Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e7348fa9-f60c-4f99-833b-09d30601e600/d6ad2675-967c-3e49-86f6-29fc851a6b1e.roa
File:                     d6ad2675-967c-3e49-86f6-29fc851a6b1e.roa (raw, json)
Hash identifier:          67lhdckMXpw3oNQwVE8Ju8bcVSYFLHHcENHQfiyCQ4Q=
Subject key identifier:   00:8D:C0:87:B9:58:48:B9:66:40:64:1D:89:BF:AB:66:70:A8:0A:62
Certificate issuer:       /CN=e7348fa9-f60c-4f99-833b-09d30601e600
Certificate serial:       010D0C9F4328584E881EAB2BC290303A245B86E0
Authority key identifier: B1:BA:D6:A2:E0:30:0C:24:FC:6D:F6:8F:83:AD:B0:DF:87:E2:B5:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e7348fa9-f60c-4f99-833b-09d30601e600.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e7348fa9-f60c-4f99-833b-09d30601e600/d6ad2675-967c-3e49-86f6-29fc851a6b1e.roa
Signing time:             Fri 17 Jul 2026 19:00:14 +0000
ROA not before:           Fri 17 Jul 2026 19:00:14 +0000
ROA not after:            Thu 15 Oct 2026 19:00:14 +0000
asID:                     40566
IP address blocks:        192.31.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e7348fa9-f60c-4f99-833b-09d30601e600/e7348fa9-f60c-4f99-833b-09d30601e600.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e7348fa9-f60c-4f99-833b-09d30601e600/e7348fa9-f60c-4f99-833b-09d30601e600.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e7348fa9-f60c-4f99-833b-09d30601e600.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:1e:ab:2b:c2:90:30:3a:24:5b:86:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7348fa9-f60c-4f99-833b-09d30601e600
        Validity
            Not Before: Jul 17 19:00:14 2026 GMT
            Not After : Oct 15 19:00:14 2026 GMT
        Subject: CN=2dde9d95-a0f2-44b5-b00a-13c8c8cee573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:44:bd:e1:6a:70:b9:9a:31:c1:5e:1d:0e:28:
                    e6:05:99:70:72:8d:5b:f3:70:cb:eb:bc:4c:72:d2:
                    04:d4:ef:1a:f9:9d:a7:28:a8:76:b3:0d:87:32:ec:
                    4b:b8:98:64:fb:c3:8c:8d:4e:4e:74:bd:63:db:c1:
                    66:88:ff:c3:4b:c2:c9:f4:5f:b2:b9:fa:c3:7d:25:
                    b7:d8:27:3b:72:b9:eb:df:e2:89:bd:d5:62:51:b6:
                    ad:04:38:a3:fa:de:5f:6b:41:16:94:9d:57:73:ab:
                    5b:6e:8b:c9:c4:f8:55:e5:6a:71:0a:9d:15:b6:4d:
                    a6:83:51:ee:b7:91:5d:0a:ce:b9:d5:20:51:1b:de:
                    b5:c5:66:0a:d5:33:bf:d1:5a:f7:e7:6d:9e:6c:db:
                    bd:06:34:f5:98:37:1e:4d:b8:51:b9:7b:31:0b:8a:
                    3e:50:10:c9:4f:b1:80:ee:a3:61:01:2b:59:42:4b:
                    5b:85:79:a3:30:b7:c0:a5:09:96:40:9f:fd:87:ec:
                    17:61:a4:78:58:ee:ca:b2:03:6f:89:73:f9:0a:72:
                    16:a6:3a:9f:58:fc:0a:94:d3:e4:cc:9a:c6:37:8a:
                    0e:0a:1e:33:65:c6:9e:89:36:79:99:ca:65:ff:cf:
                    d8:79:c1:9c:e7:62:ca:a1:95:a7:9b:f2:55:ce:d0:
                    4b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:8D:C0:87:B9:58:48:B9:66:40:64:1D:89:BF:AB:66:70:A8:0A:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e7348fa9-f60c-4f99-833b-09d30601e600/d6ad2675-967c-3e49-86f6-29fc851a6b1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e7348fa9-f60c-4f99-833b-09d30601e600/e7348fa9-f60c-4f99-833b-09d30601e600.crl

