Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/fe655c59-f54b-337c-afb0-edb608a6ba8d.roa
File:                     fe655c59-f54b-337c-afb0-edb608a6ba8d.roa (raw, json)
Hash identifier:          fGs1Ho8r04A05YOvpnL2FYlzjIoH9lR67vLjq6uM6n4=
Subject key identifier:   89:00:58:D9:41:A2:60:F7:E1:09:3E:0C:1F:EE:C1:7E:8E:7C:20:26
Certificate issuer:       /CN=21a0e036-e4bb-4abf-8ede-8ad9a213f91a
Certificate serial:       010D0C9F4328584E253F035CFB9480EB4A86E240
Authority key identifier: 2F:DA:DD:17:BF:CA:37:D5:D7:4F:CD:E5:B1:E7:2E:BB:C2:86:87:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/fe655c59-f54b-337c-afb0-edb608a6ba8d.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     19449
IP address blocks:        198.99.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:03:5c:fb:94:80:eb:4a:86:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21a0e036-e4bb-4abf-8ede-8ad9a213f91a
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=73df8c4e-45d4-44cf-abb6-a49b9470fe53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b5:64:4a:fd:ef:08:98:83:2f:a0:24:47:9e:
                    3f:ed:c1:04:0e:13:49:f1:92:d5:7b:ff:97:21:09:
                    b2:29:0b:ca:52:9d:47:21:e1:95:1c:83:ff:1e:dc:
                    6c:3c:e3:24:a6:16:05:fa:4c:48:30:f1:39:5f:19:
                    49:a8:b1:de:54:ec:af:7c:6d:3f:40:1a:ec:9a:4b:
                    71:fb:83:e8:d7:cd:37:a4:7b:7f:e9:45:b3:3b:1c:
                    0e:49:c6:1d:2f:3c:ef:fa:71:90:9a:61:09:ec:1d:
                    39:0c:44:af:1a:28:0a:d7:db:41:5d:8d:8e:e7:1b:
                    91:e4:78:82:dd:36:9e:b6:f6:40:df:08:0a:76:1c:
                    a4:ac:b7:91:c1:92:34:1a:63:42:ed:ec:06:a2:b7:
                    34:c4:4a:e5:d6:70:11:8b:a3:02:f1:0f:e3:6b:c3:
                    59:42:da:47:74:57:b2:c0:a0:4c:65:58:a1:cc:97:
                    bc:43:2c:7d:ff:73:ca:48:05:23:5b:d0:be:9b:9d:
                    0f:81:2b:cd:ff:6e:24:14:9a:63:23:b0:34:54:22:
                    0f:b5:2a:c8:05:55:73:c2:4f:31:ae:0a:52:1d:f7:
                    29:86:84:5a:76:84:c4:a5:d1:f9:14:6c:c0:95:e9:
                    1c:6b:f1:8c:d0:6d:ee:e6:22:67:71:c8:f4:c2:3f:
                    4b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:00:58:D9:41:A2:60:F7:E1:09:3E:0C:1F:EE:C1:7E:8E:7C:20:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/fe655c59-f54b-337c-afb0-edb608a6ba8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.crl

            X509v3 Authority Key Identifier:
                keyid:2F:DA:DD:17:BF:CA:37:D5:D7:4F:CD:E5:B1:E7:2E:BB:C2:86:87:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.99.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:af:1b:43:e1:a0:27:14:c2:79:d0:2c:b9:6a:61:88:a5:65:
