Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9085e9bb-9523-4bb9-9777-0b11dca92987/345571fd-5240-3d2f-9fea-f202ede231a4.roa
File:                     345571fd-5240-3d2f-9fea-f202ede231a4.roa (raw, json)
Hash identifier:          Srj+eQ8XsYdujY0mk09iJ1hNRVnRC/KqRSD9zlJ6UQk=
Subject key identifier:   4D:38:3A:8B:4D:E6:C6:C5:01:4B:8E:DF:48:CE:6F:D8:2C:74:74:1C
Certificate issuer:       /CN=9085e9bb-9523-4bb9-9777-0b11dca92987
Certificate serial:       010D0C9F4328584E7D0CC201F6B9A5ED02475E80
Authority key identifier: F4:04:C0:CC:FB:38:28:F3:0E:7E:CA:30:B0:F9:4C:0B:FB:68:91:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9085e9bb-9523-4bb9-9777-0b11dca92987.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9085e9bb-9523-4bb9-9777-0b11dca92987/345571fd-5240-3d2f-9fea-f202ede231a4.roa
Signing time:             Mon 13 Jul 2026 19:50:16 +0000
ROA not before:           Mon 13 Jul 2026 19:50:16 +0000
ROA not after:            Sun 11 Oct 2026 19:50:16 +0000
asID:                     402748
IP address blocks:        198.17.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9085e9bb-9523-4bb9-9777-0b11dca92987/9085e9bb-9523-4bb9-9777-0b11dca92987.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9085e9bb-9523-4bb9-9777-0b11dca92987/9085e9bb-9523-4bb9-9777-0b11dca92987.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9085e9bb-9523-4bb9-9777-0b11dca92987.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7d:0c:c2:01:f6:b9:a5:ed:02:47:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9085e9bb-9523-4bb9-9777-0b11dca92987
        Validity
            Not Before: Jul 13 19:50:16 2026 GMT
            Not After : Oct 11 19:50:16 2026 GMT
        Subject: CN=57dabce8-bf02-4aee-bfd4-87beca6d6a9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0e:2c:76:27:fe:6a:53:e3:56:6a:ee:28:f2:
                    c5:47:48:7b:e0:74:81:28:9c:ea:26:e1:fb:e6:8d:
                    c8:82:f7:c1:95:53:94:0e:8c:fe:94:d1:62:c5:0e:
                    a0:9d:72:dc:84:5a:0e:f3:f4:e1:24:94:8f:ed:f8:
                    55:57:33:c1:d8:d6:e7:1c:96:a2:64:30:0c:4b:e3:
                    81:83:e4:6b:1d:81:09:c5:3c:d9:7d:f7:81:0c:a1:
                    46:f3:70:80:2a:9f:b0:0e:2f:bc:42:7c:49:c5:20:
                    b2:df:22:83:c7:d9:99:62:bb:92:a9:45:3b:ce:e7:
                    da:a2:d2:47:e9:e5:fe:85:1e:6f:58:dc:ae:9d:fd:
                    d1:4f:52:09:e3:9d:54:4b:60:85:b8:84:65:65:b2:
                    40:09:3e:e1:93:b0:c8:be:91:3a:86:fb:d4:f2:a6:
                    9e:45:a1:d0:4b:13:b4:12:41:5f:dc:46:bf:18:3d:
                    68:40:5f:ba:63:d0:72:67:1d:e8:39:69:26:41:d8:
                    f2:ea:d0:48:b5:84:be:16:c5:a7:bc:0b:4f:54:a6:
                    19:de:2f:11:51:a9:ca:64:5f:b5:ca:23:5c:4b:fe:
                    7e:31:b2:2a:ca:73:c1:67:92:c9:f4:2a:8f:f6:44:
                    f8:19:11:f6:89:a5:4d:bd:e8:fc:06:ab:76:74:47:
