Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1e306537-29f1-473a-9c8e-a9132d998476/066ca599-48af-311f-99f5-86572cdc1968.roa
File:                     066ca599-48af-311f-99f5-86572cdc1968.roa (raw, json)
Hash identifier:          B0al1JQHylszmcQhsb6dyZZPRJrH1P+cZ0A56HwDmc4=
Subject key identifier:   7F:AE:EB:60:B4:FC:AF:4B:99:F0:56:6D:19:74:60:A0:1C:A8:33:31
Certificate issuer:       /CN=1e306537-29f1-473a-9c8e-a9132d998476
Certificate serial:       010D0C9F4328584EA7887277D8A465115B376200
Authority key identifier: 03:59:43:89:4A:B2:BF:69:06:B3:57:7F:19:71:31:D4:0C:38:10:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1e306537-29f1-473a-9c8e-a9132d998476.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1e306537-29f1-473a-9c8e-a9132d998476/066ca599-48af-311f-99f5-86572cdc1968.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     26441
IP address blocks:        198.163.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1e306537-29f1-473a-9c8e-a9132d998476/1e306537-29f1-473a-9c8e-a9132d998476.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1e306537-29f1-473a-9c8e-a9132d998476/1e306537-29f1-473a-9c8e-a9132d998476.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1e306537-29f1-473a-9c8e-a9132d998476.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:72:77:d8:a4:65:11:5b:37:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e306537-29f1-473a-9c8e-a9132d998476
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e7d1c442-4428-43f4-99ab-bd3577bf6061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b2:d3:53:03:8e:e3:7c:5a:a0:ca:c1:e3:5c:
                    c6:9c:d6:a3:b2:aa:10:40:5b:a1:85:dd:d0:bc:a3:
                    91:b9:e9:b3:01:47:d9:6a:58:3e:ec:1b:a3:46:89:
                    16:ab:63:f4:fa:23:be:a4:6c:92:5b:6e:00:3a:b0:
                    ef:79:45:d7:ae:56:b5:8e:e4:8f:78:b6:88:57:d9:
                    05:c3:9a:7c:72:01:06:01:b7:7a:92:05:bc:c7:72:
                    0d:20:f9:16:0c:76:22:39:c8:ff:7d:09:00:6b:9c:
                    91:69:0f:23:74:fa:25:8e:dd:c4:74:f3:9c:61:96:
                    af:a3:72:0f:93:99:64:9a:f9:a6:55:6d:33:c8:cd:
                    f4:77:f9:25:7a:70:d3:e7:ee:9f:ae:ff:90:14:69:
                    f4:af:7b:cf:ee:85:e6:e3:21:ce:e2:1b:79:f7:11:
                    76:a1:4d:dd:9c:b9:c1:7b:85:60:90:f7:0d:2a:71:
                    14:f2:78:b8:a6:6e:78:fd:ea:6c:2f:85:f8:9f:c1:
                    52:e4:96:57:cd:42:e2:cc:d9:65:1c:4c:1d:f1:19:
                    2a:29:48:b9:43:7d:9c:9a:e9:32:06:c6:89:a3:64:
                    0d:15:54:2c:53:e9:49:a7:82:ac:4c:60:4a:d1:a8:
                    f6:6b:07:42:9d:1b:b3:5d:55:a9:67:7b:d9:da:34:
                    9c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AE:EB:60:B4:FC:AF:4B:99:F0:56:6D:19:74:60:A0:1C:A8:33:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1e306537-29f1-473a-9c8e-a9132d998476/066ca599-48af-311f-99f5-86572cdc1968.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1e306537-29f1-473a-9c8e-a9132d998476/1e306537-29f1-473a-9c8e-a9132d998476.crl

