Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/bfa3188f-a0e1-34ed-adac-4444a7b639b8.roa
File:                     bfa3188f-a0e1-34ed-adac-4444a7b639b8.roa (raw, json)
Hash identifier:          5tNAAuuuDF1UER7FYnW4nQnaDQFOB41ygdXoeILsNqE=
Subject key identifier:   88:E5:4D:66:73:4E:B2:6F:E2:36:F9:C7:26:34:2E:54:B4:09:EA:1C
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584E8F54F543B90CE431DC05E700
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/bfa3188f-a0e1-34ed-adac-4444a7b639b8.roa
Signing time:             Mon 20 Jul 2026 09:00:11 +0000
ROA not before:           Mon 20 Jul 2026 09:00:11 +0000
ROA not after:            Sun 18 Oct 2026 09:00:11 +0000
asID:                     394437
IP address blocks:        206.198.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8f:54:f5:43:b9:0c:e4:31:dc:05:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Jul 20 09:00:11 2026 GMT
            Not After : Oct 18 09:00:11 2026 GMT
        Subject: CN=2fdf0331-5a00-4af0-aa11-25b8d77246d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:54:62:43:f2:19:f6:5a:73:e4:b2:ce:d4:80:
                    92:11:30:b7:b5:b9:7c:75:00:a7:9d:b8:f7:9b:bc:
                    63:5f:41:e5:91:e4:ef:24:c1:c6:86:4b:8e:59:dd:
                    e9:df:9e:9e:c0:73:c5:5b:8c:29:ec:54:a3:fc:97:
                    91:72:a6:a4:39:5b:53:3f:85:b4:1f:d5:4c:5e:b2:
                    e0:62:81:1f:71:0d:ab:75:0a:d7:fa:2c:cb:e2:b8:
                    dd:4f:ef:70:23:0d:d2:e5:cf:87:db:1a:4c:29:6f:
                    da:11:b9:ec:4e:4f:25:d5:d8:5f:64:aa:ea:9a:87:
                    27:7a:21:ca:88:1c:06:48:9b:93:41:fd:87:04:7a:
                    d4:9d:c1:a1:d1:10:13:4c:d4:14:2d:ce:e4:cb:ac:
                    80:b3:b1:67:62:c7:bf:a2:4e:b9:c7:2e:bc:1e:14:
                    84:71:0c:41:40:94:8d:72:86:71:6b:16:c7:ed:0e:
                    20:4e:a6:b0:94:08:37:14:a2:21:48:8a:27:a4:76:
                    88:dd:84:99:60:f4:5e:7f:17:60:a2:c7:35:b2:34:
                    4a:8d:25:09:fe:2e:26:cb:d9:36:40:2d:c3:7a:40:
                    83:88:0c:2a:13:9c:8e:34:b5:2b:f9:22:b0:f0:63:
                    ca:f7:c6:8e:b5:c0:71:2b:23:6a:74:23:56:1f:17:
                    d5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E5:4D:66:73:4E:B2:6F:E2:36:F9:C7:26:34:2E:54:B4:09:EA:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/bfa3188f-a0e1-34ed-adac-4444a7b639b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.198.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:58:fb:aa:b7:5d:d6:8a:27:40:b7:3d:39:3d:cc:bd:da:32:
         83:f1:9e:f3:95:ce:5b:6f:a1:7b:cd:0c:9a:66:0f:4e:3b:eb:
         8c:30:4d:9f:1c:55:a2:4d:20:d5:19:e1:34:bb:23:73:3d:c7:
         2a:ad:d3:2a:3d:cd:e1:24:28:72:61:ec:c2:d9:60:3c:01:91:
         13:ed:b0:53:c1:36:f3:c0:53:da:e8:b3:33:67:c4:cc:bc:5e:
         c4:15:14:55:a2:92:75:62:6b:c6:bc:0b:1f:62:98:09:5e:80:
         9e:36:07:5a:8c:77:56:9a:e8:4d:e2:e0:8c:91:f3:b4:70:bc:
         03:ad:2f:a7:e3:df:67:49:ba:5f:25:33:70:86:af:c1:28:c6:
         02:6a:e2:f1:1c:24:5e:bc:19:1e:97:c6:2b:c7:b2:e7:bb:75:
         5e:0e:43:bc:be:76:50:fa:08:21:92:48:cf:9e:30:d1:37:91:
         9a:9b:ef:13:84:1e:72:72:32:4a:3c:1b:bf:bb:57:32:e7:4d:
         54:26:85:9c:1d:dd:ee:a5:2c:84:5f:4d:45:d1:6e:48:92:98:
         f5:c4:53:90:4c:db:65:aa:e1:13:9f:f1:85:48:70:57:46:af:
         2b:e7:48:59:5a:b3:52:de:3c:c6:34:8f:ea:f9:a2:69:bc:a1:
         c5:e9:97:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVPVDuQzkMdwF5wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi
MjRmMB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk
MmZkZjAzMzEtNWEwMC00YWYwLWFhMTEtMjViOGQ3NzI0NmQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVRiQ/IZ9lpz5LLO1ICSETC3tbl8dQCnnbj3
m7xjX0HlkeTvJMHGhkuOWd3p356ewHPFW4wp7FSj/JeRcqakOVtTP4W0H9VMXrLg
YoEfcQ2rdQrX+izL4rjdT+9wIw3S5c+H2xpMKW/aEbnsTk8l1dhfZKrqmocneiHK
iBwGSJuTQf2HBHrUncGh0RATTNQULc7ky6yAs7FnYse/ok65xy68HhSEcQxBQJSN
coZxaxbH7Q4gTqawlAg3FKIhSIonpHaI3YSZYPRefxdgosc1sjRKjSUJ/i4my9k2
QC3DekCDiAwqE5yONLUr+SKw8GPK98aOtcBxKyNqdCNWHxfVvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIjlTWZzTrJv4jb5xyY0LlS0CeocMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh
MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvYmZhMzE4OGYtYTBlMS0z
NGVkLWFkYWMtNDQ0NGE3YjYzOWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk
NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj
YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx
ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzsbXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKVY+6q3XdaKJ0C3PTk9zL3aMoPxnvOVzltvoXvNDJpmD04764wwTZ8c
VaJNINUZ4TS7I3M9xyqt0yo9zeEkKHJh7MLZYDwBkRPtsFPBNvPAU9roszNnxMy8
XsQVFFWiknVia8a8Cx9imAlegJ42B1qMd1aa6E3i4IyR87RwvAOtL6fj32dJul8l
M3CGr8EoxgJq4vEcJF68GR6XxivHsue7dV4OQ7y+dlD6CCGSSM+eMNE3kZqb7xOE
HnJyMko8G7+7VzLnTVQmhZwd3e6lLIRfTUXRbkiSmPXEU5BM22Wq4ROf8YVIcFdG
ryvnSFlas1LePMY0j+r5omm8ocXplxU=
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:28:06 2026 by rpki-client