Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/3d08b48d-43ba-3b37-bf82-810afe0cbdc1.roa
File:                     3d08b48d-43ba-3b37-bf82-810afe0cbdc1.roa (raw, json)
Hash identifier:          GvTAdM2/IyaAIU/CgtZ3Zwh3d2wZy3VX1/m1UpfFrRU=
Subject key identifier:   C8:97:CF:41:F2:1B:BF:78:8F:DD:C2:9C:2A:B6:EC:53:6F:DF:67:A5
Certificate issuer:       /CN=fd691680-2c46-4e86-8545-3e0e0c0e305a
Certificate serial:       010D0C9F4328584E9BE53AFC11BFD6A6D7576FA0
Authority key identifier: A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/3d08b48d-43ba-3b37-bf82-810afe0cbdc1.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     206400
IP address blocks:        216.31.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:3a:fc:11:bf:d6:a6:d7:57:6f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd691680-2c46-4e86-8545-3e0e0c0e305a
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=9d71a117-cea7-43af-bb6e-5b6a6e8dc4dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:45:fe:67:ff:e5:fb:f4:22:ea:47:d0:1b:aa:
                    08:f1:23:62:87:7e:1b:5d:cd:96:51:3d:e6:e8:3c:
                    28:96:09:ee:0c:1d:1f:5d:dd:86:56:2b:c2:e9:3e:
                    d0:c0:72:e3:aa:ce:35:d0:28:35:da:d9:38:dc:d8:
                    6c:1d:21:a5:08:f3:fa:70:f2:ab:a1:bf:ba:36:e3:
                    3b:20:1f:51:a7:81:1b:f6:c0:c8:30:60:6c:80:02:
                    14:de:66:fc:d2:01:26:9d:d2:66:75:f7:d6:32:28:
                    e5:b6:a9:53:89:2b:4b:9e:16:fb:24:23:5c:68:06:
                    a1:90:20:5f:0e:d2:22:b5:71:81:99:d6:86:00:ed:
                    d2:76:65:7d:1c:95:3b:67:6c:37:0c:52:c2:ce:86:
                    ca:06:3b:bb:a7:d2:f3:a5:26:8a:f4:6d:80:ae:16:
                    33:fa:8a:5b:2e:af:8c:6a:2c:5a:7b:f0:7d:42:79:
                    ef:66:04:fc:43:a0:f2:bb:11:e2:fc:9b:a9:3b:7d:
                    7e:5b:da:17:5a:4b:e1:9f:03:38:33:15:1f:20:97:
                    8b:cb:85:cb:4a:1f:77:ce:79:b3:d3:57:c9:f5:bf:
                    93:b5:c9:0e:3e:7a:65:73:c2:c2:0f:69:ba:6d:f0:
                    a7:be:4c:4d:2f:6a:2c:76:1d:cf:00:4f:4d:c3:d8:
                    32:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:97:CF:41:F2:1B:BF:78:8F:DD:C2:9C:2A:B6:EC:53:6F:DF:67:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/3d08b48d-43ba-3b37-bf82-810afe0cbdc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a/fd691680-2c46-4e86-8545-3e0e0c0e305a.crl

            X509v3 Authority Key Identifier:
                keyid:A4:E2:CB:32:4A:F2:A0:87:FE:BF:8F:42:40:F8:AD:90:5E:2C:AC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd691680-2c46-4e86-8545-3e0e0c0e305a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.31.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:a0:cc:99:0d:80:92:e9:cb:15:63:c7:02:86:b2:e5:54:02:
