Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/30c2c6c8-d695-3d54-b0c3-7bad94805e5d.roa
File:                     30c2c6c8-d695-3d54-b0c3-7bad94805e5d.roa (raw, json)
Hash identifier:          ElmhOP+XWU2SfXfQFZHM6/RKxMSTOQ1grsyexXBvaKI=
Subject key identifier:   55:93:83:40:2E:00:D6:C3:CA:CC:E3:A4:53:FA:80:B3:52:C7:B3:67
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F4328584E0C1ED5DACEEB6530FCFCD380
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/30c2c6c8-d695-3d54-b0c3-7bad94805e5d.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     11090
IP address blocks:        64.4.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:d5:da:ce:eb:65:30:fc:fc:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=2793bf6a-d138-4247-8570-1f4e7cc405cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a1:2a:c6:30:54:cb:82:51:f9:a6:37:19:d9:
                    86:8a:5a:0b:0f:29:e0:06:a5:b0:46:aa:5d:12:3d:
                    bd:fb:da:13:c5:1e:50:d8:58:52:5c:d0:48:83:6d:
                    c9:1e:9a:2c:83:fd:0b:f9:76:8c:b6:ad:6b:89:f6:
                    85:e9:ae:5e:77:1e:01:e1:54:a1:2e:06:57:77:01:
                    ef:55:16:5a:df:98:f0:76:3f:dd:26:c7:29:94:95:
                    95:85:6d:9d:33:98:3c:b8:f8:64:da:ff:25:15:70:
                    b4:ec:ea:e8:e6:ac:d1:da:1e:fb:ff:0c:24:14:15:
                    66:d8:8d:06:4c:6c:22:6e:88:2b:be:cc:4f:b1:a4:
                    d6:1f:d0:b1:9c:85:85:f0:26:34:68:a0:ca:7b:c9:
                    a6:ed:7f:a2:6f:ea:85:8b:fa:7d:98:ee:a3:b8:86:
                    b6:25:ef:a9:77:55:1f:de:9d:ea:d2:da:e1:9f:dc:
                    5d:88:59:87:92:76:82:77:64:2c:e3:d3:5f:06:91:
                    e9:1a:28:2c:62:66:da:11:ef:ca:5d:e7:b5:29:d6:
                    fd:97:cd:81:32:1d:50:e0:87:f4:61:4c:30:62:38:
                    48:6c:80:55:75:f4:50:8c:5e:ce:75:a1:7d:7c:76:
                    52:af:b1:12:03:4d:f4:c3:b0:20:45:78:7e:62:1c:
                    b1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:93:83:40:2E:00:D6:C3:CA:CC:E3:A4:53:FA:80:B3:52:C7:B3:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/30c2c6c8-d695-3d54-b0c3-7bad94805e5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:5b:91:e2:dc:51:cd:68:93:fc:e0:f0:93:e7:83:1b:91:93:
         bf:fb:d0:fa:6f:51:83:54:40:3b:25:a2:b5:57:df:6c:c8:0a:
         47:01:70:27:4d:70:27:40:e9:f1:b9:7d:08:d0:99:ee:9f:24:
         6d:4b:f4:a8:62:e4:69:fe:32:5f:dc:f2:ef:bd:ef:c8:9c:78:
         fe:98:b4:f6:cb:64:ff:4d:2e:a4:a2:c2:12:4e:ad:27:98:f9:
         71:23:ef:48:c8:c2:33:27:9e:44:d8:fa:3a:c5:3c:77:ab:38:
         3a:d2:49:9f:e6:20:d1:bf:be:c8:24:58:fa:d7:83:b7:6b:cc:
         29:17:84:31:01:1f:ef:57:77:0f:4d:ef:78:72:ea:21:d1:f8:
         da:61:13:f0:76:63:95:ab:af:12:7f:88:8d:67:14:16:bb:88:
         45:36:e5:4b:e3:fc:61:c2:10:59:cd:b4:a3:7c:68:c0:c6:82:
         65:24:61:c3:fd:55:cb:b6:78:e9:91:4b:25:75:ed:8e:47:0f:
         64:03:57:d6:76:ec:24:cb:ab:10:78:b5:80:4f:93:4b:6b:09:
         8b:6c:c8:29:6d:b5:9b:fc:96:14:af:05:5d:2e:b7:f0:d5:98:
         e0:f2:20:b6:62:44:38:e2:e3:dc:83:1d:9c:c0:01:d8:0a:ce:
         5c:50:67:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHtXazutlMPz804AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2
OWQxMB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk
Mjc5M2JmNmEtZDEzOC00MjQ3LTg1NzAtMWY0ZTdjYzQwNWNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6EqxjBUy4JR+aY3GdmGiloLDyngBqWwRqpd
Ej29+9oTxR5Q2FhSXNBIg23JHposg/0L+XaMtq1rifaF6a5edx4B4VShLgZXdwHv
VRZa35jwdj/dJscplJWVhW2dM5g8uPhk2v8lFXC07Oro5qzR2h77/wwkFBVm2I0G
TGwibogrvsxPsaTWH9CxnIWF8CY0aKDKe8mm7X+ib+qFi/p9mO6juIa2Je+pd1Uf
3p3q0trhn9xdiFmHknaCd2Qs49NfBpHpGigsYmbaEe/KXee1Kdb9l82BMh1Q4If0
YUwwYjhIbIBVdfRQjF7OdaF9fHZSr7ESA030w7AgRXh+YhyxEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFWTg0AuANbDyszjpFP6gLNSx7NnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk
NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMzBjMmM2YzgtZDY5NS0z
ZDU0LWIwYzMtN2JhZDk0ODA1ZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw
MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh
NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0
M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQAToMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABxbkeLcUc1ok/zg8JPngxuRk7/70PpvUYNUQDslorVX32zICkcBcCdN
cCdA6fG5fQjQme6fJG1L9Khi5Gn+Ml/c8u+978iceP6YtPbLZP9NLqSiwhJOrSeY
+XEj70jIwjMnnkTY+jrFPHerODrSSZ/mING/vsgkWPrXg7drzCkXhDEBH+9Xdw9N
73hy6iHR+NphE/B2Y5WrrxJ/iI1nFBa7iEU25Uvj/GHCEFnNtKN8aMDGgmUkYcP9
Vcu2eOmRSyV17Y5HD2QDV9Z27CTLqxB4tYBPk0trCYtsyClttZv8lhSvBV0ut/DV
mODyILZiRDji49yDHZzAAdgKzlxQZ5o=
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:14:49 2026 by rpki-client