Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/513ad2a0-8a15-3688-8173-779f97b22bad.roa
File:                     513ad2a0-8a15-3688-8173-779f97b22bad.roa (raw, json)
Hash identifier:          rbVhMttW3Xrsucg3DaqtzhWsorEGuFZGduZbjTL6W4k=
Subject key identifier:   08:C7:C5:70:12:CC:4B:98:67:2D:1F:A8:8C:C7:F1:55:B7:02:17:B5
Certificate issuer:       /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e
Certificate serial:       010D0C9F4328584E253EFA46DA76F7D96BD75400
Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/513ad2a0-8a15-3688-8173-779f97b22bad.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     63399
IP address blocks:        170.10.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3e:fa:46:da:76:f7:d9:6b:d7:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=3cc5b9b5-556a-4e77-bce1-420ab6d22455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1a:b3:b3:96:2b:e9:99:ff:45:72:30:2f:64:
                    df:38:2a:1f:7c:3c:57:ff:4a:0f:6d:f9:27:2c:ad:
                    44:9f:9a:92:cd:a1:cc:9b:3e:79:97:1b:86:f5:8b:
                    c6:f6:32:2e:0b:45:3c:55:51:b2:7f:0d:d7:ec:f8:
                    fa:ef:2f:59:20:81:c7:e1:1b:fc:b5:e6:4c:35:f3:
                    56:2a:75:d7:37:a4:fb:2c:db:20:8f:5b:97:2f:fd:
                    7b:fe:0a:86:7f:e8:20:45:96:bc:36:76:86:6a:5c:
                    e1:a8:a2:c3:1f:a3:66:1b:5e:bb:69:f9:1e:17:16:
                    25:f2:10:04:a2:32:8b:2b:94:d2:52:18:f3:60:ec:
                    00:c1:3f:72:45:e7:d8:19:30:9f:7f:af:6b:a2:9c:
                    2d:0a:13:55:55:c1:c0:d7:51:77:c8:06:6e:1c:93:
                    d6:2f:16:d3:2f:c6:e7:6d:47:6e:2d:c6:9d:80:19:
                    92:ad:73:aa:00:18:d4:90:f5:84:e8:74:4e:ee:04:
                    f5:40:fe:3c:e9:74:d6:98:db:91:2a:f6:85:04:b9:
                    31:e5:93:20:0e:8c:a7:78:b5:2f:77:30:59:96:b4:
                    32:3e:24:33:d9:fe:0d:8d:d1:f3:f5:d7:1d:82:c7:
                    fd:a8:b7:8e:8e:19:75:de:4e:23:87:b8:15:38:2c:
                    16:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C7:C5:70:12:CC:4B:98:67:2D:1F:A8:8C:C7:F1:55:B7:02:17:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/513ad2a0-8a15-3688-8173-779f97b22bad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl

            X509v3 Authority Key Identifier:
                keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:15:24:22:59:bf:c6:11:73:58:be:28:36:20:a7:b8:33:fa:
         75:74:4b:0f:3a:d7:37:a4:d6:c9:49:7c:e9:f1:36:5e:b0:12:
         af:10:37:ca:21:45:0f:ba:75:35:18:c1:57:94:47:a9:35:63:
         74:e9:8d:bc:94:e5:bb:26:f0:e8:a7:eb:0f:92:8d:88:0b:d0:
         b6:19:d2:69:c6:48:5e:21:c7:24:c4:4f:9d:dc:32:15:e8:c1:
         98:e3:f7:b8:41:8d:8a:c1:37:ff:7c:24:39:03:a1:11:d7:b8:
         f6:d2:98:56:be:0c:63:e0:2f:9a:40:99:b7:23:83:61:b0:2d:
         a7:4f:05:c0:9c:a6:19:2b:1e:f5:8f:f2:03:50:a5:f1:8e:65:
         91:7b:08:3e:54:af:57:82:fe:fe:b6:fc:79:20:be:0e:a1:ce:
         15:72:d8:ad:8f:a4:da:cf:31:44:e1:ef:a5:48:e2:18:e0:ac:
         9e:6b:1e:c0:ff:57:7c:10:64:94:09:6e:eb:f6:f2:f8:50:6f:
         76:e0:50:5c:cb:19:7a:b7:1f:85:f1:4e:3f:af:6b:ce:1f:a9:
         27:c5:c4:99:6e:3d:93:55:1e:0c:91:29:86:8d:83:6f:43:63:
         dc:29:98:76:f2:14:e5:3f:85:b1:ff:bf:c0:96:6d:07:15:db:
         ca:9e:67:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPvpG2nb32WvXVAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzRhOWRiMjItOGQ0OS00OTM4LTljNmYtZTNmZDQyOGMx
NThlMB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk
M2NjNWI5YjUtNTU2YS00ZTc3LWJjZTEtNDIwYWI2ZDIyNDU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBqzs5Yr6Zn/RXIwL2TfOCoffDxX/0oPbfkn
LK1En5qSzaHMmz55lxuG9YvG9jIuC0U8VVGyfw3X7Pj67y9ZIIHH4Rv8teZMNfNW
KnXXN6T7LNsgj1uXL/17/gqGf+ggRZa8NnaGalzhqKLDH6NmG167afkeFxYl8hAE
ojKLK5TSUhjzYOwAwT9yRefYGTCff69ropwtChNVVcHA11F3yAZuHJPWLxbTL8bn
bUduLcadgBmSrXOqABjUkPWE6HRO7gT1QP486XTWmNuRKvaFBLkx5ZMgDoyneLUv
dzBZlrQyPiQz2f4NjdHz9dcdgsf9qLeOjhl13k4jh7gVOCwWGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAjHxXASzEuYZy0fqIzH8VW3Ahe1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5
ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2ZkNDI4YzE1OGUvNTEzYWQyYTAtOGExNS0z
Njg4LTgxNzMtNzc5Zjk3YjIyYmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzRhOWRiMjItOGQ0OS00OTM4LTlj
NmYtZTNmZDQyOGMxNThlLzc0YTlkYjIyLThkNDktNDkzOC05YzZmLWUzZmQ0Mjhj
MTU4ZS5jcmwwHwYDVR0jBBgwFoAUmPupDsV3auhpmoOFV1QuM6AcJkEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NGE5ZGIyMi04ZDQ5LTQ5MzgtOWM2Zi1lM2Zk
NDI4YzE1OGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgreMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABkVJCJZv8YRc1i+KDYgp7gz+nV0Sw861zek1slJfOnxNl6wEq8QN8oh
RQ+6dTUYwVeUR6k1Y3TpjbyU5bsm8Oin6w+SjYgL0LYZ0mnGSF4hxyTET53cMhXo
wZjj97hBjYrBN/98JDkDoRHXuPbSmFa+DGPgL5pAmbcjg2GwLadPBcCcphkrHvWP
8gNQpfGOZZF7CD5Ur1eC/v62/Hkgvg6hzhVy2K2PpNrPMUTh76VI4hjgrJ5rHsD/
V3wQZJQJbuv28vhQb3bgUFzLGXq3H4XxTj+va84fqSfFxJluPZNVHgyRKYaNg29D
Y9wpmHbyFOU/hbH/v8CWbQcV28qeZ/k=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:51:23 2026 by rpki-client