Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/a3c913bd-38a7-3113-91a3-43cfa8207222.roa
File:                     a3c913bd-38a7-3113-91a3-43cfa8207222.roa (raw, json)
Hash identifier:          30h6rORMEHWphVg62GfJrbyj+w0ZF1gQ1dF0xfJ2ls0=
Subject key identifier:   E7:DD:97:DB:B4:74:A8:28:03:CA:49:E7:E9:0A:AF:E7:92:A9:00:8C
Certificate issuer:       /CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
Certificate serial:       010D0C9F4328584E210EF09E368844D5CEE0AE08
Authority key identifier: E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/a3c913bd-38a7-3113-91a3-43cfa8207222.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     33717
IP address blocks:        208.70.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:f0:9e:36:88:44:d5:ce:e0:ae:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=89dc208b-10c2-4393-a0c5-1e3812cda5d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:3b:9d:96:39:21:1e:f5:d5:e0:52:1f:66:d5:
                    f8:1e:64:5e:4b:95:5a:30:fc:e7:14:b5:a9:32:01:
                    d6:fd:b8:ef:67:92:4f:c8:75:00:1e:9a:f5:d9:22:
                    91:0e:cf:a5:75:aa:cc:2f:1a:c5:91:2f:8c:10:19:
                    1f:34:32:5b:f4:02:78:1a:17:32:48:e0:d2:f2:14:
                    c4:06:e8:12:e0:0c:c5:3b:72:f5:d1:71:59:92:3c:
                    49:90:7e:90:83:35:ac:e8:47:b9:34:39:4f:ff:f6:
                    0d:40:6c:7d:b4:78:1b:0a:ed:fc:72:61:68:1b:30:
                    82:bd:2c:45:73:42:59:1a:0a:7d:e0:df:9b:a9:9c:
                    5b:e8:db:cf:57:e0:f2:4f:52:13:fc:38:e0:a3:15:
                    3f:71:8f:cc:88:b2:e3:44:6a:80:e6:08:dc:51:66:
                    42:7b:d3:31:38:fc:3b:9c:96:07:ef:f3:e5:d2:d6:
                    f1:3c:15:10:54:a4:64:44:d0:3f:27:be:e6:3e:5e:
                    0c:76:b2:b1:eb:c3:39:7e:b7:e1:52:6c:d9:4b:6e:
                    73:77:73:da:c2:af:70:2b:7a:e2:52:06:62:9c:4d:
                    00:75:b6:36:96:12:24:48:c2:be:14:4d:bb:a3:f6:
                    1a:14:e4:bc:58:4b:3d:fe:48:55:0b:a9:ba:f0:5e:
                    85:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DD:97:DB:B4:74:A8:28:03:CA:49:E7:E9:0A:AF:E7:92:A9:00:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/a3c913bd-38a7-3113-91a3-43cfa8207222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl

            X509v3 Authority Key Identifier:
                keyid:E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:3b:b0:4b:b9:4a:c5:62:61:05:69:71:a9:7e:fb:6b:ce:6f:
         58:46:0d:c7:36:00:3e:1e:59:0e:6f:24:fc:c2:21:57:ee:12:
         28:6c:e5:61:55:f2:eb:ff:26:1b:84:64:8d:8a:58:fa:3e:a9:
         c3:22:5c:22:71:88:1f:a5:94:9f:dc:c8:32:50:b3:d2:9b:8e:
         73:fe:1d:90:b1:6d:8e:c7:37:f1:db:88:f3:93:5b:16:25:1e:
         7c:71:94:df:f2:4a:66:36:96:41:23:9c:cf:9d:eb:54:f6:5f:
         3f:35:d0:ab:ef:fb:e0:40:0a:64:42:03:b9:6d:4f:45:33:db:
         74:07:6a:45:b1:9c:d3:0e:e3:a5:b3:5b:78:a7:bf:e5:cd:f6:
         a3:bf:c3:0b:41:3f:66:ff:a5:d1:8b:f3:0f:64:64:d2:79:c8:
         44:de:1b:0e:a8:69:d0:62:e4:c7:23:7f:3d:7e:3c:ee:7f:c4:
         0c:af:b6:3e:52:6a:d0:a0:51:45:b9:b7:0b:f0:d2:17:0f:9c:
         66:b0:0b:4f:91:dd:a5:95:c3:0d:92:0d:41:d9:14:83:36:22:
         14:94:31:f8:71:2b:72:38:5e:87:02:86:b9:15:9b:4e:92:91:
         7c:10:ae:87:44:55:95:14:6f:91:31:49:d3:e4:a1:c0:e1:5d:
         95:29:3c:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4hDvCeNohE1c7grggwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzdjNGM2MmEtM2Y2ZC00YzFjLThiZGItMzcwNjI0NmNi
ZmQ2MB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk
ODlkYzIwOGItMTBjMi00MzkzLWEwYzUtMWUzODEyY2RhNWQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8TudljkhHvXV4FIfZtX4HmReS5VaMPznFLWp
MgHW/bjvZ5JPyHUAHpr12SKRDs+ldarMLxrFkS+MEBkfNDJb9AJ4GhcySODS8hTE
BugS4AzFO3L10XFZkjxJkH6QgzWs6Ee5NDlP//YNQGx9tHgbCu38cmFoGzCCvSxF
c0JZGgp94N+bqZxb6NvPV+DyT1IT/DjgoxU/cY/MiLLjRGqA5gjcUWZCe9MxOPw7
nJYH7/Pl0tbxPBUQVKRkRNA/J77mPl4MdrKx68M5frfhUmzZS25zd3Pawq9wK3ri
UgZinE0AdbY2lhIkSMK+FE27o/YaFOS8WEs9/khVC6m68F6FcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOfdl9u0dKgoA8pJ5+kKr+eSqQCMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2M0
YzYyYS0zZjZkLTRjMWMtOGJkYi0zNzA2MjQ2Y2JmZDYvYTNjOTEzYmQtMzhhNy0z
MTEzLTkxYTMtNDNjZmE4MjA3MjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzdjNGM2MmEtM2Y2ZC00YzFjLThi
ZGItMzcwNjI0NmNiZmQ2Lzc3YzRjNjJhLTNmNmQtNGMxYy04YmRiLTM3MDYyNDZj
YmZkNi5jcmwwHwYDVR0jBBgwFoAU4p3oDYbgi/0iz/5leJQg8L1y3xMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2M0YzYyYS0zZjZkLTRjMWMtOGJkYi0zNzA2
MjQ2Y2JmZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJo7sEu5SsViYQVpcal++2vOb1hGDcc2AD4eWQ5vJPzCIVfuEihs5WFV
8uv/JhuEZI2KWPo+qcMiXCJxiB+llJ/cyDJQs9KbjnP+HZCxbY7HN/HbiPOTWxYl
HnxxlN/ySmY2lkEjnM+d61T2Xz810Kvv++BACmRCA7ltT0Uz23QHakWxnNMO46Wz
W3inv+XN9qO/wwtBP2b/pdGL8w9kZNJ5yETeGw6oadBi5Mcjfz1+PO5/xAyvtj5S
atCgUUW5twvw0hcPnGawC0+R3aWVww2SDUHZFIM2IhSUMfhxK3I4XocChrkVm06S
kXwQrodEVZUUb5ExSdPkocDhXZUpPO8=
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:43:27 2026 by rpki-client