         01:c6:84:2b:95:2d:28:b3:2c:16:61:ee:ff:da:da:dd:f4:9c:
         5b:b4:54:fd:3e:e8:60:b1:9f:17:1e:95:c8:88:f2:b0:9a:2c:
         a5:78:aa:8a:b9:62:10:23:83:99:4c:5d:f9:b2:c7:e9:b5:b7:
         2a:6a:be:e8:bb:00:87:e0:6f:5c:2d:c8:f9:d8:91:7c:5f:3d:
         ca:7a:13:ac:02:d0:d2:93:97:7e:e6:fc:95:a2:b1:e7:f7:da:
         3f:97:87:13:45:3a:59:f5:94:c0:3a:37:9e:18:c6:fe:f9:91:
         6e:11:6d:f5:61:c2:b9:f5:3d:13:53:b5:56:7d:a3:38:38:3d:
         41:b8:20:cd:85:ac:64:85:d3:8b:c1:6b:03:0d:fa:f9:f3:5b:
         3c:1e:84:47:37:0b:da:26:3e:05:be:a7:ac:7c:18:6d:0a:5a:
         28:1a:df:e3:ef:67:d5:05:7f:c2:df:ce:93:09:04:54:06:8a:
         55:5d:c3:cf:55:95:50:0f:d9:e2:81:8d:2b:31:2f:00:29:1f:
         11:37:f9:d9:d1:47:15:b0:e9:f4:80:56:65:6d:42:50:05:4a:
         2e:33:80:c3:ee:01:1e:42:94:6e:d5:66:3b:83:ab:54:18:12:
         48:7b:90:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5Tr8Eb/WptdXb6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQ2OTE2ODAtMmM0Ni00ZTg2LTg1NDUtM2UwZTBjMGUz
MDVhMB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk
OWQ3MWExMTctY2VhNy00M2FmLWJiNmUtNWI2YTZlOGRjNGRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0X+Z//l+/Qi6kfQG6oI8SNih34bXc2WUT3m
6DwolgnuDB0fXd2GVivC6T7QwHLjqs410Cg12tk43NhsHSGlCPP6cPKrob+6NuM7
IB9Rp4Eb9sDIMGBsgAIU3mb80gEmndJmdffWMijltqlTiStLnhb7JCNcaAahkCBf
DtIitXGBmdaGAO3SdmV9HJU7Z2w3DFLCzobKBju7p9LzpSaK9G2ArhYz+opbLq+M
aixae/B9QnnvZgT8Q6DyuxHi/JupO31+W9oXWkvhnwM4MxUfIJeLy4XLSh93znmz
01fJ9b+TtckOPnplc8LCD2m6bfCnvkxNL2osdh3PAE9Nw9gyqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMiXz0HyG794j93CnCq27FNv32elMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZDY5
MTY4MC0yYzQ2LTRlODYtODU0NS0zZTBlMGMwZTMwNWEvM2QwOGI0OGQtNDNiYS0z
YjM3LWJmODItODEwYWZlMGNiZGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmQ2OTE2ODAtMmM0Ni00ZTg2LTg1
NDUtM2UwZTBjMGUzMDVhL2ZkNjkxNjgwLTJjNDYtNGU4Ni04NTQ1LTNlMGUwYzBl
MzA1YS5jcmwwHwYDVR0jBBgwFoAUpOLLMkryoIf+v49CQPitkF4srMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mZDY5MTY4MC0yYzQ2LTRlODYtODU0NS0zZTBl
MGMwZTMwNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2B8+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAGgzJkNgJLpyxVjxwKGsuVUAgHGhCuVLSizLBZh7v/a2t30nFu0VP0+
6GCxnxcelciI8rCaLKV4qoq5YhAjg5lMXfmyx+m1typqvui7AIfgb1wtyPnYkXxf
Pcp6E6wC0NKTl37m/JWisef32j+XhxNFOln1lMA6N54Yxv75kW4RbfVhwrn1PRNT
tVZ9ozg4PUG4IM2FrGSF04vBawMN+vnzWzwehEc3C9omPgW+p6x8GG0KWiga3+Pv
Z9UFf8LfzpMJBFQGilVdw89VlVAP2eKBjSsxLwApHxE3+dnRRxWw6fSAVmVtQlAF
Si4zgMPuAR5ClG7VZjuDq1QYEkh7kL4=
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:56:10 2026 by rpki-client