Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/4f2c271e-9985-3804-96f9-c37c9b7b1a80.roa
File:                     4f2c271e-9985-3804-96f9-c37c9b7b1a80.roa (raw, json)
Hash identifier:          hSwPfyAnWlJaj4xBNOdWCQnwfUD/xRLjdshsVwFO6t8=
Subject key identifier:   0F:D4:CC:7C:B7:AD:1E:8B:59:AB:F9:EF:11:59:B8:FA:DE:E8:67:C6
Certificate issuer:       /CN=cc195d24-8046-44e5-bf80-7bdde011ee7b
Certificate serial:       010D0C9F4328584E1A143BC81DF37EC611397280
Authority key identifier: BB:88:F9:B7:DC:D8:C0:65:52:71:57:36:F2:60:0C:47:E5:8C:F1:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/4f2c271e-9985-3804-96f9-c37c9b7b1a80.roa
Signing time:             Mon 08 Jun 2026 09:00:12 +0000
ROA not before:           Mon 08 Jun 2026 09:00:12 +0000
ROA not after:            Sun 06 Sep 2026 09:00:12 +0000
asID:                     400240
IP address blocks:        23.189.112.0/24 maxlen: 24
                          2620:9e:e000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/cc195d24-8046-44e5-bf80-7bdde011ee7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/cc195d24-8046-44e5-bf80-7bdde011ee7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:14:3b:c8:1d:f3:7e:c6:11:39:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc195d24-8046-44e5-bf80-7bdde011ee7b
        Validity
            Not Before: Jun  8 09:00:12 2026 GMT
            Not After : Sep  6 09:00:12 2026 GMT
        Subject: CN=4fa07b36-d866-4954-848f-c5ad4f4f85b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c6:2b:85:48:95:6f:cc:18:8b:17:10:47:e2:
                    b8:e2:41:11:67:38:83:63:ab:f8:af:e6:40:fd:b7:
                    dd:8f:94:5b:05:90:50:b5:aa:a9:fe:f7:93:44:75:
                    5d:4b:d8:bb:af:3f:eb:0b:41:f2:6b:f2:ba:bc:d0:
                    c5:be:a4:ba:8e:53:e7:4f:2c:15:60:58:f6:ab:d4:
                    af:12:48:80:f3:4b:60:1c:b0:bb:1a:2d:dc:e3:a4:
                    55:07:7e:22:44:bd:bc:bf:00:cb:ed:d5:dd:20:1a:
                    76:b9:d8:f0:26:cc:b7:0f:a1:e5:14:aa:84:1c:9e:
                    96:20:76:3f:26:3b:0d:78:66:89:f6:45:e8:59:e0:
                    1d:b6:25:9f:39:6d:25:54:be:62:12:cf:0a:75:55:
                    1f:c8:1f:be:8b:b2:42:93:2f:05:e6:66:51:42:a1:
                    cc:2c:c8:32:6f:35:7a:17:1b:9e:fd:39:b4:e0:7c:
                    f8:37:37:83:10:cb:ec:11:c2:dd:89:42:e5:e4:aa:
                    24:b6:2b:80:05:26:a7:f2:78:6a:45:6b:20:1c:49:
                    37:b0:28:8b:ec:ca:c8:3f:76:dc:05:a2:e7:20:af:
                    c3:f1:aa:7c:73:10:83:5d:6c:69:cf:e8:d5:64:e6:
                    1b:a7:bb:de:db:ea:00:86:0d:5e:28:ee:c4:c5:f7:
                    45:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D4:CC:7C:B7:AD:1E:8B:59:AB:F9:EF:11:59:B8:FA:DE:E8:67:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/4f2c271e-9985-3804-96f9-c37c9b7b1a80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/cc195d24-8046-44e5-bf80-7bdde011ee7b.crl

            X509v3 Authority Key Identifier:
