Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/d12bd30a-acc9-3de6-8fd0-92577639758d.roa
File:                     d12bd30a-acc9-3de6-8fd0-92577639758d.roa (raw, json)
Hash identifier:          8arVPEmMOD7WrdhGJiCc7aCr/H/vYkJJW0+hxv4Qd3U=
Subject key identifier:   F9:34:01:D4:A5:10:E8:2D:AA:08:65:B7:B4:4D:84:04:84:BC:02:94
Certificate issuer:       /CN=10c40112-bc85-4f75-9bb0-471ec84ba3fe
Certificate serial:       010D0C9F4328584DC29AE3B2C26C5CDF60985560
Authority key identifier: D8:E2:5C:0F:58:98:94:D9:C7:71:B2:BE:F6:62:B1:81:17:88:2A:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/d12bd30a-acc9-3de6-8fd0-92577639758d.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     63436
IP address blocks:        192.124.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/10c40112-bc85-4f75-9bb0-471ec84ba3fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/10c40112-bc85-4f75-9bb0-471ec84ba3fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:e3:b2:c2:6c:5c:df:60:98:55:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c40112-bc85-4f75-9bb0-471ec84ba3fe
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=2fa03b18-8f14-40b1-bf1a-c90294f2f1dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:94:21:3d:db:90:ca:7f:ec:0f:d3:c6:0c:f1:
                    27:82:cd:f7:35:47:25:08:c1:7a:66:43:05:af:77:
                    de:ea:9d:07:cd:a4:2b:12:7f:73:df:74:a7:7a:17:
                    a3:e8:5d:8f:68:01:d1:fd:27:c2:00:d8:5b:19:85:
                    5b:f9:73:c1:e6:cf:82:c9:4e:77:51:01:7e:51:ff:
                    95:27:65:2d:b3:3b:4b:0f:6c:05:6f:d7:70:76:7e:
                    29:f3:f2:76:7c:68:b6:07:de:02:1e:3c:83:b7:2d:
                    2e:2e:24:e1:34:02:9b:ae:44:f2:89:7f:27:7f:b3:
                    46:03:a0:f8:b8:88:86:49:b1:cd:52:9e:99:12:71:
                    b0:15:5d:61:5a:9f:84:18:77:7a:5c:eb:77:12:d9:
                    d6:90:b4:9a:c2:9c:b0:1a:01:7e:23:44:bc:e6:bb:
                    20:fa:5b:6a:dc:76:55:9d:a3:d6:af:4c:09:d8:33:
                    1b:c0:fa:e7:40:31:47:57:0b:03:d8:59:ad:3f:1a:
                    be:be:5d:eb:91:fd:48:45:9d:df:45:12:8a:44:5c:
                    bd:74:e9:cb:9a:28:0a:57:b8:0c:03:04:33:93:c8:
                    44:7d:b9:43:77:21:6c:ac:93:cb:de:32:38:d5:34:
                    3b:43:5b:0a:28:de:0f:32:12:a7:5b:22:c3:c3:2d:
                    1e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:34:01:D4:A5:10:E8:2D:AA:08:65:B7:B4:4D:84:04:84:BC:02:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/d12bd30a-acc9-3de6-8fd0-92577639758d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/10c40112-bc85-4f75-9bb0-471ec84ba3fe.crl

            X509v3 Authority Key Identifier:
