Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e3b7ded9-111b-3ee2-83a3-b2d8a0d49f92.roa
File:                     e3b7ded9-111b-3ee2-83a3-b2d8a0d49f92.roa (raw, json)
Hash identifier:          GxMacH6F+LLA7PCDthjYj+vVWAjt9pvwohgezaibaN0=
Subject key identifier:   EF:12:4E:3D:C6:5D:28:21:29:B1:3A:3B:55:53:FF:7F:B4:A1:5A:A2
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584E54B491A7DC56C5EDEC907240
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e3b7ded9-111b-3ee2-83a3-b2d8a0d49f92.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     13984
IP address blocks:        63.144.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:91:a7:dc:56:c5:ed:ec:90:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=38e1d373-f1da-4de8-8051-d7c5167cb377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:24:f0:9c:45:8e:87:12:e0:38:4e:32:fb:55:
                    f5:de:38:06:1a:1c:0d:88:30:55:49:5d:9e:a4:67:
                    e6:39:2a:6c:a3:d8:9c:4d:0c:a1:9f:42:8c:5c:ea:
                    e5:d0:8a:a1:f4:50:37:67:aa:1e:79:0d:b9:20:76:
                    fd:f6:c5:41:48:4f:06:26:20:eb:f8:9e:18:da:7a:
                    fe:47:04:32:8e:41:dd:df:b0:ee:61:e8:b9:8b:ea:
                    d2:0b:77:44:19:1a:60:ba:b7:a8:46:53:e5:67:b6:
                    04:ee:45:22:27:82:1f:4f:12:e8:1b:6b:be:0c:76:
                    5c:32:9b:b6:88:99:50:e4:12:96:ec:4e:bc:26:fb:
                    e9:bf:87:85:2d:d2:66:a7:a5:63:49:e9:40:85:3f:
                    75:a8:07:bf:a8:93:40:ff:3e:22:71:92:48:be:b5:
                    cc:e4:59:9d:59:f3:ed:8a:7c:e3:97:38:1a:b7:ad:
                    a6:1b:5e:79:a3:59:87:3b:3e:d3:c1:a6:33:7b:d5:
                    17:1e:e7:5b:e9:4d:36:86:07:13:86:64:f1:9f:e4:
                    fb:ae:51:af:e6:2b:b4:a7:6a:d8:c2:fe:1d:b5:40:
                    c3:da:25:0e:16:31:1b:89:a5:d3:32:26:06:14:ec:
                    6c:16:36:b2:80:df:ef:8b:dd:01:41:ce:63:a2:63:
                    c5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:12:4E:3D:C6:5D:28:21:29:B1:3A:3B:55:53:FF:7F:B4:A1:5A:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e3b7ded9-111b-3ee2-83a3-b2d8a0d49f92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.144.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:e9:30:a1:7d:af:1d:9d:42:1f:8a:a1:a8:e9:4e:56:14:17:
         eb:73:ad:ce:0a:58:1a:c8:22:5f:bc:16:a1:c9:52:62:5d:cb:
         ab:49:73:13:32:c3:f6:ef:7b:0e:71:1f:a2:7b:2c:84:f2:1c:
         de:12:91:ba:25:f7:4c:35:b7:a6:d2:50:e9:eb:22:e5:d1:05:
         70:41:67:7f:0b:29:fc:fb:c5:3d:99:87:46:34:ef:7e:07:d1:
         fa:56:1b:92:28:37:09:e9:f8:1d:67:87:03:d6:b6:22:a7:a6:
         54:f6:e6:77:e7:cb:12:90:31:7f:83:ec:60:fd:47:2f:b5:28:
         eb:1b:c4:a1:5c:01:d4:c1:8a:95:50:f3:a5:36:64:4c:31:eb:
         c1:e4:10:d0:e7:df:69:58:c6:12:1c:3d:c9:1c:72:3c:68:db:
         3d:ff:fd:28:b8:6d:d5:45:09:52:1e:bd:b8:74:b4:00:60:47:
         71:e4:e2:7f:d3:38:2b:a8:c6:fd:75:78:f0:13:17:de:0f:e9:
         13:17:8a:58:f8:fc:cd:0f:c0:40:c9:d9:48:97:c7:c8:3a:7d:
         b6:c3:27:db:43:c9:05:34:1b:2c:60:2f:1d:07:b7:dc:e9:8b:
         e3:e5:4f:de:f3:c1:19:5b:8f:04:ee:3d:4f:8e:cf:78:ce:18:
         1d:54:7c:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtJGn3FbF7eyQckAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm
M2VjMB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk
MzhlMWQzNzMtZjFkYS00ZGU4LTgwNTEtZDdjNTE2N2NiMzc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CTwnEWOhxLgOE4y+1X13jgGGhwNiDBVSV2e
pGfmOSpso9icTQyhn0KMXOrl0Iqh9FA3Z6oeeQ25IHb99sVBSE8GJiDr+J4Y2nr+
RwQyjkHd37DuYei5i+rSC3dEGRpgureoRlPlZ7YE7kUiJ4IfTxLoG2u+DHZcMpu2
iJlQ5BKW7E68Jvvpv4eFLdJmp6VjSelAhT91qAe/qJNA/z4icZJIvrXM5FmdWfPt
inzjlzgat62mG155o1mHOz7TwaYze9UXHudb6U02hgcThmTxn+T7rlGv5iu0p2rY
wv4dtUDD2iUOFjEbiaXTMiYGFOxsFjaygN/vi90BQc5jomPFaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO8STj3GXSghKbE6O1VT/3+0oVqiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3
YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvZTNiN2RlZDktMTExYi0z
ZWUyLTgzYTMtYjJkOGEwZDQ5ZjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5
MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0
ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm
ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP5DwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADHpMKF9rx2dQh+KoajpTlYUF+tzrc4KWBrIIl+8FqHJUmJdy6tJcxMy
w/bvew5xH6J7LITyHN4Skbol90w1t6bSUOnrIuXRBXBBZ38LKfz7xT2Zh0Y0734H
0fpWG5IoNwnp+B1nhwPWtiKnplT25nfnyxKQMX+D7GD9Ry+1KOsbxKFcAdTBipVQ
86U2ZEwx68HkENDn32lYxhIcPckccjxo2z3//Si4bdVFCVIevbh0tABgR3Hk4n/T
OCuoxv11ePATF94P6RMXilj4/M0PwEDJ2UiXx8g6fbbDJ9tDyQU0GyxgLx0Ht9zp
i+PlT97zwRlbjwTuPU+Oz3jOGB1UfIE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:20:00 2026 by rpki-client