Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/ae5bc477-7f7c-3e3d-b2ee-22a7ece79511.roa
File:                     ae5bc477-7f7c-3e3d-b2ee-22a7ece79511.roa (raw, json)
Hash identifier:          ELsNDC+xpAfrY6FF+vO+kSB/1m3IRLcAmtD0jtxHBq4=
Subject key identifier:   C7:6A:A7:CC:65:30:DA:A6:72:D9:F0:83:71:04:0C:5B:3B:D8:98:4D
Certificate issuer:       /CN=b5f49734-696b-4966-8db9-1388a58a153f
Certificate serial:       010D0C9F4328584E3CF9C17A5DAEBD184888DA80
Authority key identifier: 0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/ae5bc477-7f7c-3e3d-b2ee-22a7ece79511.roa
Signing time:             Sat 20 Jun 2026 21:00:12 +0000
ROA not before:           Sat 20 Jun 2026 21:00:12 +0000
ROA not after:            Fri 18 Sep 2026 21:00:12 +0000
asID:                     11663
IP address blocks:        204.113.4.0/24 maxlen: 24
                          204.113.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3c:f9:c1:7a:5d:ae:bd:18:48:88:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f49734-696b-4966-8db9-1388a58a153f
        Validity
            Not Before: Jun 20 21:00:12 2026 GMT
            Not After : Sep 18 21:00:12 2026 GMT
        Subject: CN=57838c47-a696-43fd-b4ab-71a2f18a6527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c2:e6:10:e8:35:9c:c7:37:44:e1:a0:97:59:
                    47:cf:20:f4:7e:70:2d:29:e6:4c:6a:6d:97:5b:ee:
                    0d:4c:0f:2e:a7:5e:cd:16:21:d9:f4:c0:4e:79:08:
                    0a:46:5f:83:ad:1a:6d:38:37:23:3b:af:ba:10:b7:
                    de:1b:74:69:21:83:5f:4b:df:22:42:85:11:06:e8:
                    ae:a1:0a:cb:24:2b:f7:b1:5a:07:0f:b0:22:21:ab:
                    67:dd:4b:0c:00:47:18:a9:4d:f4:b4:c7:83:e1:4f:
                    54:b1:4e:3a:e0:0e:8e:5d:1d:24:7d:b6:41:8d:8d:
                    ff:b1:42:2d:de:74:b8:eb:f2:d9:3f:5a:24:52:df:
                    59:4f:56:83:da:aa:b6:89:7f:8f:87:78:9a:52:82:
                    83:64:c4:a1:7f:b0:ce:17:af:d8:48:23:80:7e:cf:
                    6c:e5:4b:87:16:4d:dc:bb:de:e0:84:08:e7:dd:d6:
                    fd:7d:f5:26:9a:fc:01:af:5b:e7:1b:32:79:b2:92:
                    1a:91:d1:65:54:58:49:8b:80:78:4a:4a:69:16:9d:
                    64:ac:f2:66:d7:79:7e:4d:b7:69:85:cf:53:69:f4:
                    7e:ea:25:d0:4c:3d:73:33:dc:11:7c:96:f6:47:d1:
                    c1:7a:a7:81:ba:81:a7:b5:cf:f3:58:e5:47:dc:cf:
                    aa:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6A:A7:CC:65:30:DA:A6:72:D9:F0:83:71:04:0C:5B:3B:D8:98:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/ae5bc477-7f7c-3e3d-b2ee-22a7ece79511.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f/b5f49734-696b-4966-8db9-1388a58a153f.crl

            X509v3 Authority Key Identifier:
                keyid:0C:B2:6F:FE:3D:27:27:33:F0:C0:69:0E:C9:2C:2E:A7:85:2D:59:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b5f49734-696b-4966-8db9-1388a58a153f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.113.4.0/24