                keyid:D8:E2:5C:0F:58:98:94:D9:C7:71:B2:BE:F6:62:B1:81:17:88:2A:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.124.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:44:b4:1a:b7:62:73:2d:07:98:24:f1:b7:0f:c8:97:bb:50:
         84:59:e1:11:be:70:d7:ac:b3:99:e0:65:5e:ec:c4:ad:57:2e:
         3a:48:a6:52:dd:cd:dc:78:8c:58:3a:a7:68:56:6d:49:67:b9:
         ea:d9:b8:3e:ab:ff:2f:a6:5b:63:5d:f4:3f:b3:6c:70:04:22:
         0a:1b:79:19:aa:55:0c:61:d5:da:a3:7c:35:3a:4a:75:1b:d4:
         07:74:7f:5d:38:48:ca:ce:2f:d0:39:2a:57:65:32:a5:38:2f:
         e9:26:fb:8a:9a:af:b3:36:ee:2d:3f:84:25:c6:0f:5e:c6:3a:
         92:e5:2d:63:e2:a1:16:cb:de:f8:de:21:df:36:2d:87:32:37:
         d4:64:df:6f:97:0d:10:cd:fd:f3:9f:2e:0e:a0:c5:2f:75:f7:
         89:fa:56:d1:58:d9:b4:73:1a:e6:77:2d:87:34:54:c7:a7:76:
         94:5e:ff:62:ce:cf:93:3a:17:48:c7:1a:24:e1:09:a5:b9:ac:
         eb:44:2d:5a:62:95:a2:a4:f2:69:df:3b:a6:3f:ff:26:2e:a2:
         2b:9f:74:ce:e5:e6:ac:12:ca:bc:22:e7:4a:8c:35:b4:b8:73:
         78:2a:68:88:d4:8c:92:0f:73:2a:a5:ce:dd:a8:ab:54:d9:4f:
         bc:d2:53:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3CmuOywmxc32CYVWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTBjNDAxMTItYmM4NS00Zjc1LTliYjAtNDcxZWM4NGJh
M2ZlMB4XDTI2MDUwODAxMDAyNFoXDTI2MDgwNjAxMDAyNFowLzEtMCsGA1UEAxMk
MmZhMDNiMTgtOGYxNC00MGIxLWJmMWEtYzkwMjk0ZjJmMWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJQhPduQyn/sD9PGDPEngs33NUclCMF6ZkMF
r3fe6p0HzaQrEn9z33Snehej6F2PaAHR/SfCANhbGYVb+XPB5s+CyU53UQF+Uf+V
J2UtsztLD2wFb9dwdn4p8/J2fGi2B94CHjyDty0uLiThNAKbrkTyiX8nf7NGA6D4
uIiGSbHNUp6ZEnGwFV1hWp+EGHd6XOt3EtnWkLSawpywGgF+I0S85rsg+ltq3HZV
naPWr0wJ2DMbwPrnQDFHVwsD2FmtPxq+vl3rkf1IRZ3fRRKKRFy9dOnLmigKV7gM
AwQzk8hEfblDdyFsrJPL3jI41TQ7Q1sKKN4PMhKnWyLDwy0etwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPk0AdSlEOgtqghlt7RNhASEvAKUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xMGM0
MDExMi1iYzg1LTRmNzUtOWJiMC00NzFlYzg0YmEzZmUvZDEyYmQzMGEtYWNjOS0z
ZGU2LThmZDAtOTI1Nzc2Mzk3NThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTBjNDAxMTItYmM4NS00Zjc1LTli
YjAtNDcxZWM4NGJhM2ZlLzEwYzQwMTEyLWJjODUtNGY3NS05YmIwLTQ3MWVjODRi
YTNmZS5jcmwwHwYDVR0jBBgwFoAU2OJcD1iYlNnHcbK+9mKxgReIKrgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xMGM0MDExMi1iYzg1LTRmNzUtOWJiMC00NzFl
Yzg0YmEzZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHzgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFJEtBq3YnMtB5gk8bcPyJe7UIRZ4RG+cNess5ngZV7sxK1XLjpIplLd
zdx4jFg6p2hWbUlnuerZuD6r/y+mW2Nd9D+zbHAEIgobeRmqVQxh1dqjfDU6SnUb
1Ad0f104SMrOL9A5KldlMqU4L+km+4qar7M27i0/hCXGD17GOpLlLWPioRbL3vje
Id82LYcyN9Rk32+XDRDN/fOfLg6gxS9194n6VtFY2bRzGuZ3LYc0VMendpRe/2LO
z5M6F0jHGiThCaW5rOtELVpilaKk8mnfO6Y//yYuoiufdM7l5qwSyrwi50qMNbS4
c3gqaIjUjJIPcyqlzt2oq1TZT7zSU8I=
-----END CERTIFICATE-----
Generated at Wed May 13 16:00:15 2026 by rpki-client