Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/87c708cc-aab6-358e-a4e7-4226a4708aa3.roa
File:                     87c708cc-aab6-358e-a4e7-4226a4708aa3.roa (raw, json)
Hash identifier:          AvYYjcfIbfkta+pTUurnWX9c/4vtb9RavF6rjt5Q4ok=
Subject key identifier:   2B:F0:F1:A4:35:0D:26:95:DC:D7:3A:7E:69:5C:C6:74:79:F5:7A:DD
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584EA787DC2D4C68227FA191DE08
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/87c708cc-aab6-358e-a4e7-4226a4708aa3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13315
IP address blocks:        199.94.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:dc:2d:4c:68:22:7f:a1:91:de:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0cd26bc6-d2ea-4a3e-8f59-8f8cc343e2b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:09:c9:9c:ff:00:59:57:51:4b:6b:89:d4:0c:
                    41:e2:52:90:71:56:e5:fa:47:bc:69:82:cd:0e:83:
                    c7:14:d5:d0:53:70:9f:6d:fb:84:e3:a1:b4:11:7f:
                    f3:1c:84:a2:7e:a2:9b:c9:92:ed:da:41:67:31:31:
                    45:1e:4e:5a:6f:fd:6a:e4:b9:43:67:77:9a:3c:d8:
                    39:ba:7b:6b:6c:1a:78:e9:06:bb:8f:31:da:a5:26:
                    ae:2f:ac:c3:ea:2d:5f:19:82:c1:9a:3c:17:17:30:
                    68:12:d7:ac:9d:6c:48:e7:f8:a3:6d:27:7b:72:d3:
                    72:af:16:87:c2:60:31:03:0d:8f:26:d0:31:94:2e:
                    f0:11:73:df:f0:c7:02:ba:37:23:72:f0:ba:b6:e8:
                    e6:6d:17:a9:3b:a0:de:fe:cf:cc:39:ee:c8:01:59:
                    77:46:e2:9d:ba:9e:89:86:bf:25:02:ee:e5:71:f7:
                    8d:c7:e5:e5:c6:41:0a:92:4c:f6:0a:e8:bc:fa:b7:
                    33:4a:84:14:e0:95:53:82:73:61:04:a6:c0:56:5f:
                    e7:b5:99:81:a9:79:20:76:20:82:68:33:c1:e8:1e:
                    d4:f3:f4:a9:48:0b:93:0a:86:95:72:52:6d:70:3d:
                    21:d6:80:e9:10:de:72:1b:1b:ad:d5:87:8b:06:3a:
                    9a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F0:F1:A4:35:0D:26:95:DC:D7:3A:7E:69:5C:C6:74:79:F5:7A:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/87c708cc-aab6-358e-a4e7-4226a4708aa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.94.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:18:a3:dd:d8:97:61:1e:47:b0:7d:8f:05:cc:41:3a:ee:0e:
         f8:3a:6e:db:62:1c:2a:10:00:fe:4c:14:08:b6:cc:10:de:59:
         93:ef:e6:09:0d:5d:a4:24:b3:12:ec:f3:49:85:81:58:05:b6:
         eb:01:11:e0:ba:f9:bd:12:e5:3c:5b:82:05:f3:ad:26:ae:e0:
         16:68:26:b4:bb:fe:30:cf:86:55:a2:7a:fa:42:c0:69:fe:0e:
         57:ef:9e:23:47:82:1c:d3:58:42:b3:4f:20:02:8f:d9:cd:2f:
         5b:71:0d:ca:83:77:81:bb:e8:94:60:aa:50:97:fc:2b:7c:0b:
         0f:f4:f7:ab:2f:5e:22:db:85:b1:b8:a9:7c:01:6a:c2:c8:43:
         aa:c9:b2:fd:51:79:87:cf:99:d2:02:ba:49:e2:c5:53:12:90:
         85:02:d2:dc:25:77:ce:0c:40:59:bc:36:e2:fd:ad:55:b2:97:
         30:ea:4a:9f:48:52:8d:35:79:5d:d0:9c:e1:4d:0b:e3:e5:32:
         95:75:46:b1:4b:6e:b9:55:1b:3f:fd:80:57:5c:28:07:e6:2b:
         af:80:0d:f9:46:40:d0:d7:96:ec:00:c5:72:62:57:2b:8a:53:
         6c:be:2c:92:d1:71:fb:f0:b4:de:cb:f2:e5:ce:32:e5:3c:f3:
         0a:f8:be:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh9wtTGgif6GR3ggwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MGNkMjZiYzYtZDJlYS00YTNlLThmNTktOGY4Y2MzNDNlMmIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwnJnP8AWVdRS2uJ1AxB4lKQcVbl+ke8aYLN
DoPHFNXQU3CfbfuE46G0EX/zHISifqKbyZLt2kFnMTFFHk5ab/1q5LlDZ3eaPNg5
untrbBp46Qa7jzHapSauL6zD6i1fGYLBmjwXFzBoEtesnWxI5/ijbSd7ctNyrxaH
wmAxAw2PJtAxlC7wEXPf8McCujcjcvC6tujmbRepO6De/s/MOe7IAVl3RuKdup6J
hr8lAu7lcfeNx+XlxkEKkkz2Cui8+rczSoQU4JVTgnNhBKbAVl/ntZmBqXkgdiCC
aDPB6B7U8/SpSAuTCoaVclJtcD0h1oDpEN5yGxut1YeLBjqasQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCvw8aQ1DSaV3Nc6fmlcxnR59XrdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvODdjNzA4Y2MtYWFiNi0z
NThlLWE0ZTctNDIyNmE0NzA4YWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEx14gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAIYo93Yl2EeR7B9jwXMQTruDvg6bttiHCoQAP5MFAi2zBDeWZPv5gkN
XaQksxLs80mFgVgFtusBEeC6+b0S5TxbggXzrSau4BZoJrS7/jDPhlWievpCwGn+
DlfvniNHghzTWEKzTyACj9nNL1txDcqDd4G76JRgqlCX/Ct8Cw/096svXiLbhbG4
qXwBasLIQ6rJsv1ReYfPmdICuknixVMSkIUC0twld84MQFm8NuL9rVWylzDqSp9I
Uo01eV3QnOFNC+PlMpV1RrFLbrlVGz/9gFdcKAfmK6+ADflGQNDXluwAxXJiVyuK
U2y+LJLRcfvwtN7L8uXOMuU88wr4vr4=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:55:09 2026 by rpki-client