            X509v3 Authority Key Identifier:
                keyid:03:59:43:89:4A:B2:BF:69:06:B3:57:7F:19:71:31:D4:0C:38:10:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1e306537-29f1-473a-9c8e-a9132d998476.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.163.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:18:11:e5:4a:d8:e4:03:5f:e1:a2:67:72:07:94:e5:5e:72:
         26:c0:98:cd:e2:2f:07:b8:35:b4:16:2b:cb:b8:40:21:ef:d5:
         35:cd:3a:46:0c:40:2b:b9:fd:5e:4f:67:1e:26:d5:64:c6:9a:
         43:5b:93:0b:98:b3:2a:59:40:40:14:f1:45:39:f4:88:ad:07:
         ec:ec:40:68:ea:b0:7e:bb:b2:91:73:21:7a:46:41:15:fd:3a:
         ee:80:c0:5b:f2:20:f0:ff:ef:fb:7f:f8:86:23:25:de:40:43:
         78:1a:f5:f0:bf:f6:55:92:c1:9a:d2:c0:d5:cd:bf:be:b5:68:
         68:4d:5c:c1:33:99:bc:6d:6f:d5:bc:c3:a3:e4:4d:f8:e1:e0:
         65:4c:74:78:b3:71:78:7d:56:ed:cf:34:46:15:f0:c6:3c:4f:
         d0:76:7e:3a:71:69:af:5c:de:79:ed:56:7e:3d:e5:69:96:f9:
         f3:d2:e7:47:58:87:6f:0e:49:57:db:bc:da:57:95:b5:0f:2e:
         6d:e8:91:cf:90:0d:dc:32:74:9f:5b:c8:f2:34:b6:a0:dd:cb:
         c0:63:73:5f:6e:40:f0:27:f9:ae:30:ef:8e:3c:8d:8a:88:5b:
         4d:8f:3a:27:1d:01:26:59:71:ab:b3:5e:33:0c:11:0d:8f:a3:
         64:d5:7f:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niHJ32KRlEVs3YgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWUzMDY1MzctMjlmMS00NzNhLTljOGUtYTkxMzJkOTk4
NDc2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZTdkMWM0NDItNDQyOC00M2Y0LTk5YWItYmQzNTc3YmY2MDYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7LTUwOO43xaoMrB41zGnNajsqoQQFuhhd3Q
vKORuemzAUfZalg+7BujRokWq2P0+iO+pGySW24AOrDveUXXrla1juSPeLaIV9kF
w5p8cgEGAbd6kgW8x3INIPkWDHYiOcj/fQkAa5yRaQ8jdPoljt3EdPOcYZavo3IP
k5lkmvmmVW0zyM30d/klenDT5+6frv+QFGn0r3vP7oXm4yHO4ht59xF2oU3dnLnB
e4VgkPcNKnEU8ni4pm54/epsL4X4n8FS5JZXzULizNllHEwd8RkqKUi5Q32cmuky
BsaJo2QNFVQsU+lJp4KsTGBK0aj2awdCnRuzXVWpZ3vZ2jScEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH+u62C0/K9LmfBWbRl0YKAcqDMxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8xZTMw
NjUzNy0yOWYxLTQ3M2EtOWM4ZS1hOTEzMmQ5OTg0NzYvMDY2Y2E1OTktNDhhZi0z
MTFmLTk5ZjUtODY1NzJjZGMxOTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMWUzMDY1MzctMjlmMS00NzNhLTlj
OGUtYTkxMzJkOTk4NDc2LzFlMzA2NTM3LTI5ZjEtNDczYS05YzhlLWE5MTMyZDk5
ODQ3Ni5jcmwwHwYDVR0jBBgwFoAUA1lDiUqyv2kGs1d/GXEx1Aw4EPYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi8xZTMwNjUzNy0yOWYxLTQ3M2EtOWM4ZS1hOTEz
MmQ5OTg0NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxqPXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACQYEeVK2OQDX+GiZ3IHlOVecibAmM3iLwe4NbQWK8u4QCHv1TXNOkYM
QCu5/V5PZx4m1WTGmkNbkwuYsypZQEAU8UU59IitB+zsQGjqsH67spFzIXpGQRX9
Ou6AwFvyIPD/7/t/+IYjJd5AQ3ga9fC/9lWSwZrSwNXNv761aGhNXMEzmbxtb9W8
w6PkTfjh4GVMdHizcXh9Vu3PNEYV8MY8T9B2fjpxaa9c3nntVn495WmW+fPS50dY
h28OSVfbvNpXlbUPLm3okc+QDdwydJ9byPI0tqDdy8Bjc19uQPAn+a4w7448jYqI
W02POicdASZZcauzXjMMEQ2Po2TVf1U=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:51:01 2026 by rpki-client