Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2/d66b9882-15b7-30d0-ad9b-d05bb66ae544.roa
File:                     d66b9882-15b7-30d0-ad9b-d05bb66ae544.roa (raw, json)
Hash identifier:          f5eC8gf9ZOjxU6aJSAPj56fIwzoxzaM5yyfBDW/QDk0=
Subject key identifier:   DD:B0:CB:4E:82:87:BF:99:A8:4F:6E:02:B5:C6:7F:78:91:60:1D:B5
Certificate issuer:       /CN=53a14809-fd74-4e50-a827-e921f11ef1a2
Certificate serial:       010D0C9F4328584EA787164EDE8046B23B334E80
Authority key identifier: 06:1F:00:BD:52:AF:0F:E1:01:15:BB:34:42:7E:B5:D3:82:47:DB:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2/d66b9882-15b7-30d0-ad9b-d05bb66ae544.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     35962
IP address blocks:        199.33.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2/53a14809-fd74-4e50-a827-e921f11ef1a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2/53a14809-fd74-4e50-a827-e921f11ef1a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:16:4e:de:80:46:b2:3b:33:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53a14809-fd74-4e50-a827-e921f11ef1a2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f37d2faa-ad4b-4b2e-83e7-6f9d6d1b95e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:87:4b:3c:1a:13:f5:98:0d:f1:69:34:99:71:
                    08:57:9c:b0:95:cd:0e:fa:d0:0a:02:ce:c2:a5:f3:
                    9b:00:b6:38:1d:fe:55:0b:aa:51:bb:4b:0c:d7:26:
                    9a:37:30:80:5c:e9:47:1f:07:a9:ad:a1:29:5d:7a:
                    a0:41:8b:b4:ab:65:6d:80:7f:60:af:6b:84:ac:61:
                    ca:6f:70:a4:c5:91:a7:2b:8b:77:2e:13:e9:e8:ea:
                    f7:5e:5c:7d:f8:47:dd:29:d2:fa:be:08:11:de:d4:
                    0c:25:f5:02:68:60:27:d3:62:94:12:5f:69:29:cf:
                    9d:44:11:0d:ef:bd:4b:07:c5:f6:7c:d0:f4:3d:e9:
                    b2:bd:b7:26:ff:98:5c:d7:6e:35:3e:59:a1:15:53:
                    d3:cd:1d:71:d7:03:80:65:98:5e:a9:42:96:22:c0:
                    52:60:65:bf:3f:7e:16:8f:cc:6a:c8:22:41:70:14:
                    ae:0b:26:06:5d:8e:a8:f6:75:1a:d9:57:4b:94:4c:
                    17:c1:07:db:6e:fe:60:70:9d:2b:85:bb:0c:03:6e:
                    f3:7a:32:5a:1e:4c:fc:ad:8f:5a:fc:23:ea:e0:bf:
                    fa:49:25:bb:be:c4:90:eb:0f:ae:e7:93:df:81:5b:
                    f6:20:d3:fc:9a:6e:70:6b:71:b7:3e:36:25:ed:dd:
                    12:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B0:CB:4E:82:87:BF:99:A8:4F:6E:02:B5:C6:7F:78:91:60:1D:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2/d66b9882-15b7-30d0-ad9b-d05bb66ae544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2/53a14809-fd74-4e50-a827-e921f11ef1a2.crl

            X509v3 Authority Key Identifier:
                keyid:06:1F:00:BD:52:AF:0F:E1:01:15:BB:34:42:7E:B5:D3:82:47:DB:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.33.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:4f:37:f8:f4:64:35:fe:33:55:5f:be:22:3f:5e:d8:ea:cc:
         cc:8c:eb:8f:b7:27:67:4f:97:2d:1c:25:48:49:f5:aa:26:a3:
         8a:d7:62:6b:47:ff:7c:4a:5a:34:ae:18:12:c2:11:29:33:d0:
         28:1c:92:79:cc:5d:85:6d:f5:51:3f:5c:1a:52:1c:79:02:4e:
         3b:5c:05:40:4d:d4:6e:7b:6a:c3:cd:33:5f:c2:50:ca:df:49:
         1f:d5:c9:79:9f:1a:46:cd:ab:d3:97:c1:0c:1c:aa:c2:77:e9:
         74:05:10:66:d1:94:2b:52:9b:64:6d:5f:85:6c:43:f4:5a:8f:
         39:ef:32:47:05:64:e3:6f:02:01:48:2d:32:12:1a:d8:77:51:
         6f:34:c6:c0:5e:84:82:f1:38:77:be:e8:b9:1f:52:48:57:6d:
         91:44:62:2e:cc:f2:23:25:f9:ce:06:70:91:5b:f4:5a:ce:4d:
         d0:e2:22:51:d1:46:57:3b:df:55:7e:01:f8:53:6b:0d:0c:78:
         f9:12:17:94:7b:82:89:08:f8:b1:72:4a:0c:f5:9f:16:f5:34:
         61:01:ad:63:3d:72:3b:3e:9d:d9:1c:a8:b2:a3:ad:95:87:18:
         f2:3f:b2:d9:b7:2f:06:48:b5:29:a8:11:a8:45:10:91:44:c7:
         43:5c:4b:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhxZO3oBGsjszToAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTNhMTQ4MDktZmQ3NC00ZTUwLWE4MjctZTkyMWYxMWVm
MWEyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZjM3ZDJmYWEtYWQ0Yi00YjJlLTgzZTctNmY5ZDZkMWI5NWUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIdLPBoT9ZgN8Wk0mXEIV5ywlc0O+tAKAs7C
pfObALY4Hf5VC6pRu0sM1yaaNzCAXOlHHwepraEpXXqgQYu0q2VtgH9gr2uErGHK
b3CkxZGnK4t3LhPp6Or3Xlx9+EfdKdL6vggR3tQMJfUCaGAn02KUEl9pKc+dRBEN
771LB8X2fND0Pemyvbcm/5hc1241PlmhFVPTzR1x1wOAZZheqUKWIsBSYGW/P34W
j8xqyCJBcBSuCyYGXY6o9nUa2VdLlEwXwQfbbv5gcJ0rhbsMA27zejJaHkz8rY9a
/CPq4L/6SSW7vsSQ6w+u55PfgVv2INP8mm5wa3G3PjYl7d0S0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN2wy06Ch7+ZqE9uArXGf3iRYB21MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81M2Ex
NDgwOS1mZDc0LTRlNTAtYTgyNy1lOTIxZjExZWYxYTIvZDY2Yjk4ODItMTViNy0z
MGQwLWFkOWItZDA1YmI2NmFlNTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTNhMTQ4MDktZmQ3NC00ZTUwLWE4
MjctZTkyMWYxMWVmMWEyLzUzYTE0ODA5LWZkNzQtNGU1MC1hODI3LWU5MjFmMTFl
ZjFhMi5jcmwwHwYDVR0jBBgwFoAUBh8AvVKvD+EBFbs0Qn6104JH2/YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81M2ExNDgwOS1mZDc0LTRlNTAtYTgyNy1lOTIx
ZjExZWYxYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyGHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAApPN/j0ZDX+M1VfviI/XtjqzMyM64+3J2dPly0cJUhJ9aomo4rXYmtH
/3xKWjSuGBLCESkz0CgcknnMXYVt9VE/XBpSHHkCTjtcBUBN1G57asPNM1/CUMrf
SR/VyXmfGkbNq9OXwQwcqsJ36XQFEGbRlCtSm2RtX4VsQ/RajznvMkcFZONvAgFI
LTISGth3UW80xsBehILxOHe+6LkfUkhXbZFEYi7M8iMl+c4GcJFb9FrOTdDiIlHR
Rlc731V+AfhTaw0MePkSF5R7gokI+LFySgz1nxb1NGEBrWM9cjs+ndkcqLKjrZWH
GPI/stm3LwZItSmoEahFEJFEx0NcS68=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:44:49 2026 by rpki-client