                keyid:BB:88:F9:B7:DC:D8:C0:65:52:71:57:36:F2:60:0C:47:E5:8C:F1:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.189.112.0/24
                IPv6:
                  2620:9e:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:7c:a9:4c:23:d8:53:f9:f2:53:dc:e8:5a:84:26:27:42:30:
         84:45:16:70:24:76:24:01:25:88:60:44:27:75:33:e5:f1:04:
         0b:c4:52:86:6e:e8:94:0e:67:36:d2:64:c8:1f:d8:98:83:76:
         ab:59:1b:85:62:50:44:db:e7:c8:7e:92:18:33:02:18:27:46:
         d1:9f:f3:2c:5f:c7:25:ae:67:f7:e7:70:58:86:76:0f:7a:e0:
         a6:04:d6:c4:40:3f:9c:68:4e:6a:d4:60:04:92:d6:21:67:aa:
         a7:47:10:ff:04:5d:d3:73:0c:1e:74:0e:47:31:33:3a:9e:e6:
         28:5e:eb:ef:b2:11:bf:03:f2:10:4b:ae:ee:3b:f5:fe:5b:2f:
         60:b2:80:a9:e2:c8:bb:4c:53:29:24:b9:ea:65:ec:ed:90:8f:
         88:67:45:f3:58:5c:9f:e2:fe:20:b2:85:7b:db:01:16:01:30:
         ae:c7:d6:6e:46:ad:82:fa:fd:38:6f:dd:89:ae:b3:d4:e1:d3:
         41:3f:6b:e7:24:c2:a8:b7:5d:3a:63:b7:4b:06:fc:d0:fb:45:
         02:42:b5:ed:0a:fe:0f:dc:d9:9c:a8:f3:d3:b0:a3:0e:e8:49:
         84:4f:eb:ef:42:ce:e6:67:15:5d:bf:b7:1a:15:41:0d:af:ce:
         74:47:3f:fd
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE4aFDvIHfN+xhE5coAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MxOTVkMjQtODA0Ni00NGU1LWJmODAtN2JkZGUwMTFl
ZTdiMB4XDTI2MDYwODA5MDAxMloXDTI2MDkwNjA5MDAxMlowLzEtMCsGA1UEAxMk
NGZhMDdiMzYtZDg2Ni00OTU0LTg0OGYtYzVhZDRmNGY4NWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMYrhUiVb8wYixcQR+K44kERZziDY6v4r+ZA
/bfdj5RbBZBQtaqp/veTRHVdS9i7rz/rC0Hya/K6vNDFvqS6jlPnTywVYFj2q9Sv
EkiA80tgHLC7Gi3c46RVB34iRL28vwDL7dXdIBp2udjwJsy3D6HlFKqEHJ6WIHY/
JjsNeGaJ9kXoWeAdtiWfOW0lVL5iEs8KdVUfyB++i7JCky8F5mZRQqHMLMgybzV6
Fxue/Tm04Hz4NzeDEMvsEcLdiULl5KoktiuABSan8nhqRWsgHEk3sCiL7MrIP3bc
BaLnIK/D8ap8cxCDXWxpz+jVZOYbp7ve2+oAhg1eKO7ExfdFYwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFA/UzHy3rR6LWav57xFZuPre6GfGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jYzE5
NWQyNC04MDQ2LTQ0ZTUtYmY4MC03YmRkZTAxMWVlN2IvNGYyYzI3MWUtOTk4NS0z
ODA0LTk2ZjktYzM3YzliN2IxYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2MxOTVkMjQtODA0Ni00NGU1LWJm
ODAtN2JkZGUwMTFlZTdiL2NjMTk1ZDI0LTgwNDYtNDRlNS1iZjgwLTdiZGRlMDEx
ZWU3Yi5jcmwwHwYDVR0jBBgwFoAUu4j5t9zYwGVScVc28mAMR+WM8U4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jYzE5NWQyNC04MDQ2LTQ0ZTUtYmY4MC03YmRk
ZTAxMWVlN2IuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF71wMA8E
AgACMAkDBwAmIACe4AAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbXypTCPYU/nyU9zoWoQmJ0IwhEUWcCR2
JAEliGBEJ3Uz5fEEC8RShm7olA5nNtJkyB/YmIN2q1kbhWJQRNvnyH6SGDMCGCdG
0Z/zLF/HJa5n9+dwWIZ2D3rgpgTWxEA/nGhOatRgBJLWIWeqp0cQ/wRd03MMHnQO
RzEzOp7mKF7r77IRvwPyEEuu7jv1/lsvYLKAqeLIu0xTKSS56mXs7ZCPiGdF81hc
n+L+ILKFe9sBFgEwrsfWbkatgvr9OG/dia6z1OHTQT9r5yTCqLddOmO3Swb80PtF
AkK17Qr+D9zZnKjz07CjDuhJhE/r70LO5mcVXb+3GhVBDa/OdEc//Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:58:35 2026 by rpki-client