Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/14fa3220-8306-3011-96b8-8816bcbee539.roa
File:                     14fa3220-8306-3011-96b8-8816bcbee539.roa (raw, json)
Hash identifier:          Rw+FiEXwOHiUNT8jIwPTEiaShhBVDTBgxj6tXehhadU=
Subject key identifier:   F0:A0:33:0E:3A:31:94:79:78:4B:36:AF:D2:39:38:54:4F:C7:78:C2
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F4328584D4A8F909C8457778186BB2600
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/14fa3220-8306-3011-96b8-8816bcbee539.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     396247
IP address blocks:        96.61.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:90:9c:84:57:77:81:86:bb:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=5b687c8a-1699-4cf8-a3d0-b5b4e6332717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ff:db:35:a5:2c:eb:96:9d:c4:db:b5:2f:6d:
                    55:f0:dc:c0:69:35:43:23:8b:1f:09:59:4b:40:b1:
                    d8:2e:c5:dd:aa:01:62:20:d7:23:43:5d:4e:c8:d9:
                    3f:16:1e:47:70:90:2f:b0:d6:cd:0b:8b:3a:02:c9:
                    7c:28:92:c3:95:58:ca:19:77:8c:a5:80:0c:f1:b5:
                    1c:c3:65:f0:8c:d2:d3:f1:96:3e:cf:2f:82:5e:83:
                    dd:7f:db:d5:9c:49:69:cc:71:14:3c:91:c7:2a:83:
                    cd:62:f5:c0:a8:3f:57:96:70:52:e2:a8:ad:eb:fe:
                    f1:76:88:08:dc:8f:7a:ae:43:a1:0b:f6:10:21:d2:
                    5f:fc:90:09:a0:05:81:dd:6d:4a:14:f1:eb:69:d4:
                    1d:a8:12:e5:9a:f7:43:cf:ec:f7:20:7a:27:73:65:
                    e2:09:6c:08:72:fa:b7:67:2d:ad:e4:b9:c8:e3:1e:
                    51:79:48:3c:71:75:6a:3d:d5:35:a1:d0:77:35:b9:
                    cc:fb:55:4c:19:0a:9c:b0:50:9a:23:fc:9d:ff:b7:
                    f1:df:74:33:2e:08:7c:4a:bf:92:b1:79:44:a0:87:
                    54:d5:92:9d:fe:9e:1e:13:00:00:06:da:67:bd:47:
                    d9:f9:7c:af:f6:79:7a:d5:f4:5d:2d:1c:54:a2:d1:
                    7e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A0:33:0E:3A:31:94:79:78:4B:36:AF:D2:39:38:54:4F:C7:78:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/14fa3220-8306-3011-96b8-8816bcbee539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.61.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:0c:f6:e4:35:4e:e6:39:33:92:55:13:11:b4:a9:38:5b:6f:
         58:04:6f:6e:5a:c2:e1:2d:0a:2d:2d:89:01:af:da:a8:08:a6:
         d5:46:30:2e:b2:82:ad:6d:15:48:a6:00:65:c4:e9:4d:7e:b8:
         ce:8c:9d:aa:c3:7c:b3:fb:12:70:ad:89:be:b2:d4:9d:8c:70:
         ea:ea:46:13:fb:fd:00:43:67:93:b4:e0:ce:1c:d8:ea:d7:8e:
         11:68:52:9a:7e:40:d0:82:07:46:3e:8b:a2:0a:10:97:f1:86:
         f9:84:d9:2d:98:69:86:2f:29:07:4f:2b:ce:5a:69:29:69:a4:
         21:e2:eb:41:6a:b7:3f:a0:b3:e7:7a:2d:9b:c1:3e:1b:85:a5:
         47:63:04:69:80:6b:fb:e0:99:d4:0c:c0:fb:08:ca:51:5d:ed:
         b5:15:32:f3:c8:bb:59:31:66:02:37:67:71:4f:2e:1a:79:b2:
         47:50:31:d1:2e:61:dd:b6:78:0f:a3:57:f1:b7:fc:b7:55:25:
         d4:23:a3:13:26:94:d6:db:1b:12:f0:77:59:57:11:cd:c5:b3:
         49:e5:81:f9:53:d5:9a:8f:7a:f0:b4:92:59:96:27:58:d0:87:
         72:b7:e8:bd:7f:d0:bf:28:b3:ea:66:cc:c9:4c:31:05:2d:ad:
         22:95:09:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj5CchFd3gYa7JgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGVkZDYzNTctMjkzNS00YjkyLTgxMzAtNjgwNzFkNGVh
ZjAxMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk
NWI2ODdjOGEtMTY5OS00Y2Y4LWEzZDAtYjViNGU2MzMyNzE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5//bNaUs65adxNu1L21V8NzAaTVDI4sfCVlL
QLHYLsXdqgFiINcjQ11OyNk/Fh5HcJAvsNbNC4s6Asl8KJLDlVjKGXeMpYAM8bUc
w2XwjNLT8ZY+zy+CXoPdf9vVnElpzHEUPJHHKoPNYvXAqD9XlnBS4qit6/7xdogI
3I96rkOhC/YQIdJf/JAJoAWB3W1KFPHradQdqBLlmvdDz+z3IHonc2XiCWwIcvq3
Zy2t5LnI4x5ReUg8cXVqPdU1odB3NbnM+1VMGQqcsFCaI/yd/7fx33QzLgh8Sr+S
sXlEoIdU1ZKd/p4eEwAABtpnvUfZ+Xyv9nl61fRdLRxUotF+DwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPCgMw46MZR5eEs2r9I5OFRPx3jCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRk
NjM1Ny0yOTM1LTRiOTItODEzMC02ODA3MWQ0ZWFmMDEvMTRmYTMyMjAtODMwNi0z
MDExLTk2YjgtODgxNmJjYmVlNTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGVkZDYzNTctMjkzNS00YjkyLTgx
MzAtNjgwNzFkNGVhZjAxLzRlZGQ2MzU3LTI5MzUtNGI5Mi04MTMwLTY4MDcxZDRl
YWYwMS5jcmwwHwYDVR0jBBgwFoAUDFBNSElnaFxxGqFqTzIP9RhkBw0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZWRkNjM1Ny0yOTM1LTRiOTItODEzMC02ODA3
MWQ0ZWFmMDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYD0qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAMM9uQ1TuY5M5JVExG0qThbb1gEb25awuEtCi0tiQGv2qgIptVGMC6y
gq1tFUimAGXE6U1+uM6MnarDfLP7EnCtib6y1J2McOrqRhP7/QBDZ5O04M4c2OrX
jhFoUpp+QNCCB0Y+i6IKEJfxhvmE2S2YaYYvKQdPK85aaSlppCHi60Fqtz+gs+d6
LZvBPhuFpUdjBGmAa/vgmdQMwPsIylFd7bUVMvPIu1kxZgI3Z3FPLhp5skdQMdEu
Yd22eA+jV/G3/LdVJdQjoxMmlNbbGxLwd1lXEc3Fs0nlgflT1ZqPevC0klmWJ1jQ
h3K36L1/0L8os+pmzMlMMQUtrSKVCeA=
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:38:26 2026 by rpki-client