Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c12e90c-a7c5-3ef8-bedc-5af79f4ac6d4.roa
File:                     2c12e90c-a7c5-3ef8-bedc-5af79f4ac6d4.roa (raw, json)
Hash identifier:          DTZGHK9LEcxzfDxWs6dWI90C2wZtV1buVVzZi3mNlaM=
Subject key identifier:   9C:0C:4F:55:C0:01:22:BD:CE:7D:CB:32:6F:11:A7:D4:14:1D:19:9E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E4588E92FD1ACBF0EEF4CA500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c12e90c-a7c5-3ef8-bedc-5af79f4ac6d4.roa
Signing time:             Tue 23 Jun 2026 22:35:09 +0000
ROA not before:           Tue 23 Jun 2026 22:35:09 +0000
ROA not after:            Mon 21 Sep 2026 22:35:09 +0000
asID:                     5650
IP address blocks:        47.143.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:88:e9:2f:d1:ac:bf:0e:ef:4c:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 23 22:35:09 2026 GMT
            Not After : Sep 21 22:35:09 2026 GMT
        Subject: CN=f4d63c70-f8bc-4150-995d-c283ba55d264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:aa:2a:5d:9d:10:cd:58:4d:0c:24:7e:14:19:
                    a5:72:d5:e3:ca:70:b3:45:d5:d5:04:6d:46:76:fc:
                    19:85:b8:96:87:0d:f3:5c:0b:78:de:20:5d:b7:c4:
                    d3:7c:cb:83:24:c0:6b:e6:e2:32:ed:c5:52:fa:78:
                    24:d4:fd:57:df:8c:72:15:1f:cf:83:b9:87:3f:a2:
                    8b:03:1a:31:bb:62:56:68:43:06:38:2a:3f:0c:c0:
                    0d:b8:a7:0f:fb:44:64:36:48:54:bc:ed:d6:84:25:
                    10:eb:f6:73:79:d8:1e:d7:03:d0:b4:46:69:88:7d:
                    01:09:2b:76:9d:4f:3d:f5:64:3a:c3:84:a1:50:01:
                    ca:7e:8c:9c:45:f0:ee:3d:50:2f:1d:16:b8:c5:6f:
                    9d:91:d1:72:e7:2b:08:be:2f:e4:36:57:bd:80:42:
                    44:ad:42:02:b2:9d:03:90:c3:33:67:ab:5c:be:35:
                    0f:02:0e:af:58:79:61:28:46:ed:fe:0a:0b:cf:51:
                    de:72:32:da:9b:a5:07:e1:9c:17:c7:78:bd:ae:fd:
                    61:ea:ca:d9:91:5f:51:43:01:6b:7f:0d:8b:6b:78:
                    95:3d:23:33:ac:84:39:3f:bb:69:a5:bd:dd:99:ec:
                    1d:6d:0a:79:0b:ab:dc:11:d5:60:f2:9b:58:02:3c:
                    4c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0C:4F:55:C0:01:22:BD:CE:7D:CB:32:6F:11:A7:D4:14:1D:19:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2c12e90c-a7c5-3ef8-bedc-5af79f4ac6d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.143.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:65:47:bd:d1:f0:31:e5:36:4b:cb:fe:95:d4:54:1e:00:57:
         84:0d:93:83:df:23:0a:2d:76:53:5c:0f:f1:6e:8c:15:e9:82:
         3d:67:6b:89:c5:af:3b:fd:f9:1c:fd:cf:a0:df:cc:61:e0:f4:
         39:5e:60:45:5e:ff:c6:39:ef:7b:90:f5:e2:59:2d:24:27:ab:
         98:c5:49:52:60:bc:ff:c9:bb:6f:55:b4:a0:5c:b1:3f:fb:f2:
         ac:c4:d8:96:cc:d8:4e:1b:55:0e:ff:a3:23:9f:1a:9d:8d:32:
         31:76:a8:a0:d1:67:10:8e:a7:bb:63:d8:e1:df:b9:53:33:93:
         4f:21:58:5d:f4:bd:7d:09:7d:95:54:56:ea:1a:48:d2:1f:1e:
         90:51:19:29:37:a1:d1:53:04:ec:36:24:9e:c9:9c:2e:52:0f:
         86:da:a0:e0:a2:7e:0e:94:f7:40:db:b4:db:e4:df:ab:2b:b9:
         c3:c2:a2:c2:43:ed:f6:0a:d2:3e:5d:e3:b3:16:dd:a5:e3:b8:
         68:29:72:fd:7e:6e:d3:f9:ff:73:29:7b:ea:04:8e:04:48:7e:
         36:7c:b2:50:54:cc:53:4a:69:c3:ea:07:2e:2f:fe:c3:be:f3:
         ce:7f:96:3e:1a:4d:e1:94:d5:86:df:80:73:08:e3:47:1f:62:
         d5:f5:6f:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FiOkv0ay/Du9MpQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDYyMzIyMzUwOVoXDTI2MDkyMTIyMzUwOVowLzEtMCsGA1UEAxMk
ZjRkNjNjNzAtZjhiYy00MTUwLTk5NWQtYzI4M2JhNTVkMjY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqoqXZ0QzVhNDCR+FBmlctXjynCzRdXVBG1G
dvwZhbiWhw3zXAt43iBdt8TTfMuDJMBr5uIy7cVS+ngk1P1X34xyFR/Pg7mHP6KL
Axoxu2JWaEMGOCo/DMANuKcP+0RkNkhUvO3WhCUQ6/Zzedge1wPQtEZpiH0BCSt2
nU899WQ6w4ShUAHKfoycRfDuPVAvHRa4xW+dkdFy5ysIvi/kNle9gEJErUICsp0D
kMMzZ6tcvjUPAg6vWHlhKEbt/goLz1HecjLam6UH4ZwXx3i9rv1h6srZkV9RQwFr
fw2La3iVPSMzrIQ5P7tppb3dmewdbQp5C6vcEdVg8ptYAjxMUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJwMT1XAASK9zn3LMm8Rp9QUHRmeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmMxMmU5MGMtYTdjNS0z
ZWY4LWJlZGMtNWFmNzlmNGFjNmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDL48IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJdlR73R8DHlNkvL/pXUVB4AV4QNk4PfIwotdlNcD/FujBXpgj1na4nF
rzv9+Rz9z6DfzGHg9DleYEVe/8Y573uQ9eJZLSQnq5jFSVJgvP/Ju29VtKBcsT/7
8qzE2JbM2E4bVQ7/oyOfGp2NMjF2qKDRZxCOp7tj2OHfuVMzk08hWF30vX0JfZVU
VuoaSNIfHpBRGSk3odFTBOw2JJ7JnC5SD4baoOCifg6U90DbtNvk36srucPCosJD
7fYK0j5d47MW3aXjuGgpcv1+btP5/3Mpe+oEjgRIfjZ8slBUzFNKacPqBy4v/sO+
885/lj4aTeGU1YbfgHMI40cfYtX1b2s=
-----END CERTIFICATE-----
Generated at Mon Jul 13 10:33:05 2026 by rpki-client