Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/34854ee7-6e5a-3d87-9f2d-b33309bc46ba.roa
File:                     34854ee7-6e5a-3d87-9f2d-b33309bc46ba.roa (raw, json)
Hash identifier:          cfVjV1k1SMSwK7MAooCfl8oncswubojp5aSAYPA8ZkU=
Subject key identifier:   C5:9D:C3:5A:5D:74:B2:A9:B9:50:D0:27:4C:00:90:50:E8:D9:F9:F6
Certificate issuer:       /CN=de519df3-4594-450e-ac51-a7e085408381
Certificate serial:       010D0C9F4328584E5084B6D8321527FDDCF50680
Authority key identifier: 59:9E:4A:47:1E:32:A7:28:11:04:CA:48:15:8C:D4:18:2D:B0:B9:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/34854ee7-6e5a-3d87-9f2d-b33309bc46ba.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     5650
IP address blocks:        209.205.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:b6:d8:32:15:27:fd:dc:f5:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de519df3-4594-450e-ac51-a7e085408381
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=c17453c2-c565-4f2e-b708-47287028b64e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:78:2f:e2:a4:5a:12:88:37:c8:04:09:9f:28:
                    1b:66:d7:83:a8:34:f4:d9:cc:a0:51:1f:06:c4:bf:
                    93:07:15:b2:b5:59:d2:97:6f:df:c8:e2:60:13:5a:
                    07:a3:42:6b:3e:a7:5c:a9:13:e5:0a:b4:f1:6c:79:
                    ee:80:20:ae:c4:3b:e8:0e:e0:1d:2c:f5:91:e2:ad:
                    94:8a:db:5c:4a:b7:16:47:92:8a:1c:1e:b4:fd:39:
                    76:c8:62:84:37:e0:01:36:2b:4a:95:46:2b:a0:54:
                    fd:bb:df:dd:5f:17:e6:81:f5:f7:48:ff:d1:7a:85:
                    b6:93:33:d7:9b:28:bc:d6:05:e6:0d:64:a6:bc:0a:
                    39:4c:6f:2f:14:cd:b3:9c:e5:47:4f:ad:78:c9:db:
                    35:7b:fd:3b:08:1f:c3:a3:2e:45:d0:69:06:ce:35:
                    11:24:cf:b1:c8:a6:c5:7e:45:6f:aa:de:d0:3b:8f:
                    50:7a:e1:89:1d:8f:4f:85:20:e9:fa:c3:ce:b2:e3:
                    13:ca:58:58:d1:27:ae:21:84:f8:28:39:3a:a0:53:
                    fd:d3:68:32:b9:78:a7:db:35:14:61:bb:3c:14:2c:
                    2c:fe:ce:44:85:00:f4:74:8d:25:3f:be:28:bc:85:
                    4c:3b:61:4d:6f:8a:60:da:fc:00:22:b7:21:5b:d7:
                    96:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9D:C3:5A:5D:74:B2:A9:B9:50:D0:27:4C:00:90:50:E8:D9:F9:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/34854ee7-6e5a-3d87-9f2d-b33309bc46ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381/de519df3-4594-450e-ac51-a7e085408381.crl

            X509v3 Authority Key Identifier:
                keyid:59:9E:4A:47:1E:32:A7:28:11:04:CA:48:15:8C:D4:18:2D:B0:B9:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/de519df3-4594-450e-ac51-a7e085408381.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.205.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:a2:a1:93:a6:c9:de:61:f7:21:f7:f2:dd:0f:fc:ad:21:cf:
