Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/cf0d02ea-7c97-3203-a72d-003b0556e0c1.roa
File:                     cf0d02ea-7c97-3203-a72d-003b0556e0c1.roa (raw, json)
Hash identifier:          oQ/3W4JX9O9TKbNjAQF8JEem6UKqarPhZUBz7FmH1kQ=
Subject key identifier:   9C:B8:01:C7:90:36:09:8B:1B:E2:01:8A:42:92:DC:BA:0E:F6:CD:2A
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584E82C4DE3036B9D7DF6A3A78A0
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/cf0d02ea-7c97-3203-a72d-003b0556e0c1.roa
Signing time:             Wed 15 Jul 2026 21:00:12 +0000
ROA not before:           Wed 15 Jul 2026 21:00:12 +0000
ROA not after:            Tue 13 Oct 2026 21:00:12 +0000
asID:                     46606
IP address blocks:        209.59.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:82:c4:de:30:36:b9:d7:df:6a:3a:78:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Jul 15 21:00:12 2026 GMT
            Not After : Oct 13 21:00:12 2026 GMT
        Subject: CN=85e1c51b-c22c-4f8e-a899-0e0de75dc5a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:90:64:30:34:45:62:9d:24:74:83:31:0b:
                    d4:96:b2:94:26:ff:26:7d:ff:70:20:64:85:1c:a8:
                    49:c8:38:db:fc:15:49:49:0e:9a:e2:2f:92:c6:1d:
                    b9:d9:cc:ed:1b:f0:fd:f7:32:3a:e6:71:fa:b8:b5:
                    08:92:9c:1c:d8:33:5d:7a:e5:ff:f4:e1:26:44:fa:
                    49:0d:96:ff:bc:4e:d3:94:7f:91:e6:7d:04:19:66:
                    3b:59:0a:9c:15:53:52:3a:f3:3f:5f:db:89:81:67:
                    b4:da:8a:3a:df:f7:d0:58:ca:65:13:23:cc:9b:4d:
                    04:a5:96:5b:3c:a0:ea:be:06:c6:43:6d:79:7b:a0:
                    f4:f1:35:a4:46:5e:e0:c0:ad:6a:f1:0a:2e:f4:16:
                    29:e2:ea:8d:0c:5d:44:1b:53:26:08:03:d9:5a:33:
                    c2:97:c0:69:f2:d8:0e:59:fc:db:ad:51:31:d1:07:
                    a3:e1:cd:80:8a:de:fd:41:94:6a:38:ef:7f:7d:83:
                    c0:2d:c7:04:26:88:f5:f7:4a:2e:7c:bc:89:4c:c5:
                    83:33:5f:0d:bd:3f:a1:d2:11:da:ee:58:3d:89:a7:
                    ab:8e:5b:14:bd:c0:67:5d:c6:13:60:16:8d:73:d0:
                    eb:5c:d1:27:45:c2:eb:e1:a8:3e:17:cc:b8:8f:0c:
                    43:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B8:01:C7:90:36:09:8B:1B:E2:01:8A:42:92:DC:BA:0E:F6:CD:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/cf0d02ea-7c97-3203-a72d-003b0556e0c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.59.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ae:15:b5:c0:ca:a7:1e:24:66:21:09:08:45:a7:3b:cc:1f:
         30:ef:0c:c1:db:61:59:f2:dc:37:1c:6b:a9:df:f0:30:dc:08:
         81:5e:1d:13:50:38:38:85:ce:82:38:4f:41:1f:5e:01:ec:4c:
         20:a8:8d:a5:98:dc:ac:5c:b6:aa:34:5a:82:ff:a7:8d:7a:4d:
         7b:7b:3c:1e:f4:f8:04:2d:73:2a:16:0a:2c:57:b8:ca:48:24:
         99:92:e1:2b:dc:ce:8f:0c:d4:03:45:3d:89:2b:6b:9f:51:f6:
         1a:ef:b4:4d:98:09:83:d3:47:66:4c:54:8f:42:6d:2e:11:e4:
         c3:1e:b7:9c:8f:79:96:41:f9:7a:5b:b1:07:0e:d6:0a:3b:3a:
         81:f5:88:44:69:78:52:fa:7a:fd:b4:67:d2:f9:59:ad:15:d7:
         a4:bd:e0:d1:66:7e:36:ed:32:54:c1:42:24:f7:45:38:dd:f0:
         34:45:33:19:e0:22:a8:83:b6:85:7e:01:8f:03:e8:03:5b:47:
         8d:7d:c2:43:04:8b:73:f6:96:0f:46:f9:c7:e1:04:ca:f0:4b:
         82:95:68:fd:92:50:ca:56:cb:32:08:85:81:eb:82:d7:38:c4:
         fb:42:e8:0f:c7:a5:82:9b:b3:bc:72:2f:9c:0b:36:d8:f5:b9:
         ed:e5:9f:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6CxN4wNrnX32o6eKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTBmMzc3NWYtN2E2Yi00YjkyLWI1ZGYtODJkODE1NjJi
MDhlMB4XDTI2MDcxNTIxMDAxMloXDTI2MTAxMzIxMDAxMlowLzEtMCsGA1UEAxMk
ODVlMWM1MWItYzIyYy00ZjhlLWE4OTktMGUwZGU3NWRjNWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdyQZDA0RWKdJHSDMQvUlrKUJv8mff9wIGSF
HKhJyDjb/BVJSQ6a4i+Sxh252cztG/D99zI65nH6uLUIkpwc2DNdeuX/9OEmRPpJ
DZb/vE7TlH+R5n0EGWY7WQqcFVNSOvM/X9uJgWe02oo63/fQWMplEyPMm00EpZZb
PKDqvgbGQ215e6D08TWkRl7gwK1q8Qou9BYp4uqNDF1EG1MmCAPZWjPCl8Bp8tgO
WfzbrVEx0Qej4c2Ait79QZRqOO9/fYPALccEJoj190oufLyJTMWDM18NvT+h0hHa
7lg9iaerjlsUvcBnXcYTYBaNc9DrXNEnRcLr4ag+F8y4jwxDRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJy4AceQNgmLG+IBikKS3LoO9s0qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYz
Nzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4MTU2MmIwOGUvY2YwZDAyZWEtN2M5Ny0z
MjAzLWE3MmQtMDAzYjA1NTZlMGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTBmMzc3NWYtN2E2Yi00YjkyLWI1
ZGYtODJkODE1NjJiMDhlL2UwZjM3NzVmLTdhNmItNGI5Mi1iNWRmLTgyZDgxNTYy
YjA4ZS5jcmwwHwYDVR0jBBgwFoAUCUtXkuMVh55WqGUJuWfdMHF6F1kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYzNzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4
MTU2MmIwOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0TvAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHSuFbXAyqceJGYhCQhFpzvMHzDvDMHbYVny3Dcca6nf8DDcCIFeHRNQ
ODiFzoI4T0EfXgHsTCCojaWY3Kxctqo0WoL/p416TXt7PB70+AQtcyoWCixXuMpI
JJmS4Svczo8M1ANFPYkra59R9hrvtE2YCYPTR2ZMVI9CbS4R5MMet5yPeZZB+Xpb
sQcO1go7OoH1iERpeFL6ev20Z9L5Wa0V16S94NFmfjbtMlTBQiT3RTjd8DRFMxng
IqiDtoV+AY8D6ANbR419wkMEi3P2lg9G+cfhBMrwS4KVaP2SUMpWyzIIhYHrgtc4
xPtC6A/HpYKbs7xyL5wLNtj1ue3ln6E=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:41:04 2026 by rpki-client