Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/10904f5e-34fd-3649-9d0d-1e43fc9f176c.roa
File:                     10904f5e-34fd-3649-9d0d-1e43fc9f176c.roa (raw, json)
Hash identifier:          qi42kdt+hfyCzQa9fDPoKEYfQom3Vx6z1J2HEQ7dfNI=
Subject key identifier:   44:08:23:3E:4F:53:95:73:7C:1C:D4:19:C4:47:52:3B:F2:5E:57:64
Certificate issuer:       /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Certificate serial:       010D0C9F4328584DDD207B17CA393AB3C67663C0
Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/10904f5e-34fd-3649-9d0d-1e43fc9f176c.roa
Signing time:             Sun 17 May 2026 13:00:32 +0000
ROA not before:           Sun 17 May 2026 13:00:32 +0000
ROA not after:            Sat 15 Aug 2026 13:00:32 +0000
asID:                     125
IP address blocks:        199.64.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:dd:20:7b:17:ca:39:3a:b3:c6:76:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
        Validity
            Not Before: May 17 13:00:32 2026 GMT
            Not After : Aug 15 13:00:32 2026 GMT
        Subject: CN=c87ca800-61e8-4178-8019-42c9a9377793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:de:7c:23:35:aa:5e:61:64:32:5c:95:bf:19:
                    7b:82:3e:52:2b:8a:19:63:bf:71:e3:80:e2:cf:c8:
                    28:65:b6:60:b9:58:a8:bd:c4:a3:c8:d5:e3:7e:de:
                    84:d8:e9:af:0c:b3:ca:72:5b:74:8d:24:3e:31:09:
                    6c:f0:98:b6:cb:a6:5e:3a:cf:a5:31:88:cb:3c:fd:
                    4b:86:fd:0b:34:d0:e8:e5:cb:7a:b2:8b:c8:dc:1f:
                    cd:43:e4:8f:16:d1:74:0c:85:2c:f8:f2:39:fa:f9:
                    a0:6d:bb:14:7c:42:7c:08:ab:97:13:22:73:ef:21:
                    a4:d6:22:43:4a:47:47:99:86:f5:22:44:b2:fc:66:
                    00:53:97:e3:c7:41:f2:b8:e9:b5:ae:c7:dd:70:9a:
                    4a:02:14:1d:fe:bf:c0:31:8c:ca:04:85:42:fe:37:
                    ba:d2:94:48:df:fd:58:91:29:11:dc:a8:85:b6:11:
                    33:5e:9f:fc:aa:35:9d:41:3f:18:57:b3:81:82:62:
                    1d:17:e2:50:f5:28:fa:46:60:d5:5c:9c:ef:22:21:
                    5e:e2:fe:34:e5:7d:86:6e:c9:6a:5f:9e:a0:f0:68:
                    eb:40:b6:1e:e2:c6:81:29:34:a0:d8:64:f7:a5:da:
                    f2:17:06:bc:a4:4d:b4:a7:df:e0:d2:54:16:9c:c9:
                    8f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:08:23:3E:4F:53:95:73:7C:1C:D4:19:C4:47:52:3B:F2:5E:57:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/10904f5e-34fd-3649-9d0d-1e43fc9f176c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl

            X509v3 Authority Key Identifier:
                keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.64.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:57:f6:7e:97:a8:0d:87:04:cc:60:ba:d3:e7:2e:f6:de:38:
         c7:99:07:33:28:1d:dc:54:f2:78:d4:4b:e8:55:4a:53:7c:5f:
         57:75:66:e7:b8:a0:f0:2e:69:83:e7:97:8d:c8:35:c0:cd:54:
         0d:e6:6a:c3:39:ca:07:10:34:0d:0c:30:ea:47:36:c4:aa:c3:
         cb:49:3e:4b:ab:2c:81:2f:c2:3f:73:e0:c1:c2:b6:cd:87:c0:
         9e:5d:12:26:62:8c:f8:99:f3:fe:06:2b:ee:e2:16:16:19:79:
         28:a2:58:8d:aa:31:4a:74:27:80:61:0b:26:9b:a9:91:b5:2b:
         d1:da:16:91:e7:cd:62:e4:3b:5e:44:2d:e2:40:98:2f:6e:c1:
         32:59:8e:4a:ae:95:29:fc:d1:1d:96:c5:10:c3:17:b8:8d:7d:
         2b:c9:34:1e:ca:01:40:23:f7:1d:64:4e:eb:0e:20:6c:b4:52:
         fc:a7:59:8c:9e:9e:dd:88:c7:46:61:74:87:2c:ee:6c:02:56:
         11:15:4a:a9:1a:b3:08:16:7f:b0:a4:ec:d0:8e:07:b3:a6:5e:
         36:bf:e1:9f:92:c6:ec:40:c3:bc:2c:56:ca:6b:dc:28:19:56:
         53:7e:01:9b:90:d2:8e:cd:f3:37:48:4c:c1:2c:b9:45:e1:82:
         0d:d1:8b:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3dIHsXyjk6s8Z2Y8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh
YjVjMB4XDTI2MDUxNzEzMDAzMloXDTI2MDgxNTEzMDAzMlowLzEtMCsGA1UEAxMk
Yzg3Y2E4MDAtNjFlOC00MTc4LTgwMTktNDJjOWE5Mzc3NzkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd58IzWqXmFkMlyVvxl7gj5SK4oZY79x44Di
z8goZbZguViovcSjyNXjft6E2OmvDLPKclt0jSQ+MQls8Ji2y6ZeOs+lMYjLPP1L
hv0LNNDo5ct6sovI3B/NQ+SPFtF0DIUs+PI5+vmgbbsUfEJ8CKuXEyJz7yGk1iJD
SkdHmYb1IkSy/GYAU5fjx0HyuOm1rsfdcJpKAhQd/r/AMYzKBIVC/je60pRI3/1Y
kSkR3KiFthEzXp/8qjWdQT8YV7OBgmIdF+JQ9Sj6RmDVXJzvIiFe4v405X2Gbslq
X56g8GjrQLYe4saBKTSg2GT3pdryFwa8pE20p9/g0lQWnMmPIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEQIIz5PU5VzfBzUGcRHUjvyXldkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx
MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvMTA5MDRmNWUtMzRmZC0z
NjQ5LTlkMGQtMWU0M2ZjOWYxNzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj
ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy
YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw
YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx0CiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ1X9n6XqA2HBMxgutPnLvbeOMeZBzMoHdxU8njUS+hVSlN8X1d1Zue4
oPAuaYPnl43INcDNVA3masM5ygcQNA0MMOpHNsSqw8tJPkurLIEvwj9z4MHCts2H
wJ5dEiZijPiZ8/4GK+7iFhYZeSiiWI2qMUp0J4BhCyabqZG1K9HaFpHnzWLkO15E
LeJAmC9uwTJZjkqulSn80R2WxRDDF7iNfSvJNB7KAUAj9x1kTusOIGy0UvynWYye
nt2Ix0ZhdIcs7mwCVhEVSqkaswgWf7Ck7NCOB7OmXja/4Z+SxuxAw7wsVspr3CgZ
VlN+AZuQ0o7N8zdITMEsuUXhgg3RiyI=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:16:32 2026 by rpki-client