            X509v3 Authority Key Identifier:
                keyid:B1:BA:D6:A2:E0:30:0C:24:FC:6D:F6:8F:83:AD:B0:DF:87:E2:B5:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/e7348fa9-f60c-4f99-833b-09d30601e600.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:2d:f7:65:2f:17:9d:ee:ae:27:8f:9c:22:ff:29:41:25:b6:
         d9:7c:8d:a4:a2:55:c9:cf:29:48:f5:b9:b9:81:d8:1e:ca:ed:
         d6:cf:d4:5e:a2:bf:f4:8a:d9:89:29:4c:f0:4a:19:f0:81:37:
         20:9b:6e:a4:ec:34:c9:29:f1:46:ef:9b:8e:97:2b:23:05:83:
         65:02:38:10:fa:94:dd:3f:fb:2e:3e:f0:5d:a7:ce:59:b5:fe:
         9d:ab:45:36:f3:ad:1c:3d:fc:94:d5:bb:cd:0a:6b:3e:f7:8f:
         fc:ba:49:19:98:1e:78:9e:1e:cf:b5:01:3f:d6:0b:30:39:8c:
         d0:3e:88:75:97:4e:6e:ad:c1:0c:53:1a:8d:00:71:7c:08:55:
         c4:34:4a:5d:94:94:94:84:5f:01:8d:ad:6e:8a:7b:31:c2:17:
         8f:79:53:e8:72:78:8d:e7:80:47:e7:e0:0e:ab:4a:c4:f8:26:
         34:63:ec:d7:a2:c4:d1:75:75:78:d2:54:4c:f3:82:d5:08:ce:
         50:e4:92:62:28:94:ce:78:e2:c5:6f:7c:7b:5f:6a:ae:43:1b:
         eb:c5:39:ed:e3:f8:82:6b:bf:16:b2:d0:95:b6:6b:cc:73:56:
         44:55:c4:44:be:97:3a:98:fe:9e:63:ba:4e:b3:a3:5d:2d:e7:
         3d:be:f8:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6IHqsrwpAwOiRbhuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTczNDhmYTktZjYwYy00Zjk5LTgzM2ItMDlkMzA2MDFl
NjAwMB4XDTI2MDcxNzE5MDAxNFoXDTI2MTAxNTE5MDAxNFowLzEtMCsGA1UEAxMk
MmRkZTlkOTUtYTBmMi00NGI1LWIwMGEtMTNjOGM4Y2VlNTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUS94WpwuZoxwV4dDijmBZlwco1b83DL67xM
ctIE1O8a+Z2nKKh2sw2HMuxLuJhk+8OMjU5OdL1j28FmiP/DS8LJ9F+yufrDfSW3
2Cc7crnr3+KJvdViUbatBDij+t5fa0EWlJ1Xc6tbbovJxPhV5WpxCp0Vtk2mg1Hu
t5FdCs651SBRG961xWYK1TO/0Vr3522ebNu9BjT1mDceTbhRuXsxC4o+UBDJT7GA
7qNhAStZQktbhXmjMLfApQmWQJ/9h+wXYaR4WO7KsgNviXP5CnIWpjqfWPwKlNPk
zJrGN4oOCh4zZcaeiTZ5mcpl/8/YecGc52LKoZWnm/JVztBLuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFACNwIe5WEi5ZkBkHYm/q2ZwqApiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9lNzM0
OGZhOS1mNjBjLTRmOTktODMzYi0wOWQzMDYwMWU2MDAvZDZhZDI2NzUtOTY3Yy0z
ZTQ5LTg2ZjYtMjlmYzg1MWE2YjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvZTczNDhmYTktZjYwYy00Zjk5LTgz
M2ItMDlkMzA2MDFlNjAwL2U3MzQ4ZmE5LWY2MGMtNGY5OS04MzNiLTA5ZDMwNjAx
ZTYwMC5jcmwwHwYDVR0jBBgwFoAUsbrWouAwDCT8bfaPg62w34fitdswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi9lNzM0OGZhOS1mNjBjLTRmOTktODMzYi0wOWQz
MDYwMWU2MDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB/qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABot92UvF53uriePnCL/KUElttl8jaSiVcnPKUj1ubmB2B7K7dbP1F6i
v/SK2YkpTPBKGfCBNyCbbqTsNMkp8Ubvm46XKyMFg2UCOBD6lN0/+y4+8F2nzlm1
/p2rRTbzrRw9/JTVu80Kaz73j/y6SRmYHnieHs+1AT/WCzA5jNA+iHWXTm6twQxT
Go0AcXwIVcQ0Sl2UlJSEXwGNrW6KezHCF495U+hyeI3ngEfn4A6rSsT4JjRj7Nei
xNF1dXjSVEzzgtUIzlDkkmIolM544sVvfHtfaq5DG+vFOe3j+IJrvxay0JW2a8xz
VkRVxES+lzqY/p5juk6zo10t5z2++FA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:36:25 2026 by rpki-client