                    61:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:38:3A:8B:4D:E6:C6:C5:01:4B:8E:DF:48:CE:6F:D8:2C:74:74:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9085e9bb-9523-4bb9-9777-0b11dca92987/345571fd-5240-3d2f-9fea-f202ede231a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9085e9bb-9523-4bb9-9777-0b11dca92987/9085e9bb-9523-4bb9-9777-0b11dca92987.crl

            X509v3 Authority Key Identifier:
                keyid:F4:04:C0:CC:FB:38:28:F3:0E:7E:CA:30:B0:F9:4C:0B:FB:68:91:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9085e9bb-9523-4bb9-9777-0b11dca92987.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:6b:77:63:6e:4a:37:ab:8a:39:1d:58:0e:e9:4f:dc:ca:07:
         f7:2b:af:d2:61:3e:98:9b:1e:7f:06:e4:85:fa:f6:58:48:c2:
         0a:23:5c:8c:4d:33:4b:1f:65:18:55:c7:d0:82:e2:67:86:0f:
         57:74:37:bc:d6:8e:0d:72:6a:e8:55:09:b5:9b:f2:29:f3:af:
         7e:f4:10:40:7f:ad:19:ed:51:b8:53:10:f1:17:7f:03:da:df:
         30:2e:68:bf:13:48:9d:45:15:53:2d:85:9e:6d:92:37:d7:68:
         a7:2a:2b:e4:2e:a9:4d:a2:bf:ae:28:07:1e:2d:72:f5:b1:3a:
         9f:d2:ac:e8:36:12:9c:ac:51:ac:a5:7e:03:5b:61:10:8b:83:
         81:8d:3f:bf:5b:8e:33:24:56:93:6b:b5:2d:6f:9f:31:08:e1:
         0b:45:ec:79:e7:69:86:69:e9:34:57:1a:d3:35:e3:ca:55:b6:
         e1:ba:92:d6:ad:40:97:12:47:15:ce:f2:dc:00:e0:87:0c:f2:
         95:27:8c:6d:7d:84:30:a3:7f:1b:93:68:54:53:f1:89:bc:76:
         47:bb:f6:5e:56:67:36:3b:ed:15:31:c4:1b:7f:cf:89:55:50:
         86:a1:be:a4:24:a6:21:4f:1b:cb:58:ab:9f:1d:a2:66:ea:9c:
         63:ce:13:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE59DMIB9rml7QJHXoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA4NWU5YmItOTUyMy00YmI5LTk3NzctMGIxMWRjYTky
OTg3MB4XDTI2MDcxMzE5NTAxNloXDTI2MTAxMTE5NTAxNlowLzEtMCsGA1UEAxMk
NTdkYWJjZTgtYmYwMi00YWVlLWJmZDQtODdiZWNhNmQ2YTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ4sdif+alPjVmruKPLFR0h74HSBKJzqJuH7
5o3IgvfBlVOUDoz+lNFixQ6gnXLchFoO8/ThJJSP7fhVVzPB2NbnHJaiZDAMS+OB
g+RrHYEJxTzZffeBDKFG83CAKp+wDi+8QnxJxSCy3yKDx9mZYruSqUU7zufaotJH
6eX+hR5vWNyunf3RT1IJ451US2CFuIRlZbJACT7hk7DIvpE6hvvU8qaeRaHQSxO0
EkFf3Ea/GD1oQF+6Y9ByZx3oOWkmQdjy6tBItYS+FsWnvAtPVKYZ3i8RUanKZF+1
yiNcS/5+MbIqynPBZ5LJ9CqP9kT4GRH2iaVNvej8Bqt2dEdh8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE04OotN5sbFAUuO30jOb9gsdHQcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi85MDg1
ZTliYi05NTIzLTRiYjktOTc3Ny0wYjExZGNhOTI5ODcvMzQ1NTcxZmQtNTI0MC0z
ZDJmLTlmZWEtZjIwMmVkZTIzMWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvOTA4NWU5YmItOTUyMy00YmI5LTk3
NzctMGIxMWRjYTkyOTg3LzkwODVlOWJiLTk1MjMtNGJiOS05Nzc3LTBiMTFkY2E5
Mjk4Ny5jcmwwHwYDVR0jBBgwFoAU9ATAzPs4KPMOfsowsPlMC/tokb8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi85MDg1ZTliYi05NTIzLTRiYjktOTc3Ny0wYjEx
ZGNhOTI5ODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC5rd2NuSjerijkdWA7pT9zKB/crr9JhPpibHn8G5IX69lhIwgojXIxN
M0sfZRhVx9CC4meGD1d0N7zWjg1yauhVCbWb8inzr370EEB/rRntUbhTEPEXfwPa
3zAuaL8TSJ1FFVMthZ5tkjfXaKcqK+QuqU2iv64oBx4tcvWxOp/SrOg2EpysUayl
fgNbYRCLg4GNP79bjjMkVpNrtS1vnzEI4QtF7HnnaYZp6TRXGtM148pVtuG6ktat
QJcSRxXO8twA4IcM8pUnjG19hDCjfxuTaFRT8Ym8dke79l5WZzY77RUxxBt/z4lV
UIahvqQkpiFPG8tYq58dombqnGPOE4Q=
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:38:50 2026 by rpki-client