Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f8e3b30-9a3a-3c21-a9e5-d50c9a1a37e6.roa
File:                     8f8e3b30-9a3a-3c21-a9e5-d50c9a1a37e6.roa (raw, json)
Hash identifier:          zaifAiHct8jjY+8pNoErMYR9Q5N1+VWnan04UUD3aEQ=
Subject key identifier:   96:E0:6D:1F:B5:C4:E8:F0:CA:8C:FD:6E:48:24:7B:7D:E3:D9:5D:49
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E736A2391FEFEFC3BB3794800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f8e3b30-9a3a-3c21-a9e5-d50c9a1a37e6.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     3855
IP address blocks:        199.172.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:23:91:fe:fe:fc:3b:b3:79:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=38bbe55b-8d79-44f7-b726-5bd88e78dff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:34:6c:2a:39:72:a4:7b:5c:ac:30:57:b0:52:
                    ea:20:f9:2c:89:59:ea:a3:28:fa:cf:d1:cc:73:2e:
                    1e:cf:d1:02:b6:bd:2d:ce:39:ca:b8:0f:48:0c:87:
                    8f:25:c0:74:ce:83:d7:de:9c:48:fd:a4:fe:e5:52:
                    6e:4e:b7:41:86:c7:3c:43:0f:aa:12:87:5c:e8:e0:
                    46:88:cd:17:03:7b:00:17:f1:fc:0b:70:7e:b4:6d:
                    82:6e:08:40:b2:91:cb:ac:e0:ad:ba:87:33:dd:aa:
                    29:47:50:66:a5:99:6f:57:7f:8c:60:30:47:61:fd:
                    34:10:1d:9b:0a:e5:ba:b3:94:5f:98:d4:65:89:a7:
                    67:84:91:f6:a3:19:f8:17:69:f5:64:52:22:a8:75:
                    58:53:17:8f:77:d8:6c:64:ab:93:53:5e:e4:ec:4c:
                    27:3a:16:11:26:e3:d1:6a:96:67:8d:d8:cc:35:62:
                    e1:07:84:9e:f2:50:09:8d:0b:9a:69:db:cf:e5:e8:
                    ea:de:f4:d8:1f:2d:73:f5:29:dc:e4:7b:0d:1a:2b:
                    40:eb:bd:59:83:ed:12:8e:9b:8e:86:12:50:0d:4b:
                    da:f8:1c:42:ed:cc:c9:34:eb:89:b9:82:ed:7d:5e:
                    54:94:e7:7b:b6:c9:4b:11:ac:01:e7:e1:5a:a1:93:
                    a9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E0:6D:1F:B5:C4:E8:F0:CA:8C:FD:6E:48:24:7B:7D:E3:D9:5D:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8f8e3b30-9a3a-3c21-a9e5-d50c9a1a37e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.172.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:13:0c:2c:77:90:61:7a:f7:67:bf:22:6a:4e:1d:7b:e8:39:
         04:ad:b8:66:3b:04:c8:bd:8b:63:b1:b8:f6:0b:5c:a3:92:2e:
         b9:87:c1:04:bb:e6:b9:15:d0:19:77:f0:8a:a5:c9:b0:f1:a5:
         04:79:17:a5:0d:9f:99:45:25:51:13:8d:c2:fe:31:e2:7a:36:
         28:3c:ec:3c:95:c0:39:3d:e4:47:4f:2a:29:cb:48:14:46:0b:
         6c:fd:ce:26:8b:3e:7e:68:6e:ae:1c:3d:15:d3:20:5f:d5:7d:
         b6:34:9b:f0:8a:ba:12:fe:2b:98:dc:86:aa:0a:07:14:5f:f9:
         1b:52:4e:f5:79:56:cf:ab:9d:8e:8a:fc:1f:07:12:be:7b:3a:
         47:5b:62:22:1e:a9:23:e8:9d:a8:44:1e:5d:a7:7c:05:d6:5e:
         e9:24:e4:16:cd:4b:7e:48:ca:b8:f4:a2:da:20:a2:2c:90:22:
         19:c0:af:a8:c1:eb:09:1a:cb:f7:82:24:b8:12:c9:30:cd:25:
         51:c2:ad:c1:52:47:3b:d6:62:81:e5:4f:04:9c:80:1c:04:33:
         95:fa:21:15:07:f9:13:ee:6b:45:de:09:f2:53:3f:ac:01:a4:
         0b:2b:82:d4:f8:08:1f:87:ed:7c:15:43:c6:46:5d:77:3e:a9:
         bf:d4:a1:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zaiOR/v78O7N5SAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk
MzhiYmU1NWItOGQ3OS00NGY3LWI3MjYtNWJkODhlNzhkZmYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzRsKjlypHtcrDBXsFLqIPksiVnqoyj6z9HM
cy4ez9ECtr0tzjnKuA9IDIePJcB0zoPX3pxI/aT+5VJuTrdBhsc8Qw+qEodc6OBG
iM0XA3sAF/H8C3B+tG2CbghAspHLrOCtuocz3aopR1BmpZlvV3+MYDBHYf00EB2b
CuW6s5RfmNRliadnhJH2oxn4F2n1ZFIiqHVYUxePd9hsZKuTU17k7EwnOhYRJuPR
apZnjdjMNWLhB4Se8lAJjQuaadvP5ejq3vTYHy1z9Snc5HsNGitA671Zg+0SjpuO
hhJQDUva+BxC7czJNOuJuYLtfV5UlOd7tslLEawB5+FaoZOpEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJbgbR+1xOjwyoz9bkgke33j2V1JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOGY4ZTNiMzAtOWEzYS0z
YzIxLWE5ZTUtZDUwYzlhMWEzN2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx6zDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEwTDCx3kGF692e/ImpOHXvoOQStuGY7BMi9i2OxuPYLXKOSLrmHwQS7
5rkV0Bl38IqlybDxpQR5F6UNn5lFJVETjcL+MeJ6Nig87DyVwDk95EdPKinLSBRG
C2z9ziaLPn5obq4cPRXTIF/VfbY0m/CKuhL+K5jchqoKBxRf+RtSTvV5Vs+rnY6K
/B8HEr57OkdbYiIeqSPonahEHl2nfAXWXukk5BbNS35Iyrj0otogoiyQIhnAr6jB
6wkay/eCJLgSyTDNJVHCrcFSRzvWYoHlTwScgBwEM5X6IRUH+RPua0XeCfJTP6wB
pAsrgtT4CB+H7XwVQ8ZGXXc+qb/UoUU=
-----END CERTIFICATE-----
Generated at Mon Jul 13 12:51:40 2026 by rpki-client