Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/fbcea25a-49e3-304b-9a4f-e111e76c3329.roa
File:                     fbcea25a-49e3-304b-9a4f-e111e76c3329.roa (raw, json)
Hash identifier:          wObcLFm3q8N3CLe5XUgn/22hmCPYvgkqOEBaRSq4T2k=
Subject key identifier:   77:C1:32:6D:83:84:2C:83:CC:C5:46:4A:57:0C:DB:FE:38:AF:0F:04
Certificate issuer:       /CN=8d34ec60-03b0-4663-8748-fab291e36393
Certificate serial:       010D0C9F4328584E1B798E1FD0AFAFD29B94E0C0
Authority key identifier: 3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/fbcea25a-49e3-304b-9a4f-e111e76c3329.roa
Signing time:             Mon 08 Jun 2026 21:00:12 +0000
ROA not before:           Mon 08 Jun 2026 21:00:12 +0000
ROA not after:            Sun 06 Sep 2026 21:00:12 +0000
asID:                     395807
IP address blocks:        199.60.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:79:8e:1f:d0:af:af:d2:9b:94:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d34ec60-03b0-4663-8748-fab291e36393
        Validity
            Not Before: Jun  8 21:00:12 2026 GMT
            Not After : Sep  6 21:00:12 2026 GMT
        Subject: CN=6a022f29-4b1c-4fe5-9988-aaf35c7cddf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:28:f6:bd:31:99:b9:27:dc:0d:01:5d:bd:c1:
                    8d:71:f1:98:6e:ce:4c:b7:29:16:af:7e:09:ec:c5:
                    8a:72:7a:5c:1d:91:e8:cb:f9:ff:a5:07:b4:ce:81:
                    77:a4:de:81:50:e1:ef:92:8f:16:91:c3:07:82:97:
                    4d:7f:6e:f5:95:c5:25:8c:77:d2:4f:b1:30:e3:92:
                    6a:97:65:f6:8c:15:5c:e7:cc:db:39:75:0e:86:3f:
                    86:10:2c:80:c0:69:25:81:45:bd:99:03:66:7d:78:
                    6a:a3:3e:bf:c5:0b:85:9d:28:c2:02:25:a0:a1:fc:
                    76:ce:c0:73:c2:a1:96:37:fc:c6:46:bc:f8:de:82:
                    48:7f:f1:4b:7c:b3:50:5f:a1:63:02:8f:a3:74:4d:
                    8a:23:67:fc:d1:9b:77:a4:8c:76:2e:18:9f:45:00:
                    e4:6f:a9:75:7c:25:a3:fa:03:15:14:3d:4d:e0:af:
                    67:11:ca:0b:75:ad:ba:3e:bd:8f:72:09:76:e7:f9:
                    80:a4:07:89:6d:0e:e4:8e:ba:b0:5f:c3:b3:25:51:
                    1e:96:7d:41:fd:1e:e8:37:ed:18:98:96:6e:0d:d5:
                    80:ca:d8:e1:6d:7d:cf:85:f5:be:fd:d2:de:e1:35:
                    79:fa:38:48:57:29:6b:e2:15:e5:ea:e7:77:8a:5a:
                    61:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C1:32:6D:83:84:2C:83:CC:C5:46:4A:57:0C:DB:FE:38:AF:0F:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/fbcea25a-49e3-304b-9a4f-e111e76c3329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl

            X509v3 Authority Key Identifier:
