Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/aa82e6e4-67fd-3df9-b2c6-0999ec846726.roa
File:                     aa82e6e4-67fd-3df9-b2c6-0999ec846726.roa (raw, json)
Hash identifier:          RvpzXleXNNJiZs95f8MLcbzcO8lWwO/BQ9iHCJpNKkU=
Subject key identifier:   28:BE:EC:AA:28:E2:40:18:0D:A1:F1:7D:74:F4:72:EA:EE:D2:50:4A
Certificate issuer:       /CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
Certificate serial:       010D0C9F4328584EA7911C7EFA38DCFCB6D3C580
Authority key identifier: 7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/aa82e6e4-67fd-3df9-b2c6-0999ec846726.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     10794
IP address blocks:        199.43.12.0/23 maxlen: 23
                          199.43.12.0/24 maxlen: 24
                          199.43.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:1c:7e:fa:38:dc:fc:b6:d3:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=784e6f25-58d1-4502-a66a-34441e8ef2c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ee:8d:34:b5:1c:ff:bc:30:d1:df:ed:dc:d4:
                    89:c5:ee:fb:c4:18:0d:bc:ae:35:55:ba:cb:72:d5:
                    3f:c0:14:9a:72:10:a5:d2:b6:ee:7e:62:f9:08:b0:
                    99:cb:07:8c:f0:20:37:2b:26:7d:25:a6:45:78:49:
                    47:05:c9:f6:ad:0d:6e:8e:1d:83:fe:23:48:29:e5:
                    b3:ed:bf:6d:9b:9d:4b:64:f3:13:6c:72:2d:48:71:
                    30:49:b7:b7:3e:fa:de:13:6d:0b:39:36:34:53:1e:
                    cd:f6:c6:c1:c2:09:de:d0:2b:41:0e:5d:18:55:d7:
                    69:fa:a5:c2:58:e7:36:21:4b:82:e2:15:15:13:b2:
                    34:96:6f:8a:1c:54:26:9f:7a:ae:e5:f6:1f:8e:8c:
                    1e:5f:95:12:23:9c:15:3d:a8:de:61:18:15:0a:9d:
                    8a:78:cb:b6:8f:f4:0d:3d:a6:8e:29:59:2e:e1:4d:
                    4d:d2:3b:e3:76:ac:e4:25:16:69:c9:1f:b3:c1:4a:
                    eb:a8:c4:c2:dd:3c:a7:e5:ee:fc:45:b3:b7:a3:df:
                    bc:3c:52:6b:4e:d1:84:e7:81:e9:bd:9d:7f:aa:83:
                    7a:4c:fe:ac:66:1b:08:59:4d:3f:c9:bf:b7:36:10:
                    e9:fe:26:8c:0f:f6:1e:ea:61:0f:1b:1c:1f:03:46:
                    ab:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BE:EC:AA:28:E2:40:18:0D:A1:F1:7D:74:F4:72:EA:EE:D2:50:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/aa82e6e4-67fd-3df9-b2c6-0999ec846726.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl

            X509v3 Authority Key Identifier:
                keyid:7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.43.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:67:2d:bc:81:06:6b:e2:02:e3:b1:9c:b5:55:84:3d:d4:1e:
         37:93:47:19:b0:13:55:00:b9:13:53:29:d0:47:fa:b0:38:51:
         c8:fa:54:b7:83:f8:5f:c1:69:00:0a:c3:09:2e:48:de:10:41:
         03:83:2f:0c:fb:d8:06:a7:9b:f8:13:9b:71:1f:76:da:ae:26:
         fe:b1:72:e9:28:9f:28:75:1b:e2:d9:cb:67:fe:84:d6:de:0d:
         0d:5b:06:84:eb:a7:24:0f:90:70:ed:dc:38:d4:1c:95:77:e3:
         4e:0d:14:fe:9a:2e:17:83:24:93:d2:31:b0:4a:24:56:a9:6b:
         49:20:ef:8c:93:99:56:d0:eb:81:c2:6b:aa:5f:c2:40:2d:da:
         6b:b1:76:04:36:bc:ee:43:93:47:07:70:de:f6:c0:0e:4a:52:
         8d:9b:e5:0c:b8:77:7f:0d:7d:bb:f7:2c:e8:4e:11:92:b2:94:
         26:e5:84:cd:a5:d3:77:43:c2:c6:c4:a8:0f:34:d0:92:cc:3a:
         f8:fd:7a:af:f6:ea:13:65:c5:60:78:94:bd:50:43:fd:64:0b:
         3e:e0:8c:dd:18:4d:4d:0d:bf:39:c0:fa:39:22:46:1d:2b:bb:
         e2:eb:7a:77:b4:e9:37:70:a8:82:3a:2e:55:b4:99:73:50:f3:
         26:35:2d:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkRx++jjc/LbTxYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGY5YWFiY2ItMjZhOC00YzU3LWFlNTUtNzkzM2JhMmI1
MWI2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
Nzg0ZTZmMjUtNThkMS00NTAyLWE2NmEtMzQ0NDFlOGVmMmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO6NNLUc/7ww0d/t3NSJxe77xBgNvK41VbrL
ctU/wBSachCl0rbufmL5CLCZyweM8CA3KyZ9JaZFeElHBcn2rQ1ujh2D/iNIKeWz
7b9tm51LZPMTbHItSHEwSbe3PvreE20LOTY0Ux7N9sbBwgne0CtBDl0YVddp+qXC
WOc2IUuC4hUVE7I0lm+KHFQmn3qu5fYfjoweX5USI5wVPajeYRgVCp2KeMu2j/QN
PaaOKVku4U1N0jvjdqzkJRZpyR+zwUrrqMTC3Tyn5e78RbO3o9+8PFJrTtGE54Hp
vZ1/qoN6TP6sZhsIWU0/yb+3NhDp/iaMD/Ye6mEPGxwfA0arDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCi+7Koo4kAYDaHxfXT0curu0lBKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80Zjlh
YWJjYi0yNmE4LTRjNTctYWU1NS03OTMzYmEyYjUxYjYvYWE4MmU2ZTQtNjdmZC0z
ZGY5LWIyYzYtMDk5OWVjODQ2NzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNGY5YWFiY2ItMjZhOC00YzU3LWFl
NTUtNzkzM2JhMmI1MWI2LzRmOWFhYmNiLTI2YTgtNGM1Ny1hZTU1LTc5MzNiYTJi
NTFiNi5jcmwwHwYDVR0jBBgwFoAUfHDSjDg0KfV6ezvYSBdeA04dwcIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy80ZjlhYWJjYi0yNmE4LTRjNTctYWU1NS03OTMz
YmEyYjUxYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxysMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD5nLbyBBmviAuOxnLVVhD3UHjeTRxmwE1UAuRNTKdBH+rA4Ucj6VLeD
+F/BaQAKwwkuSN4QQQODLwz72Aanm/gTm3EfdtquJv6xcukonyh1G+LZy2f+hNbe
DQ1bBoTrpyQPkHDt3DjUHJV3404NFP6aLheDJJPSMbBKJFapa0kg74yTmVbQ64HC
a6pfwkAt2muxdgQ2vO5Dk0cHcN72wA5KUo2b5Qy4d38Nfbv3LOhOEZKylCblhM2l
03dDwsbEqA800JLMOvj9eq/26hNlxWB4lL1QQ/1kCz7gjN0YTU0NvznA+jkiRh0r
u+Lrene06TdwqII6LlW0mXNQ8yY1LY0=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:38:37 2026 by rpki-client