         56:a1:a2:30:10:3b:dd:c8:d2:a0:92:39:ef:14:75:c9:be:78:
         c3:c4:fc:ce:5b:36:32:f8:c0:8a:c9:14:6a:8f:0c:52:d7:b8:
         67:0a:cb:37:7e:d3:52:b5:a5:d6:95:53:90:ba:0a:e2:29:e1:
         d7:d7:c2:a1:7d:f3:56:4e:b1:ba:51:aa:3c:84:61:2b:5f:6d:
         87:cf:db:70:48:50:78:1c:53:af:7d:b1:d5:38:dc:c7:78:4d:
         31:fa:09:4f:c3:82:b5:87:01:67:6a:d5:00:02:f9:43:3c:6e:
         d7:f5:d0:8f:dc:fa:5d:4d:67:f0:b4:69:80:29:c6:c8:30:93:
         28:0f:98:4b:13:87:b7:d1:08:b7:8b:de:ce:62:35:f7:84:e4:
         0d:c3:21:ac:c8:a7:a1:a5:7a:2d:c2:bc:e4:16:69:03:be:55:
         37:1d:1b:ee:09:57:2d:a9:16:41:04:3d:71:c1:d0:b3:fc:76:
         dd:ee:7d:f6:8f:44:79:59:a8:08:d6:88:54:0f:e2:ab:00:51:
         58:59:5c:60:0a:8a:5a:b7:b2:1d:5e:38:4f:77:97:8a:1f:19:
         84:b6:b7:43:86:a5:a7:03:6f:29:68:7c:a8:70:78:bc:af:c1:
         05:0a:84:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPwNc+5SA60qG4kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjFhMGUwMzYtZTRiYi00YWJmLThlZGUtOGFkOWEyMTNm
OTFhMB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk
NzNkZjhjNGUtNDVkNC00NGNmLWFiYjYtYTQ5Yjk0NzBmZTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLVkSv3vCJiDL6AkR54/7cEEDhNJ8ZLVe/+X
IQmyKQvKUp1HIeGVHIP/HtxsPOMkphYF+kxIMPE5XxlJqLHeVOyvfG0/QBrsmktx
+4Po1803pHt/6UWzOxwOScYdLzzv+nGQmmEJ7B05DESvGigK19tBXY2O5xuR5HiC
3TaetvZA3wgKdhykrLeRwZI0GmNC7ewGorc0xErl1nARi6MC8Q/ja8NZQtpHdFey
wKBMZVihzJe8Qyx9/3PKSAUjW9C+m50PgSvN/24kFJpjI7A0VCIPtSrIBVVzwk8x
rgpSHfcphoRadoTEpdH5FGzAlekca/GM0G3u5iJnccj0wj9LFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIkAWNlBomD34Qk+DB/uwX6OfCAmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEw
ZTAzNi1lNGJiLTRhYmYtOGVkZS04YWQ5YTIxM2Y5MWEvZmU2NTVjNTktZjU0Yi0z
MzdjLWFmYjAtZWRiNjA4YTZiYThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFhMGUwMzYtZTRiYi00YWJmLThl
ZGUtOGFkOWEyMTNmOTFhLzIxYTBlMDM2LWU0YmItNGFiZi04ZWRlLThhZDlhMjEz
ZjkxYS5jcmwwHwYDVR0jBBgwFoAUL9rdF7/KN9XXT83lsecuu8KGhxMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEwZTAzNi1lNGJiLTRhYmYtOGVkZS04YWQ5
YTIxM2Y5MWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmNrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAKvG0PhoCcUwnnQLLlqYYilZVahojAQO93I0qCSOe8Udcm+eMPE/M5b
NjL4wIrJFGqPDFLXuGcKyzd+01K1pdaVU5C6CuIp4dfXwqF981ZOsbpRqjyEYStf
bYfP23BIUHgcU699sdU43Md4TTH6CU/DgrWHAWdq1QAC+UM8btf10I/c+l1NZ/C0
aYApxsgwkygPmEsTh7fRCLeL3s5iNfeE5A3DIazIp6Glei3CvOQWaQO+VTcdG+4J
Vy2pFkEEPXHB0LP8dt3uffaPRHlZqAjWiFQP4qsAUVhZXGAKilq3sh1eOE93l4of
GYS2t0OGpacDbylofKhweLyvwQUKhJo=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:24:34 2026 by rpki-client