                keyid:3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.60.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:97:74:22:de:69:1f:14:b5:95:87:4b:97:14:2b:c4:56:c7:
         5c:4c:b4:76:55:da:26:63:ab:12:01:3b:c2:4e:78:43:9c:f5:
         4b:9e:9c:f8:67:01:c3:62:08:28:c1:3f:34:92:8e:32:44:24:
         b9:6e:ee:33:54:bb:9b:cf:72:32:ab:fe:f6:95:11:a8:e3:2e:
         7d:2b:75:d3:5c:bc:b4:ed:7a:4a:d9:13:db:ee:17:24:d5:85:
         36:17:1e:7c:02:86:47:3b:e9:66:a8:e9:c7:16:88:f1:b0:fc:
         a6:de:f5:20:59:a4:7d:74:a3:29:a4:b3:cc:aa:94:13:58:5a:
         ad:c2:85:74:5b:51:25:1b:26:3f:d1:a9:fe:22:be:ad:8e:34:
         7a:39:c4:db:81:73:93:f7:15:e5:3e:27:f1:98:54:43:47:90:
         c4:5e:06:b3:4e:71:28:c4:a1:f1:f2:eb:a1:92:92:6d:60:1b:
         bd:06:ec:08:02:16:18:6f:1f:df:3e:04:b8:f8:62:ef:e7:a4:
         64:c5:0e:79:ae:e4:ac:12:17:04:13:a6:38:8a:be:da:08:63:
         7b:a6:ef:0f:03:9c:d8:50:41:32:56:0e:a0:ac:cc:d0:36:c6:
         dc:d2:f8:f2:4f:46:83:a4:df:d4:59:2d:94:1a:34:69:16:95:
         c9:0b:2f:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4beY4f0K+v0puU4MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGQzNGVjNjAtMDNiMC00NjYzLTg3NDgtZmFiMjkxZTM2
MzkzMB4XDTI2MDYwODIxMDAxMloXDTI2MDkwNjIxMDAxMlowLzEtMCsGA1UEAxMk
NmEwMjJmMjktNGIxYy00ZmU1LTk5ODgtYWFmMzVjN2NkZGYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyj2vTGZuSfcDQFdvcGNcfGYbs5MtykWr34J
7MWKcnpcHZHoy/n/pQe0zoF3pN6BUOHvko8WkcMHgpdNf271lcUljHfST7Ew45Jq
l2X2jBVc58zbOXUOhj+GECyAwGklgUW9mQNmfXhqoz6/xQuFnSjCAiWgofx2zsBz
wqGWN/zGRrz43oJIf/FLfLNQX6FjAo+jdE2KI2f80Zt3pIx2LhifRQDkb6l1fCWj
+gMVFD1N4K9nEcoLda26Pr2Pcgl25/mApAeJbQ7kjrqwX8OzJVEeln1B/R7oN+0Y
mJZuDdWAytjhbX3PhfW+/dLe4TV5+jhIVylr4hXl6ud3ilphvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHfBMm2DhCyDzMVGSlcM2/44rw8EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0
ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIyOTFlMzYzOTMvZmJjZWEyNWEtNDllMy0z
MDRiLTlhNGYtZTExMWU3NmMzMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzNGVjNjAtMDNiMC00NjYzLTg3
NDgtZmFiMjkxZTM2MzkzLzhkMzRlYzYwLTAzYjAtNDY2My04NzQ4LWZhYjI5MWUz
NjM5My5jcmwwHwYDVR0jBBgwFoAUPOGtxGz//2HSbXUTWaXyCk0Hhd0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDM0ZWM2MC0wM2IwLTQ2NjMtODc0OC1mYWIy
OTFlMzYzOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzyVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEWXdCLeaR8UtZWHS5cUK8RWx1xMtHZV2iZjqxIBO8JOeEOc9UuenPhn
AcNiCCjBPzSSjjJEJLlu7jNUu5vPcjKr/vaVEajjLn0rddNcvLTtekrZE9vuFyTV
hTYXHnwChkc76Wao6ccWiPGw/Kbe9SBZpH10oymks8yqlBNYWq3ChXRbUSUbJj/R
qf4ivq2ONHo5xNuBc5P3FeU+J/GYVENHkMReBrNOcSjEofHy66GSkm1gG70G7AgC
FhhvH98+BLj4Yu/npGTFDnmu5KwSFwQTpjiKvtoIY3um7w8DnNhQQTJWDqCszNA2
xtzS+PJPRoOk39RZLZQaNGkWlckLLw4=
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:09:47 2026 by rpki-client