Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/0700df42-2943-3ba8-bc50-05cd067eaeef.roa
File:                     0700df42-2943-3ba8-bc50-05cd067eaeef.roa (raw, json)
Hash identifier:          k4tWbMbx280Kx9Ns97XhxFYdAPTr9kdmQljBVC0JW7w=
Subject key identifier:   52:B8:E4:DA:DA:B3:FB:0B:D3:3B:84:C7:5F:C4:63:EE:97:B6:FB:33
Certificate issuer:       /CN=f9832b96-bd4c-421c-9299-d5f2c689d463
Certificate serial:       010D0C9F4328584E6144B7341B592592B227A200
Authority key identifier: 20:9C:BB:41:66:DA:B5:0B:B5:94:F9:34:2E:BD:4C:6D:D0:53:11:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/0700df42-2943-3ba8-bc50-05cd067eaeef.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     401099
IP address blocks:        199.87.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:b7:34:1b:59:25:92:b2:27:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9832b96-bd4c-421c-9299-d5f2c689d463
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=dfebe0e3-16a3-41be-810d-19b275d67056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:08:83:7f:0b:27:a8:b7:aa:99:e6:07:75:8f:
                    a3:2f:71:68:92:57:80:b4:d2:4e:4a:71:1e:49:4c:
                    fc:ea:b5:e5:28:e8:f4:01:48:44:25:f6:cd:94:31:
                    ad:77:46:3e:b8:9f:17:dc:3a:cd:15:04:23:18:77:
                    1f:a6:c9:38:20:85:3b:5c:47:b5:c2:a8:02:90:7b:
                    7e:c6:5d:00:93:7c:36:db:b3:65:50:03:74:c4:97:
                    9f:cb:79:d8:cd:ff:e5:bc:b7:af:ae:8f:8b:99:43:
                    da:10:e8:ec:c8:9e:12:e9:96:22:04:dd:09:aa:ce:
                    d8:a3:1c:c5:37:8a:0b:56:09:43:ce:17:ab:f0:dc:
                    45:99:f6:0a:f8:30:be:db:a4:cb:9d:70:12:05:a4:
                    0a:93:2c:83:16:8b:d9:f4:ee:d1:93:81:ff:0b:58:
                    0a:c2:d8:95:d2:bb:b9:18:b2:53:7b:7d:9d:49:33:
                    a3:e1:93:51:18:f1:8e:ce:ce:7f:7f:20:ca:90:13:
                    05:78:f1:a3:d7:21:ea:14:35:44:70:b6:32:a0:f4:
                    c5:84:99:5a:3e:b4:e9:31:2d:79:22:e4:a4:d4:6f:
                    20:24:06:14:3c:bf:0e:ea:5f:bd:13:54:f9:80:d4:
                    6b:dc:f1:69:dc:50:9c:51:12:ce:6c:d7:2c:31:77:
                    15:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B8:E4:DA:DA:B3:FB:0B:D3:3B:84:C7:5F:C4:63:EE:97:B6:FB:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/0700df42-2943-3ba8-bc50-05cd067eaeef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.crl

            X509v3 Authority Key Identifier:
                keyid:20:9C:BB:41:66:DA:B5:0B:B5:94:F9:34:2E:BD:4C:6D:D0:53:11:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.87.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:6e:d5:e9:2d:cb:18:ab:bd:48:4b:cd:77:48:fb:5f:48:91:
