Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b10e56b6-546d-3be0-b675-d61e616393d8.roa
File:                     b10e56b6-546d-3be0-b675-d61e616393d8.roa (raw, json)
Hash identifier:          m0RqdhDgceiQ24JdgDxgxCpXuKQ3ZcEzdCrLSRYS7ao=
Subject key identifier:   41:40:62:4B:A2:CD:DE:8F:AD:1D:01:93:C7:EF:9F:52:52:85:20:71
Certificate issuer:       /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Certificate serial:       010D0C9F4328584E5FDF5D682782D4463DC6AAA0
Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b10e56b6-546d-3be0-b675-d61e616393d8.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     11052
IP address blocks:        199.249.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:5d:68:27:82:d4:46:3d:c6:aa:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=569d08ae-594f-4172-a844-2b5019ae85ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:84:3e:07:b9:a5:22:92:5e:75:61:86:80:14:
                    63:84:42:45:98:bb:90:38:46:e0:d2:f8:52:8e:0e:
                    bb:a5:39:90:c9:cb:f2:17:5f:35:de:2d:1e:1a:5e:
                    c7:49:01:c6:f8:c3:19:70:db:84:05:58:1c:6a:3d:
                    a2:78:3c:27:c8:76:ca:e0:cd:90:e3:1e:06:36:cc:
                    6c:66:da:f7:87:23:20:c3:6c:5e:1c:36:00:8c:d5:
                    c1:c1:d0:4d:2a:d2:3f:8f:2e:19:95:95:ba:24:4b:
                    c5:c3:8d:82:1c:e4:4d:12:8e:9f:9a:96:25:c6:15:
                    90:df:94:8a:58:59:08:55:0e:8b:91:6b:88:a1:cc:
                    9a:55:19:8b:93:20:54:d1:80:eb:88:d3:86:b6:fa:
                    35:1a:0e:49:f5:04:a1:c0:27:22:ff:7a:26:07:27:
                    33:89:a1:9f:88:91:4c:06:81:59:99:b5:73:95:eb:
                    77:88:74:27:65:69:68:c6:8a:4d:3c:b6:51:5a:cf:
                    4e:ae:35:8f:d6:28:ef:d2:01:7e:b3:2e:07:00:e2:
                    ec:08:e7:97:bd:45:a1:41:90:dc:80:a2:47:66:00:
                    43:d6:7a:a6:73:f9:f3:57:1c:99:77:99:5f:ae:93:
                    f7:e4:3e:af:38:73:b0:ad:ed:65:02:cb:6b:6f:ed:
                    32:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:40:62:4B:A2:CD:DE:8F:AD:1D:01:93:C7:EF:9F:52:52:85:20:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b10e56b6-546d-3be0-b675-d61e616393d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl

            X509v3 Authority Key Identifier:
                keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:58:17:8f:90:e8:b8:f6:f6:3b:1d:31:b8:96:cb:e3:45:dd:
         be:01:d3:b7:fe:18:44:66:33:30:38:a9:ad:e9:52:30:9a:4d:
         43:b0:64:93:d3:ee:63:7e:32:db:e3:a0:57:db:a3:2f:a8:fe:
         ad:79:1d:09:e3:18:97:02:63:80:ef:a9:06:bb:24:3d:91:f5:
         b1:6f:72:db:b7:53:4f:10:0d:22:4c:02:d5:52:b1:6e:19:03:
         f5:04:4f:03:a6:ab:ee:9e:e4:0c:79:85:36:3d:24:fb:a2:cd:
         ee:ce:a0:9c:13:ff:bc:3a:96:4b:6e:18:eb:ff:76:05:6a:24:
         a5:2b:e2:c8:94:6e:3a:ae:9b:23:e0:a7:74:b0:d8:03:17:70:
         3d:93:54:95:4f:5d:b3:a8:5f:cd:4a:ca:76:bc:96:f5:c0:96:
         50:8e:00:e6:07:3f:6d:60:42:75:41:32:05:f4:4f:69:ad:ba:
         51:fc:56:93:93:4a:f0:37:75:7a:72:97:c3:5e:fd:5e:33:61:
         71:05:93:ea:35:ab:c7:43:28:9c:d7:3b:9d:88:6c:b8:a9:32:
         19:a1:99:43:cb:98:1a:f7:77:1c:bd:c6:ca:b8:5b:ad:a3:55:
         40:c9:ae:d5:99:26:2e:91:ae:31:8e:4f:ae:cc:14:d8:3c:bf:
         17:3e:b6:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f311oJ4LURj3GqqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjk4NTEyMmUtZjJmZi00MzQ5LThlN2ItZDYwNGVlMjU3
N2YxMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk
NTY5ZDA4YWUtNTk0Zi00MTcyLWE4NDQtMmI1MDE5YWU4NWFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYQ+B7mlIpJedWGGgBRjhEJFmLuQOEbg0vhS
jg67pTmQycvyF1813i0eGl7HSQHG+MMZcNuEBVgcaj2ieDwnyHbK4M2Q4x4GNsxs
Ztr3hyMgw2xeHDYAjNXBwdBNKtI/jy4ZlZW6JEvFw42CHORNEo6fmpYlxhWQ35SK
WFkIVQ6LkWuIocyaVRmLkyBU0YDriNOGtvo1Gg5J9QShwCci/3omBycziaGfiJFM
BoFZmbVzlet3iHQnZWloxopNPLZRWs9OrjWP1ijv0gF+sy4HAOLsCOeXvUWhQZDc
gKJHZgBD1nqmc/nzVxyZd5lfrpP35D6vOHOwre1lAstrb+0y7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEFAYkuizd6PrR0Bk8fvn1JShSBxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iOTg1
MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0ZWUyNTc3ZjEvYjEwZTU2YjYtNTQ2ZC0z
YmUwLWI2NzUtZDYxZTYxNjM5M2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjk4NTEyMmUtZjJmZi00MzQ5LThl
N2ItZDYwNGVlMjU3N2YxL2I5ODUxMjJlLWYyZmYtNDM0OS04ZTdiLWQ2MDRlZTI1
NzdmMS5jcmwwHwYDVR0jBBgwFoAUMkPnPPcbBd82CkZOMRZRS4dhJtswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iOTg1MTIyZS1mMmZmLTQzNDktOGU3Yi1kNjA0
ZWUyNTc3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/nwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGtYF4+Q6Lj29jsdMbiWy+NF3b4B07f+GERmMzA4qa3pUjCaTUOwZJPT
7mN+MtvjoFfboy+o/q15HQnjGJcCY4DvqQa7JD2R9bFvctu3U08QDSJMAtVSsW4Z
A/UETwOmq+6e5Ax5hTY9JPuize7OoJwT/7w6lktuGOv/dgVqJKUr4siUbjqumyPg
p3Sw2AMXcD2TVJVPXbOoX81Kyna8lvXAllCOAOYHP21gQnVBMgX0T2mtulH8VpOT
SvA3dXpyl8Ne/V4zYXEFk+o1q8dDKJzXO52IbLipMhmhmUPLmBr3dxy9xsq4W62j
VUDJrtWZJi6RrjGOT67MFNg8vxc+tq4=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:10:57 2026 by rpki-client