                  204.113.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:b2:44:5f:70:7b:9c:38:d7:42:be:83:a0:18:38:24:aa:2c:
         dc:74:18:03:45:cc:1a:07:cd:3a:29:1b:f1:fb:95:30:4f:8c:
         0b:77:4b:46:3e:f3:b3:83:bd:e1:c0:7a:60:a1:e8:2e:89:e9:
         b3:60:59:8d:c0:14:71:48:45:7f:5b:ea:12:b6:75:c5:49:b3:
         06:9c:f2:e2:72:3d:96:40:58:84:17:98:f2:c6:5c:a5:0a:fa:
         d7:0d:51:0d:47:05:38:b4:3a:3d:18:6b:14:50:1d:03:33:c0:
         d5:85:87:2b:12:9c:06:d9:05:2e:61:b3:72:97:6a:3a:ed:6a:
         73:2a:4b:c4:7e:32:91:25:d0:8f:66:6f:de:33:1e:f5:0f:d8:
         24:4d:b6:36:5c:40:6e:34:0c:72:e3:24:a5:5b:50:5c:44:63:
         c6:39:a8:3d:1c:87:66:55:b6:cf:f8:e3:0e:c8:02:96:ed:12:
         df:01:b5:16:f5:0e:a4:b3:a6:29:30:7a:2e:83:a5:e9:df:6c:
         b9:b4:81:dd:0e:6c:a6:cb:2e:de:0b:00:10:6e:7a:92:38:57:
         4e:ae:86:ff:1c:34:16:ab:28:29:dc:dc:ee:15:2a:95:ad:cd:
         9f:28:dc:43:c1:13:c3:f8:4c:a9:40:8b:90:79:0b:88:4c:fe:
         9c:86:77:df
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE48+cF6Xa69GEiI2oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjVmNDk3MzQtNjk2Yi00OTY2LThkYjktMTM4OGE1OGEx
NTNmMB4XDTI2MDYyMDIxMDAxMloXDTI2MDkxODIxMDAxMlowLzEtMCsGA1UEAxMk
NTc4MzhjNDctYTY5Ni00M2ZkLWI0YWItNzFhMmYxOGE2NTI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8LmEOg1nMc3ROGgl1lHzyD0fnAtKeZMam2X
W+4NTA8up17NFiHZ9MBOeQgKRl+DrRptODcjO6+6ELfeG3RpIYNfS98iQoURBuiu
oQrLJCv3sVoHD7AiIatn3UsMAEcYqU30tMeD4U9UsU464A6OXR0kfbZBjY3/sUIt
3nS46/LZP1okUt9ZT1aD2qq2iX+Ph3iaUoKDZMShf7DOF6/YSCOAfs9s5UuHFk3c
u97ghAjn3db9ffUmmvwBr1vnGzJ5spIakdFlVFhJi4B4SkppFp1krPJm13l+Tbdp
hc9TafR+6iXQTD1zM9wRfJb2R9HBeqeBuoGntc/zWOVH3M+qywIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFMdqp8xlMNqmctnwg3EEDFs72JhNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iNWY0
OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4YTU4YTE1M2YvYWU1YmM0NzctN2Y3Yy0z
ZTNkLWIyZWUtMjJhN2VjZTc5NTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjVmNDk3MzQtNjk2Yi00OTY2LThk
YjktMTM4OGE1OGExNTNmL2I1ZjQ5NzM0LTY5NmItNDk2Ni04ZGI5LTEzODhhNThh
MTUzZi5jcmwwHwYDVR0jBBgwFoAUDLJv/j0nJzPwwGkOySwup4UtWSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iNWY0OTczNC02OTZiLTQ5NjYtOGRiOS0xMzg4
YTU4YTE1M2YuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzHEEAwQA
zHENMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAAOyRF9we5w410K+g6AYOCSqLNx0GANFzBoHzTopG/H7lTBP
jAt3S0Y+87ODveHAemCh6C6J6bNgWY3AFHFIRX9b6hK2dcVJswac8uJyPZZAWIQX
mPLGXKUK+tcNUQ1HBTi0Oj0YaxRQHQMzwNWFhysSnAbZBS5hs3KXajrtanMqS8R+
MpEl0I9mb94zHvUP2CRNtjZcQG40DHLjJKVbUFxEY8Y5qD0ch2ZVts/44w7IApbt
Et8BtRb1DqSzpikwei6DpenfbLm0gd0ObKbLLt4LABBuepI4V06uhv8cNBarKCnc
3O4VKpWtzZ8o3EPBE8P4TKlAi5B5C4hM/pyGd98=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:10:33 2026 by rpki-client