Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/4b29a8d9-ff4f-39a3-8c69-170ef544ea4f.roa
File:                     4b29a8d9-ff4f-39a3-8c69-170ef544ea4f.roa (raw, json)
Hash identifier:          dSzrD2WlB7MGbLDk3z7vW29Ia5seoLEZk3vOahuAHG8=
Subject key identifier:   B4:7A:DB:4D:E7:B9:96:84:C5:1E:6B:8C:67:FD:3B:19:F6:1A:ED:48
Certificate issuer:       /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
Certificate serial:       010D0C9F4328584EA0152CFB3926C6CE5E283B1A
Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/4b29a8d9-ff4f-39a3-8c69-170ef544ea4f.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        199.187.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:2c:fb:39:26:c6:ce:5e:28:3b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=7ddec533-9cad-4c84-b36b-6c1ed6e6d7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:17:a6:f2:c3:a1:41:49:fd:73:a9:54:eb:ab:
                    a2:2f:a5:a2:47:13:74:20:64:f3:b3:34:fd:39:35:
                    68:bd:2e:2a:d3:10:81:32:19:7c:aa:4a:8c:cd:be:
                    ad:d9:07:21:8e:bb:f9:6a:67:3b:39:94:ce:f3:cb:
                    ee:b2:d2:d4:ff:87:f3:eb:bc:b0:96:b7:99:d6:7c:
                    f5:26:ef:8e:d0:7b:92:95:5b:3d:6d:69:3b:d9:c9:
                    34:a6:c0:84:21:f5:77:52:fd:fe:6e:6d:8f:07:fd:
                    d6:2d:f9:4a:ba:87:8d:d1:fd:c1:62:97:94:18:c9:
                    5a:12:76:52:35:c4:d3:77:b6:b6:70:40:25:03:e7:
                    72:65:09:1a:b8:75:2a:f7:48:03:5c:bf:70:e3:4a:
                    59:93:78:f4:ed:48:e0:b9:88:03:96:ff:92:9a:32:
                    bd:a4:32:a1:d8:33:34:2e:1c:96:c1:31:03:86:74:
                    46:dd:88:54:d0:ae:7b:2e:fd:57:03:e2:ca:5f:db:
                    4b:4c:ac:35:e8:39:3f:f5:b4:5b:29:d9:9e:fc:d9:
                    ae:23:b7:f9:45:30:91:f9:d2:d9:16:d3:41:a6:b8:
                    9d:08:02:6b:64:a4:d6:89:7c:98:9d:9d:91:07:06:
                    ea:7d:99:af:e3:97:61:8b:38:ce:5f:bc:52:3c:16:
                    f6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7A:DB:4D:E7:B9:96:84:C5:1E:6B:8C:67:FD:3B:19:F6:1A:ED:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/4b29a8d9-ff4f-39a3-8c69-170ef544ea4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl

            X509v3 Authority Key Identifier:
                keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:34:84:23:17:71:b9:8d:66:e5:b0:17:eb:ce:c5:86:a1:9c:
         64:3d:66:c7:5a:ea:3d:d5:9f:2e:39:57:85:97:18:66:55:df:
         6d:12:8c:d4:2c:a7:4f:4d:b1:16:31:5c:11:84:15:54:10:15:
         e8:bc:55:37:0b:83:d2:f9:75:ac:79:2b:f5:47:c9:db:c5:87:
         0a:bc:5b:56:8a:3d:aa:7f:65:fc:06:3d:15:3a:16:66:06:96:
         5f:b9:67:22:66:6f:c8:8f:ce:cc:7f:cf:51:38:92:9c:52:e1:
         b8:19:e7:7d:5a:61:06:91:da:e9:ad:55:c0:64:56:83:71:92:
         c7:f2:2f:4b:57:ab:87:be:96:da:f0:69:ad:a3:96:7e:f7:73:
         59:18:79:b3:1a:34:96:45:8b:30:41:23:dd:0f:a3:56:f2:0e:
         a5:00:60:0a:0f:8b:71:40:95:09:dd:89:60:7d:94:f2:1e:70:
         e8:5a:2d:cd:d5:3f:ae:f3:0b:11:fa:c8:e2:8f:10:27:a8:0c:
         d3:36:cb:a2:e0:89:96:cb:59:60:f7:06:2e:76:b2:8c:4a:65:
         91:52:3d:4f:b5:41:34:e7:c4:95:f0:33:e0:6e:64:d9:e4:70:
         23:b8:16:1b:88:33:f6:11:6c:1d:09:fd:3f:a1:10:fe:fe:9f:
         5b:e8:bd:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFSz7OSbGzl4oOxowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWNmNDM1YzAtOWQyOC00NzdhLTkwYTktMWI0ZmQ3NWNk
YTc2MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk
N2RkZWM1MzMtOWNhZC00Yzg0LWIzNmItNmMxZWQ2ZTZkN2I0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxem8sOhQUn9c6lU66uiL6WiRxN0IGTzszT9
OTVovS4q0xCBMhl8qkqMzb6t2Qchjrv5amc7OZTO88vustLU/4fz67ywlreZ1nz1
Ju+O0HuSlVs9bWk72ck0psCEIfV3Uv3+bm2PB/3WLflKuoeN0f3BYpeUGMlaEnZS
NcTTd7a2cEAlA+dyZQkauHUq90gDXL9w40pZk3j07UjguYgDlv+SmjK9pDKh2DM0
LhyWwTEDhnRG3YhU0K57Lv1XA+LKX9tLTKw16Dk/9bRbKdme/NmuI7f5RTCR+dLZ
FtNBpridCAJrZKTWiXyYnZ2RBwbqfZmv45dhizjOX7xSPBb2cwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLR6203nuZaExR5rjGf9Oxn2Gu1IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0
MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRmZDc1Y2RhNzYvNGIyOWE4ZDktZmY0Zi0z
OWEzLThjNjktMTcwZWY1NDRlYTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWNmNDM1YzAtOWQyOC00NzdhLTkw
YTktMWI0ZmQ3NWNkYTc2LzFjZjQzNWMwLTlkMjgtNDc3YS05MGE5LTFiNGZkNzVj
ZGE3Ni5jcmwwHwYDVR0jBBgwFoAU1T8UX0FTWvBBwtK/fTtQ5jUy/9QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRm
ZDc1Y2RhNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7uqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACA0hCMXcbmNZuWwF+vOxYahnGQ9Zsda6j3Vny45V4WXGGZV320SjNQs
p09NsRYxXBGEFVQQFei8VTcLg9L5dax5K/VHydvFhwq8W1aKPap/ZfwGPRU6FmYG
ll+5ZyJmb8iPzsx/z1E4kpxS4bgZ531aYQaR2umtVcBkVoNxksfyL0tXq4e+ltrw
aa2jln73c1kYebMaNJZFizBBI90Po1byDqUAYAoPi3FAlQndiWB9lPIecOhaLc3V
P67zCxH6yOKPECeoDNM2y6LgiZbLWWD3Bi52soxKZZFSPU+1QTTnxJXwM+BuZNnk
cCO4FhuIM/YRbB0J/T+hEP7+n1vovWs=
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:30:52 2026 by rpki-client