LlJEmTYptMDtsvcQlKZf5X
SmNoAFFqSDhhxY28O3nmi3Idk0K43z+C8EtCCTYr9Uy1TL6fERx95p1T1ZmrponO
Q0S/Zgn7HLwbh6j6W4nEoHPQfvn7P4pPa2lmTwvyChWiaN9OPE1ilOkXXa7YD2gg
3wEJjKqVv2k8L0SlZD7QIYYZGsfO43nXEIEvHHup4nQpwG0N6VODFJOUGUgtT+1M
Vzq0kNfa/5lCiDO95cMqgf5ElYx66r+OIPsP1h/yPSA4sM0dLQ1obO2owtI4qBb+
etr9oqog+GWec7IhSUU7SlSXoMLYsgpyT7xNXbyjneoAX7sxPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK7ydtvN09GgsaBb7odLDZbC296qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZjZm
NzYyMy0wNzg4LTQxMGEtYjlkZC04MDQwODc5YWE5MjQvYWYzODBjZDktYzlhMS0z
ODA5LThlZGUtNjk5OWM0NWE1YzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWY2Zjc2MjMtMDc4OC00MTBhLWI5
ZGQtODA0MDg3OWFhOTI0LzVmNmY3NjIzLTA3ODgtNDEwYS1iOWRkLTgwNDA4Nzlh
YTkyNC5jcmwwHwYDVR0jBBgwFoAUbPE4qdyRiteX1uAs/Tbql2Czz34wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZjZmNzYyMy0wNzg4LTQxMGEtYjlkZC04MDQw
ODc5YWE5MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSknMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAOPfJjdfj55dc3Y0DlpfmRlXobfnFu4whqESIYud1oynYvASTGkW2nFC
fCdXopy0LLZ1FipL38kv/IlVW+knKcprIisYguG38rc6HSsGbexlYMYp6Fj2PTLC
UeQKlpk64snW9qy7tm7INQg0cE1L9WHa8wffGx9rvNPiCkRK2egZ+QPW6f3vE/p2
bd4YTg8EKlJN625MTS6f6hqfzg4jON4Ob4wCXwiUThRGBSbK4J01rWCdGfnP3zrl
rL8yV3WWQxUAYQG1nP2I7NXvYti3/jpbTNTDo4zTqK75ar/QpAGHVeNB18uUBzox
cAh8iuDUYGw1DI8yvlwh/y/T9c7MKZA=
-----END CERTIFICATE-----
Generated at Thu Aug 13 13:07:56 2026 by rpki-client