Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/042c0543-f894-3817-81f6-0864e24dd6a1.roa
File:                     042c0543-f894-3817-81f6-0864e24dd6a1.roa (raw, json)
Hash identifier:          9dvngjSTXkaHxK1b6JIZ3B/dwtIpz9Z6kPRNT5lCz2Q=
Subject key identifier:   2D:C9:61:AC:DF:E6:69:EB:63:91:1C:78:71:95:59:52:25:81:DC:59
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584E1E4479B2A32FCECD403761AC
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/042c0543-f894-3817-81f6-0864e24dd6a1.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     17359
IP address blocks:        199.200.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:79:b2:a3:2f:ce:cd:40:37:61:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=886a36d4-39b8-4be2-b6f1-d9c9c706ba61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bd:d2:60:20:61:90:f5:e4:7f:33:b0:5e:1c:
                    94:0c:38:41:c6:d6:f7:45:22:89:b6:99:19:2c:43:
                    0c:53:0e:84:83:82:05:ce:75:4d:af:f8:ca:7a:4b:
                    bb:d1:2d:8a:39:d1:34:4e:57:5f:ce:aa:3b:2d:86:
                    0a:1a:9e:36:9c:c2:32:9c:f9:7e:11:c7:ca:ca:d6:
                    cd:be:c0:7c:5d:16:5a:7d:ca:11:c1:1c:86:51:0c:
                    af:c3:13:9d:b9:92:0c:8f:44:1a:6a:20:ba:13:c1:
                    0c:e5:68:57:d9:1a:81:35:e2:e5:62:19:de:a9:8e:
                    14:35:8b:7b:c1:b4:86:26:4e:5a:9e:ae:7d:f3:74:
                    1c:14:91:b0:2d:02:cb:ed:3e:d2:6d:16:4a:e2:b3:
                    f9:a3:d6:78:7f:61:6a:9d:e3:cc:3b:50:bc:ac:04:
                    9d:4d:38:ef:01:93:81:9c:5a:35:79:18:9f:3d:6f:
                    9a:32:77:0b:45:e4:53:2f:61:f9:d0:4f:47:8a:0d:
                    cd:72:d2:f1:87:91:99:f0:28:3f:bc:a3:53:0d:15:
                    1f:94:9b:36:6b:f2:b4:db:fa:38:3f:1e:91:30:ae:
                    31:d0:f9:8a:d5:b8:64:0b:e2:ac:90:28:18:81:a4:
                    85:c2:78:70:2c:14:c4:80:fa:07:7e:7f:6c:37:5b:
                    73:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C9:61:AC:DF:E6:69:EB:63:91:1C:78:71:95:59:52:25:81:DC:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/042c0543-f894-3817-81f6-0864e24dd6a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.200.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:c0:3a:59:06:29:52:6a:72:42:50:13:28:4a:81:5a:24:c4:
         17:fa:76:f7:62:98:5b:a6:8e:e1:4b:b7:af:2c:9d:d2:43:99:
         f2:6c:ec:39:22:9c:29:7e:4c:e2:49:20:d5:5c:dc:46:40:3f:
         72:cd:7c:1c:19:69:7e:1b:f5:f0:6b:88:f0:6c:49:b0:3d:51:
         fd:aa:c7:75:e4:53:06:4a:3e:1c:35:0e:72:6e:34:a8:13:c3:
         31:f5:52:25:f7:c6:00:4a:43:90:b4:3a:fa:c1:d8:10:32:89:
         90:99:6a:7e:2c:d2:6b:3c:7f:f0:d1:cc:f6:31:82:a8:43:54:
         b4:a7:47:a0:27:96:8c:3f:12:0b:c6:a2:58:e5:ab:e7:81:82:
         ef:de:5d:24:b2:df:57:51:8a:05:01:87:3e:d8:89:b9:4a:9f:
         70:cf:79:f9:55:1b:72:4f:cb:0d:a9:02:c4:b1:a4:2a:08:58:
         8c:a6:51:d2:9e:22:8a:85:8c:9a:44:da:de:c3:59:eb:48:22:
         a7:88:fc:92:a3:81:43:82:d4:cf:2d:fd:f2:33:94:ee:c0:87:
         6d:65:18:f6:44:83:fa:64:b6:7c:1d:68:f7:04:80:cc:06:77:
         cc:af:ca:27:c4:d6:92:f5:44:b5:74:3a:75:ed:49:67:05:dd:
         b2:32:68:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRHmyoy/OzUA3YawwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk
ODg2YTM2ZDQtMzliOC00YmUyLWI2ZjEtZDljOWM3MDZiYTYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir3SYCBhkPXkfzOwXhyUDDhBxtb3RSKJtpkZ
LEMMUw6Eg4IFznVNr/jKeku70S2KOdE0Tldfzqo7LYYKGp42nMIynPl+EcfKytbN
vsB8XRZafcoRwRyGUQyvwxOduZIMj0QaaiC6E8EM5WhX2RqBNeLlYhneqY4UNYt7
wbSGJk5anq5983QcFJGwLQLL7T7SbRZK4rP5o9Z4f2FqnePMO1C8rASdTTjvAZOB
nFo1eRifPW+aMncLReRTL2H50E9Hig3NctLxh5GZ8Cg/vKNTDRUflJs2a/K02/o4
Px6RMK4x0PmK1bhkC+KskCgYgaSFwnhwLBTEgPoHfn9sN1tzKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC3JYazf5mnrY5EceHGVWVIlgdxZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMDQyYzA1NDMtZjg5NC0z
ODE3LTgxZjYtMDg2NGUyNGRkNmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8hiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGDAOlkGKVJqckJQEyhKgVokxBf6dvdimFumjuFLt68sndJDmfJs7Dki
nCl+TOJJINVc3EZAP3LNfBwZaX4b9fBriPBsSbA9Uf2qx3XkUwZKPhw1DnJuNKgT
wzH1UiX3xgBKQ5C0OvrB2BAyiZCZan4s0ms8f/DRzPYxgqhDVLSnR6Anlow/EgvG
oljlq+eBgu/eXSSy31dRigUBhz7YiblKn3DPeflVG3JPyw2pAsSxpCoIWIymUdKe
IoqFjJpE2t7DWetIIqeI/JKjgUOC1M8t/fIzlO7Ah21lGPZEg/pktnwdaPcEgMwG
d8yvyifE1pL1RLV0OnXtSWcF3bIyaKY=
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:36:42 2026 by rpki-client