Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/8168b368-620e-38d3-8bcc-8fce21790e7d.roa
File:                     8168b368-620e-38d3-8bcc-8fce21790e7d.roa (raw, json)
Hash identifier:          StLchn7A2Qy3z/4wJF4ktPRwfWMYeqlYv9JZnBeAX5o=
Subject key identifier:   4C:73:3E:35:59:68:BD:1C:EB:AA:51:97:EF:AA:68:2E:1E:FA:D5:9F
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F4328584EA78707C0F7DB0CB049737460
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/8168b368-620e-38d3-8bcc-8fce21790e7d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     2559
IP address blocks:        198.241.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:07:c0:f7:db:0c:b0:49:73:74:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fb1a4188-d76a-42bb-b078-61791b4a98a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:28:db:cb:fb:74:c1:84:fa:bd:dd:ab:58:cc:
                    25:fd:7d:24:79:65:bb:b1:a0:d4:36:b6:96:ec:55:
                    13:61:53:50:7e:c1:1a:e3:59:52:98:41:4b:fd:19:
                    fa:e4:f8:04:52:be:46:b8:07:15:1d:16:53:6a:0c:
                    62:6e:64:f2:a6:77:66:f4:75:94:ea:56:a4:f2:3a:
                    60:c0:ba:3f:16:33:1c:d5:76:1a:2c:1b:d0:46:65:
                    41:f1:63:e6:e5:cd:07:27:38:65:09:5c:8a:9f:78:
                    71:98:e1:48:7a:6e:20:d8:97:30:fc:37:b4:13:0e:
                    44:5b:6d:70:df:84:a4:d9:d2:a2:6c:cf:c1:19:fe:
                    d7:26:5d:dc:d5:29:15:61:69:fe:97:13:0d:61:0e:
                    48:9e:6e:7c:e0:ae:00:97:32:aa:a6:e6:67:10:7b:
                    20:df:79:42:f6:3e:f0:5c:38:90:62:ac:16:dd:95:
                    78:d1:fa:12:79:d4:16:5d:cd:f9:1b:e5:2c:80:75:
                    18:84:1e:ab:94:06:d8:be:0f:79:98:84:fd:d6:7b:
                    77:70:96:7a:a5:ce:aa:97:42:68:bd:83:97:5d:1e:
                    91:58:26:ed:cb:e9:1d:a5:b8:14:92:53:e9:a7:b9:
                    5c:81:38:4a:dc:30:1f:f8:43:29:55:5c:5f:93:7f:
                    f1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:73:3E:35:59:68:BD:1C:EB:AA:51:97:EF:AA:68:2E:1E:FA:D5:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/8168b368-620e-38d3-8bcc-8fce21790e7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:2b:a9:a3:78:b1:93:63:f9:90:9b:97:f3:30:7c:97:08:d2:
         f9:41:0f:10:78:10:0f:ff:92:11:8b:70:81:6b:6a:34:05:6b:
         6b:23:9a:f8:cc:ef:cb:60:62:b4:50:6d:cc:b8:85:5c:71:67:
         42:a7:87:04:e2:e2:28:cd:d1:8e:23:28:f5:41:b3:08:24:82:
         7d:ec:90:07:e0:68:67:9c:76:8c:b9:bb:8b:cf:a7:c8:72:7c:
         4d:a4:fd:04:66:04:a3:70:74:e6:55:ed:e3:88:ec:8c:32:0b:
         74:8a:e3:67:c2:03:fb:33:2e:79:d9:f2:c8:4b:83:37:72:38:
         af:ee:b3:2c:59:bb:7d:b7:ee:3e:19:6a:3f:d1:44:fc:aa:55:
         77:cf:76:31:35:40:81:9a:00:5b:76:f0:2d:19:ff:f8:6e:df:
         c3:45:cf:d6:34:9a:67:47:25:e9:14:8f:40:a8:9e:51:6c:06:
         82:99:d9:11:0a:6b:11:71:a7:f8:f6:06:61:fc:db:81:c4:67:
         49:08:08:e1:c9:a1:0a:cf:57:fb:aa:1f:56:90:30:0d:51:b3:
         36:77:72:85:1a:94:d4:ec:2b:fc:9c:4e:35:bd:ec:bb:f3:d7:
         34:31:a9:4f:35:58:a0:ec:10:53:75:6f:0c:33:cc:5d:5c:8b:
         df:3e:38:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhwfA99sMsElzdGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx
ODQyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ZmIxYTQxODgtZDc2YS00MmJiLWIwNzgtNjE3OTFiNGE5OGExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyjby/t0wYT6vd2rWMwl/X0keWW7saDUNraW
7FUTYVNQfsEa41lSmEFL/Rn65PgEUr5GuAcVHRZTagxibmTypndm9HWU6lak8jpg
wLo/FjMc1XYaLBvQRmVB8WPm5c0HJzhlCVyKn3hxmOFIem4g2Jcw/De0Ew5EW21w
34Sk2dKibM/BGf7XJl3c1SkVYWn+lxMNYQ5Inm584K4AlzKqpuZnEHsg33lC9j7w
XDiQYqwW3ZV40foSedQWXc35G+UsgHUYhB6rlAbYvg95mIT91nt3cJZ6pc6ql0Jo
vYOXXR6RWCbty+kdpbgUklPpp7lcgThK3DAf+EMpVVxfk3/x/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFExzPjVZaL0c66pRl++qaC4e+tWfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2
NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvODE2OGIzNjgtNjIwZS0z
OGQzLThiY2MtOGZjZTIxNzkwZTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1
ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1
MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl
NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvGqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG0rqaN4sZNj+ZCbl/MwfJcI0vlBDxB4EA//khGLcIFrajQFa2sjmvjM
78tgYrRQbcy4hVxxZ0KnhwTi4ijN0Y4jKPVBswgkgn3skAfgaGecdoy5u4vPp8hy
fE2k/QRmBKNwdOZV7eOI7IwyC3SK42fCA/szLnnZ8shLgzdyOK/usyxZu3237j4Z
aj/RRPyqVXfPdjE1QIGaAFt28C0Z//hu38NFz9Y0mmdHJekUj0ConlFsBoKZ2REK
axFxp/j2BmH824HEZ0kICOHJoQrPV/uqH1aQMA1RszZ3coUalNTsK/ycTjW97Lvz
1zQxqU81WKDsEFN1bwwzzF1ci98+OCE=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:28:35 2026 by rpki-client