Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/598dfb84-976d-3594-a73f-c1bc8f96aa6d.roa
File:                     598dfb84-976d-3594-a73f-c1bc8f96aa6d.roa (raw, json)
Hash identifier:          KcC2oczmRZo/Y3H0utU9Wkyl7LxqJFuLdpNv5p6dTxc=
Subject key identifier:   7B:32:E0:C1:73:A2:B0:81:D3:EE:FA:69:B5:78:B7:D0:50:B6:24:3A
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584E37646C14DF4A4CCBC295D380
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/598dfb84-976d-3594-a73f-c1bc8f96aa6d.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     13444
IP address blocks:        128.1.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:6c:14:df:4a:4c:cb:c2:95:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=14d32282-70cc-47ee-b229-e3a3cc2a3b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:29:49:9a:77:0b:22:0d:4c:2a:a5:d9:23:e8:
                    03:0b:d8:a0:4f:fd:07:bc:06:b6:c9:06:19:04:3c:
                    c6:fc:f8:0f:aa:9c:89:16:95:7a:c8:8b:d8:29:eb:
                    fc:a6:d8:04:5f:f5:e6:36:f5:79:9f:ab:13:fb:36:
                    55:e9:61:43:a9:67:bd:c9:ea:e8:92:77:c2:f2:9b:
                    17:cb:bc:96:5d:ff:60:18:ca:f4:c2:d4:03:f7:ab:
                    9e:ff:88:cb:44:8c:7b:f7:9a:46:62:e8:00:91:3d:
                    f1:f6:8b:b4:84:1a:6a:62:1c:46:27:a5:52:c8:dd:
                    65:2e:d9:52:18:ae:de:e1:7d:ad:8e:64:ab:2b:95:
                    2b:9a:9e:bf:68:8e:62:10:18:cd:71:58:c3:27:b7:
                    16:08:ed:79:19:65:d2:53:02:3e:2d:e6:81:80:a2:
                    73:0a:70:27:38:43:39:f8:bc:fb:42:ce:7a:57:db:
                    8a:fb:50:4e:7b:ba:d2:b3:4f:c2:5b:93:31:29:27:
                    a3:8a:bb:df:5e:f2:32:00:c3:0f:e3:48:47:cd:16:
                    c6:30:a4:cf:5d:03:e1:73:93:99:ae:b0:d6:03:2e:
                    43:50:38:6f:90:c6:da:31:03:fc:f1:f9:32:bf:54:
                    62:78:bd:fa:75:0d:5a:64:20:97:99:42:3c:fe:e3:
                    43:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:32:E0:C1:73:A2:B0:81:D3:EE:FA:69:B5:78:B7:D0:50:B6:24:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/598dfb84-976d-3594-a73f-c1bc8f96aa6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:47:cc:e5:38:5e:e5:c8:af:15:33:41:ab:2b:a7:ac:ed:6f:
         c1:bd:14:d9:59:b8:89:fb:8f:39:04:8e:b0:83:a3:f6:c0:47:
         15:97:8a:ef:35:cd:d3:f5:68:c5:cf:38:76:b1:e7:0e:c2:3c:
         45:21:57:6c:60:96:f5:16:39:01:0e:0b:cc:95:4b:89:29:b1:
         2c:2f:fc:8b:de:e4:1d:83:97:98:e5:ce:4f:ab:db:26:64:95:
         75:b8:3b:30:65:b5:7b:b2:02:cc:da:cc:30:7f:cd:3e:b7:a8:
         c3:f6:6e:00:11:26:d6:eb:e0:43:4b:d3:bc:04:eb:c8:8d:e4:
         49:97:ed:16:8c:2a:7c:4e:e7:b3:b7:77:1b:5c:ae:37:76:62:
         8e:6d:1a:3d:07:6d:4c:cf:65:17:a8:71:38:be:fd:5a:7d:bc:
         2a:34:ff:27:2e:fc:6a:e1:25:21:77:c3:53:4a:a7:a7:ec:3a:
         92:cf:09:8a:b7:c9:39:61:08:d9:e3:c6:9c:23:d4:4e:98:7e:
         67:5f:79:31:aa:28:76:ed:09:04:1e:58:fb:f4:ec:c4:33:26:
         79:2f:83:be:c4:fd:b4:24:1e:24:7d:dc:ce:13:ec:32:b8:17:
         d0:db:a9:f5:00:4d:2e:94:12:d6:42:60:41:86:5e:32:8c:b5:
         7d:ce:8a:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43ZGwU30pMy8KV04AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk
MTRkMzIyODItNzBjYy00N2VlLWIyMjktZTNhM2NjMmEzYjU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ylJmncLIg1MKqXZI+gDC9igT/0HvAa2yQYZ
BDzG/PgPqpyJFpV6yIvYKev8ptgEX/XmNvV5n6sT+zZV6WFDqWe9yeroknfC8psX
y7yWXf9gGMr0wtQD96ue/4jLRIx795pGYugAkT3x9ou0hBpqYhxGJ6VSyN1lLtlS
GK7e4X2tjmSrK5Urmp6/aI5iEBjNcVjDJ7cWCO15GWXSUwI+LeaBgKJzCnAnOEM5
+Lz7Qs56V9uK+1BOe7rSs0/CW5MxKSejirvfXvIyAMMP40hHzRbGMKTPXQPhc5OZ
rrDWAy5DUDhvkMbaMQP88fkyv1RieL36dQ1aZCCXmUI8/uNDSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHsy4MFzorCB0+76abV4t9BQtiQ6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNTk4ZGZiODQtOTc2ZC0z
NTk0LWE3M2YtYzFiYzhmOTZhYTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAHZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC1HzOU4XuXIrxUzQasrp6ztb8G9FNlZuIn7jzkEjrCDo/bARxWXiu81
zdP1aMXPOHax5w7CPEUhV2xglvUWOQEOC8yVS4kpsSwv/Ive5B2Dl5jlzk+r2yZk
lXW4OzBltXuyAszazDB/zT63qMP2bgARJtbr4ENL07wE68iN5EmX7RaMKnxO57O3
dxtcrjd2Yo5tGj0HbUzPZReocTi+/Vp9vCo0/ycu/GrhJSF3w1NKp6fsOpLPCYq3
yTlhCNnjxpwj1E6YfmdfeTGqKHbtCQQeWPv07MQzJnkvg77E/bQkHiR93M4T7DK4
F9DbqfUATS6UEtZCYEGGXjKMtX3Oir0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:59:59 2026 by rpki-client