         68:d6:b1:32:2b:79:44:20:d5:55:86:63:7d:d9:2c:d4:5c:4a:
         ae:48:51:85:b6:fa:60:1a:bd:c9:78:0c:79:02:b7:62:47:44:
         b9:6c:c2:e1:1e:59:2b:28:0c:6b:64:3e:b3:11:f1:99:40:a0:
         5c:6d:75:58:d7:78:62:04:e4:9f:3c:21:77:54:f6:f2:64:97:
         bc:77:e6:8b:2f:49:fa:d3:93:18:d3:b1:c9:aa:88:cc:37:93:
         a6:3b:b2:ac:02:a1:61:b2:bb:b4:91:c3:bc:9c:b7:b6:e4:44:
         69:d4:96:e7:56:1c:9d:41:a5:10:fc:cf:9b:92:90:31:21:18:
         8f:cb:70:ea:b0:69:54:01:70:5b:1a:fd:90:1a:cf:60:a8:f0:
         e4:b1:16:bf:85:ef:74:e6:3d:3d:28:f5:dd:26:d2:8f:9a:1f:
         08:a7:0f:4d:64:83:22:b0:b2:c5:ed:c0:a7:b7:c9:0d:31:3a:
         41:5b:7b:7b:6c:e0:b8:39:80:70:9f:46:b6:22:15:d1:34:19:
         d2:5e:24:18:fb:54:7f:0b:f6:2b:ca:1b:53:f2:fc:f7:29:bf:
         07:b0:eb:e5:54:e1:13:65:94:27:9e:84:07:ee:bd:d8:89:9a:
         57:1f:7f:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhLbYMhUn/dz1BoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGU1MTlkZjMtNDU5NC00NTBlLWFjNTEtYTdlMDg1NDA4
MzgxMB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk
YzE3NDUzYzItYzU2NS00ZjJlLWI3MDgtNDcyODcwMjhiNjRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3gv4qRaEog3yAQJnygbZteDqDT02cygUR8G
xL+TBxWytVnSl2/fyOJgE1oHo0JrPqdcqRPlCrTxbHnugCCuxDvoDuAdLPWR4q2U
ittcSrcWR5KKHB60/Tl2yGKEN+ABNitKlUYroFT9u9/dXxfmgfX3SP/ReoW2kzPX
myi81gXmDWSmvAo5TG8vFM2znOVHT614yds1e/07CB/Doy5F0GkGzjURJM+xyKbF
fkVvqt7QO49QeuGJHY9PhSDp+sPOsuMTylhY0SeuIYT4KDk6oFP902gyuXin2zUU
Ybs8FCws/s5EhQD0dI0lP74ovIVMO2FNb4pg2vwAIrchW9eW3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMWdw1pddLKpuVDQJ0wAkFDo2fn2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kZTUx
OWRmMy00NTk0LTQ1MGUtYWM1MS1hN2UwODU0MDgzODEvMzQ4NTRlZTctNmU1YS0z
ZDg3LTlmMmQtYjMzMzA5YmM0NmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZGU1MTlkZjMtNDU5NC00NTBlLWFj
NTEtYTdlMDg1NDA4MzgxL2RlNTE5ZGYzLTQ1OTQtNDUwZS1hYzUxLWE3ZTA4NTQw
ODM4MS5jcmwwHwYDVR0jBBgwFoAUWZ5KRx4ypygRBMpIFYzUGC2wuRwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9kZTUxOWRmMy00NTk0LTQ1MGUtYWM1MS1hN2Uw
ODU0MDgzODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0c3oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFqioZOmyd5h9yH38t0P/K0hz2jWsTIreUQg1VWGY33ZLNRcSq5IUYW2
+mAavcl4DHkCt2JHRLlswuEeWSsoDGtkPrMR8ZlAoFxtdVjXeGIE5J88IXdU9vJk
l7x35osvSfrTkxjTscmqiMw3k6Y7sqwCoWGyu7SRw7yct7bkRGnUludWHJ1BpRD8
z5uSkDEhGI/LcOqwaVQBcFsa/ZAaz2Co8OSxFr+F73TmPT0o9d0m0o+aHwinD01k
gyKwssXtwKe3yQ0xOkFbe3ts4Lg5gHCfRrYiFdE0GdJeJBj7VH8L9ivKG1Py/Pcp
vwew6+VU4RNllCeehAfuvdiJmlcff3U=
-----END CERTIFICATE-----
Generated at Mon Jul 20 13:49:18 2026 by rpki-client