Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/3c75b77c-ad4f-3130-b53f-661dcb9d04c5.roa
File:                     3c75b77c-ad4f-3130-b53f-661dcb9d04c5.roa (raw, json)
Hash identifier:          XkgSpWqfq/8sgMNSQCE6rwV8iNSMdmmEEivwMWoaPRI=
Subject key identifier:   67:0F:D3:02:C8:D7:C2:9E:77:D8:CB:B4:45:F5:E0:FA:33:0B:28:EF
Certificate issuer:       /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial:       010D0C9F4328584F4975E9359D989E3DA1CE7580
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/3c75b77c-ad4f-3130-b53f-661dcb9d04c5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     13237
IP address blocks:        199.79.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:e9:35:9d:98:9e:3d:a1:ce:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fe09f710-9eb9-4506-836b-30576eeac98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c9:61:5a:b1:6b:43:a1:db:ed:ae:86:82:b6:
                    f6:3c:15:2e:2e:ef:88:a1:2a:85:a2:f7:09:b5:be:
                    13:5a:43:09:f2:e6:d4:d8:d8:74:57:8f:22:5e:f4:
                    e8:76:43:f4:ba:3c:ab:04:ca:8c:9b:03:2c:4a:27:
                    bf:df:b4:dd:d3:f8:57:56:89:4d:5a:ef:14:b2:1e:
                    0d:8a:41:80:0f:3f:de:31:e9:46:9f:53:ff:4b:86:
                    b7:53:0e:46:45:67:a1:61:0a:56:c0:d0:58:78:33:
                    f3:6f:2f:75:a1:f4:df:f6:05:70:70:16:02:34:f8:
                    58:8d:15:78:7c:ea:fc:ff:47:13:45:4c:fe:7e:f7:
                    e5:6f:53:0c:49:b6:95:b1:c0:0c:e0:c2:c2:fc:49:
                    c9:5e:9e:ea:eb:a0:8a:87:a8:f2:55:bf:aa:d6:7a:
                    d9:3e:bd:23:0a:58:d3:83:a1:e6:bb:61:27:b0:c3:
                    d1:1a:af:cc:fb:c2:cb:62:27:fa:18:ab:0e:92:be:
                    fb:29:23:f9:40:14:25:6c:16:9e:81:26:aa:9c:45:
                    87:9b:30:68:ca:f6:af:c7:45:08:8a:3a:e5:a1:fc:
                    e7:8a:72:85:ba:38:37:7b:0f:ba:22:45:12:e0:54:
                    e5:e0:5f:10:63:e8:04:86:a4:95:00:dc:bc:4c:45:
                    1a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0F:D3:02:C8:D7:C2:9E:77:D8:CB:B4:45:F5:E0:FA:33:0B:28:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/3c75b77c-ad4f-3130-b53f-661dcb9d04c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl

            X509v3 Authority Key Identifier:
                keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.79.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:5d:b9:f1:03:b8:04:10:ab:bb:9d:d9:07:9c:06:8a:7f:2d:
         54:ef:b2:bb:b1:15:d6:75:41:fe:3c:e5:39:e0:18:8a:79:c1:
         e4:91:8d:72:cc:58:cc:4a:fc:b3:21:77:c5:9f:dc:c9:4e:31:
         13:84:73:23:73:61:86:9a:2b:d6:c9:11:3b:17:62:3d:6b:2c:
         78:7f:86:24:7f:28:61:de:b5:43:3d:62:b9:5c:4d:2b:6e:c7:
         66:c2:c0:46:84:d3:2c:5e:ed:29:29:0b:b3:03:31:17:53:bf:
         32:5a:4e:1a:44:b8:e2:cd:95:2d:03:de:22:82:45:95:66:41:
         e2:a1:7f:2e:2a:88:36:6a:04:9a:34:b6:70:55:10:4c:85:48:
         6e:38:38:a1:d3:0e:37:e3:dc:47:b0:96:18:b5:6c:d2:60:cc:
         76:66:f2:1e:14:e8:a8:07:98:41:10:e4:b2:c2:4a:04:d7:53:
         34:18:eb:76:d8:8e:8a:fc:d0:c9:d8:aa:09:f0:9b:3d:b1:93:
         66:9b:5c:2b:32:0c:23:1e:8c:0c:04:c2:2d:8f:c0:65:06:ee:
         45:a7:f5:9a:b9:68:82:cc:08:8b:0d:62:dd:1d:31:77:31:ad:
         5f:dd:84:a3:5d:75:ea:da:dd:eb:6d:18:6a:8d:1b:5d:77:70:
         4e:7b:a1:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdek1nZiePaHOdYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzRiNzE1YjktMjExZi00YmY3LWFjZTktMDNiMzQ0Njc3
NWFiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZmUwOWY3MTAtOWViOS00NTA2LTgzNmItMzA1NzZlZWFjOThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8lhWrFrQ6Hb7a6Ggrb2PBUuLu+IoSqFovcJ
tb4TWkMJ8ubU2Nh0V48iXvTodkP0ujyrBMqMmwMsSie/37Td0/hXVolNWu8Ush4N
ikGADz/eMelGn1P/S4a3Uw5GRWehYQpWwNBYeDPzby91ofTf9gVwcBYCNPhYjRV4
fOr8/0cTRUz+fvflb1MMSbaVscAM4MLC/EnJXp7q66CKh6jyVb+q1nrZPr0jCljT
g6Hmu2EnsMPRGq/M+8LLYif6GKsOkr77KSP5QBQlbBaegSaqnEWHmzBoyvavx0UI
ijrlofzninKFujg3ew+6IkUS4FTl4F8QY+gEhqSVANy8TEUaEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGcP0wLI18Ked9jLtEX14PozCyjvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3
MTViOS0yMTFmLTRiZjctYWNlOS0wM2IzNDQ2Nzc1YWIvM2M3NWI3N2MtYWQ0Zi0z
MTMwLWI1M2YtNjYxZGNiOWQwNGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzRiNzE1YjktMjExZi00YmY3LWFj
ZTktMDNiMzQ0Njc3NWFiLzM0YjcxNWI5LTIxMWYtNGJmNy1hY2U5LTAzYjM0NDY3
NzVhYi5jcmwwHwYDVR0jBBgwFoAUogYtjI8Exo63AC0EODp3n4zrZ6wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3MTViOS0yMTFmLTRiZjctYWNlOS0wM2Iz
NDQ2Nzc1YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0/3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABVdufEDuAQQq7ud2QecBop/LVTvsruxFdZ1Qf485TngGIp5weSRjXLM
WMxK/LMhd8Wf3MlOMROEcyNzYYaaK9bJETsXYj1rLHh/hiR/KGHetUM9YrlcTStu
x2bCwEaE0yxe7SkpC7MDMRdTvzJaThpEuOLNlS0D3iKCRZVmQeKhfy4qiDZqBJo0
tnBVEEyFSG44OKHTDjfj3Eewlhi1bNJgzHZm8h4U6KgHmEEQ5LLCSgTXUzQY63bY
jor80MnYqgnwmz2xk2abXCsyDCMejAwEwi2PwGUG7kWn9Zq5aILMCIsNYt0dMXcx
rV/dhKNddera3ettGGqNG113cE57oS0=
-----END CERTIFICATE-----
Generated at Mon Sep 28 10:45:01 2026 by rpki-client