Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/518fb9f3-6845-3e45-af69-497c8740ed7a.roa
File:                     518fb9f3-6845-3e45-af69-497c8740ed7a.roa (raw, json)
Hash identifier:          B+/L8bAgAx8Ccxr4WXdx9DBKvHediHjoe24Q5/rLxXA=
Subject key identifier:   1D:57:D3:37:86:95:F7:FD:B4:1E:79:52:69:FE:8D:91:D1:3F:7D:BE
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328584EDC91FCBCC2D2F862B4D92800
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/518fb9f3-6845-3e45-af69-497c8740ed7a.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        208.70.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:fc:bc:c2:d2:f8:62:b4:d9:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=613a05f1-7d2a-452d-96de-d41d1e39bd3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6f:e9:90:04:7b:e9:e9:72:92:44:a6:5f:ee:
                    81:c8:dc:18:39:33:73:67:73:ee:13:fe:b5:28:84:
                    8a:df:83:99:d3:06:f5:3b:49:11:06:7d:88:54:be:
                    f6:35:dd:c3:a6:b2:e0:7f:07:d6:2c:b9:e6:27:e1:
                    28:e7:4b:1a:df:64:9a:bd:8e:f6:b5:59:08:ed:53:
                    c1:78:b3:7b:74:05:69:7e:86:6e:94:e4:01:be:d5:
                    52:91:4f:02:61:a6:00:83:4f:31:a8:ea:0d:66:6b:
                    b9:e8:49:02:bf:cb:91:9d:e5:ba:9b:97:6d:58:a6:
                    da:27:bc:fd:1a:e2:18:d1:a7:1e:ed:67:a1:25:19:
                    c6:d8:84:39:7e:43:01:a2:0e:7a:ae:f0:81:c8:b0:
                    d8:88:d0:95:cc:21:51:a1:9b:be:df:f0:1f:61:ca:
                    0e:62:b7:3c:7c:58:64:cd:12:50:91:d2:fe:27:8d:
                    11:04:a9:52:be:c6:06:90:ff:2a:25:a2:dc:f5:ad:
                    e8:62:00:08:03:ed:ee:51:6d:da:45:b8:99:4d:d6:
                    f9:62:38:9b:d9:23:8f:36:1f:0b:b1:78:cf:03:ae:
                    bb:22:5b:27:10:56:f0:10:9f:b9:cf:d0:c4:a6:c9:
                    09:7d:46:ce:64:26:07:e8:50:76:37:85:25:73:54:
                    94:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:57:D3:37:86:95:F7:FD:B4:1E:79:52:69:FE:8D:91:D1:3F:7D:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/518fb9f3-6845-3e45-af69-497c8740ed7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:a4:67:74:cb:76:37:4e:cc:3d:23:10:2a:b2:8c:34:7f:e7:
         00:67:9c:59:e1:2f:4f:4c:30:ce:7e:f9:39:02:9a:55:e7:05:
         1e:38:3f:57:a7:cf:cd:6a:ba:e3:5a:d6:31:e9:05:f9:cc:ba:
         a8:67:54:49:2e:e3:59:e5:33:5c:d6:c7:53:86:02:90:fe:59:
         77:60:c6:7b:e0:41:3d:e0:ff:43:cd:73:9e:09:db:ef:be:76:
         56:4b:c4:c4:b7:49:2f:7f:e8:8b:37:97:23:89:57:a5:57:72:
         4e:e2:70:cd:42:ae:2c:f8:fc:fc:45:15:b8:d8:67:08:af:18:
         14:77:a9:22:4b:f3:8a:fb:dc:70:23:3e:14:b6:60:97:cb:8d:
         96:fa:c4:14:e2:13:c1:99:55:75:da:ca:7d:3c:b3:aa:3c:12:
         5c:31:52:7b:ea:54:63:60:76:0e:0c:2c:e8:ba:67:cc:51:87:
         03:64:ab:ae:c1:4b:d0:26:ee:b8:0a:4c:f0:77:26:14:82:0d:
         61:40:da:4d:78:dc:90:91:02:3d:db:a8:bf:8c:53:a5:96:2d:
         3c:dc:f2:0a:b6:49:cb:a7:19:56:7a:63:1c:c1:ff:3b:d9:04:
         18:19:73:b2:61:1f:ac:c3:fa:43:3e:50:44:f8:fc:cb:0b:02:
         3c:c4:a1:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckfy8wtL4YrTZKAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1
YTA0MB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
NjEzYTA1ZjEtN2QyYS00NTJkLTk2ZGUtZDQxZDFlMzliZDNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW/pkAR76elykkSmX+6ByNwYOTNzZ3PuE/61
KISK34OZ0wb1O0kRBn2IVL72Nd3DprLgfwfWLLnmJ+Eo50sa32SavY72tVkI7VPB
eLN7dAVpfoZulOQBvtVSkU8CYaYAg08xqOoNZmu56EkCv8uRneW6m5dtWKbaJ7z9
GuIY0ace7WehJRnG2IQ5fkMBog56rvCByLDYiNCVzCFRoZu+3/AfYcoOYrc8fFhk
zRJQkdL+J40RBKlSvsYGkP8qJaLc9a3oYgAIA+3uUW3aRbiZTdb5Yjib2SOPNh8L
sXjPA667IlsnEFbwEJ+5z9DEpskJfUbOZCYH6FB2N4Ulc1SUxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB1X0zeGlff9tB55Umn+jZHRP32+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh
Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNTE4ZmI5ZjMtNjg0NS0z
ZTQ1LWFmNjktNDk3Yzg3NDBlZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh
M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi
NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx
OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABqkZ3TLdjdOzD0jECqyjDR/5wBnnFnhL09MMM5++TkCmlXnBR44P1en
z81quuNa1jHpBfnMuqhnVEku41nlM1zWx1OGApD+WXdgxnvgQT3g/0PNc54J2+++
dlZLxMS3SS9/6Is3lyOJV6VXck7icM1Criz4/PxFFbjYZwivGBR3qSJL84r73HAj
PhS2YJfLjZb6xBTiE8GZVXXayn08s6o8ElwxUnvqVGNgdg4MLOi6Z8xRhwNkq67B
S9Am7rgKTPB3JhSCDWFA2k143JCRAj3bqL+MU6WWLTzc8gq2ScunGVZ6YxzB/zvZ
BBgZc7JhH6zD+kM+UET4/MsLAjzEoeQ=
-----END CERTIFICATE-----
Generated at Thu Aug 20 21:58:07 2026 by rpki-client