         bc:64:7e:b7:49:7a:cf:72:d3:89:6b:57:f1:79:50:36:11:c1:
         4e:e8:6f:3c:d6:23:30:8b:3e:5e:fe:40:dd:a7:24:b7:5b:13:
         8b:01:b5:db:3e:a2:d8:a0:24:47:cf:41:8b:c7:17:16:73:61:
         71:c3:ed:b9:20:3e:03:82:06:4f:e0:9e:db:61:5b:99:82:17:
         82:4d:6c:01:8c:09:9a:58:e7:b4:59:59:5f:54:e8:4f:15:7f:
         58:98:6c:e4:56:71:c0:36:88:84:f9:89:49:fe:5c:6c:80:ef:
         90:d0:17:d4:24:36:d3:26:42:e5:ad:66:cf:64:32:7d:3f:71:
         01:c4:c0:6a:0d:5a:0d:db:75:f3:be:f4:73:77:a4:02:e2:4d:
         52:06:a6:78:96:5d:73:9d:77:20:ed:66:be:10:47:fb:4e:e4:
         ca:d9:ea:63:8c:61:2a:e1:88:9f:bf:68:39:fa:6e:dc:66:e2:
         54:ba:96:9e:91:73:4e:4d:61:91:a3:65:14:1b:f4:ac:68:30:
         17:70:28:26:0b:d4:2d:ac:af:5f:f3:f9:2a:ee:56:39:ae:31:
         b8:55:d7:ec:5b:a2:ce:16:ec:80:29:6f:48:ec:0d:29:a1:45:
         4f:be:2d:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRLc0G1klkrInogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk4MzJiOTYtYmQ0Yy00MjFjLTkyOTktZDVmMmM2ODlk
NDYzMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk
ZGZlYmUwZTMtMTZhMy00MWJlLTgxMGQtMTliMjc1ZDY3MDU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgiDfwsnqLeqmeYHdY+jL3FokleAtNJOSnEe
SUz86rXlKOj0AUhEJfbNlDGtd0Y+uJ8X3DrNFQQjGHcfpsk4IIU7XEe1wqgCkHt+
xl0Ak3w227NlUAN0xJefy3nYzf/lvLevro+LmUPaEOjsyJ4S6ZYiBN0Jqs7YoxzF
N4oLVglDzher8NxFmfYK+DC+26TLnXASBaQKkyyDFovZ9O7Rk4H/C1gKwtiV0ru5
GLJTe32dSTOj4ZNRGPGOzs5/fyDKkBMFePGj1yHqFDVEcLYyoPTFhJlaPrTpMS15
IuSk1G8gJAYUPL8O6l+9E1T5gNRr3PFp3FCcURLObNcsMXcVRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFK45Nras/sL0zuEx1/EY+6XtvszMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mOTgz
MmI5Ni1iZDRjLTQyMWMtOTI5OS1kNWYyYzY4OWQ0NjMvMDcwMGRmNDItMjk0My0z
YmE4LWJjNTAtMDVjZDA2N2VhZWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZjk4MzJiOTYtYmQ0Yy00MjFjLTky
OTktZDVmMmM2ODlkNDYzL2Y5ODMyYjk2LWJkNGMtNDIxYy05Mjk5LWQ1ZjJjNjg5
ZDQ2My5jcmwwHwYDVR0jBBgwFoAUIJy7QWbatQu1lPk0Lr1MbdBTEVQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9mOTgzMmI5Ni1iZDRjLTQyMWMtOTI5OS1kNWYy
YzY4OWQ0NjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1dkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAxu1ektyxirvUhLzXdI+19IkbxkfrdJes9y04lrV/F5UDYRwU7obzzW
IzCLPl7+QN2nJLdbE4sBtds+otigJEfPQYvHFxZzYXHD7bkgPgOCBk/gntthW5mC
F4JNbAGMCZpY57RZWV9U6E8Vf1iYbORWccA2iIT5iUn+XGyA75DQF9QkNtMmQuWt
Zs9kMn0/cQHEwGoNWg3bdfO+9HN3pALiTVIGpniWXXOddyDtZr4QR/tO5MrZ6mOM
YSrhiJ+/aDn6btxm4lS6lp6Rc05NYZGjZRQb9KxoMBdwKCYL1C2sr1/z+SruVjmu
MbhV1+xbos4W7IApb0jsDSmhRU++LaU=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:18:33 2026 by rpki-client