Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/f5ba459c-c424-3d72-922e-721d68a95f32.roa
File:                     f5ba459c-c424-3d72-922e-721d68a95f32.roa (raw, json)
Hash identifier:          7PYPUttctf9zMHoIAz/cWTNUxJl68koc6r+56PUoGeE=
Subject key identifier:   B0:9F:36:21:7F:8E:E7:F8:1E:1C:26:D7:EC:26:24:D3:DB:68:05:E8
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F4328584E8DEF9B0B67288E9A49342280
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/f5ba459c-c424-3d72-922e-721d68a95f32.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     399629
IP address blocks:        199.91.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:9b:0b:67:28:8e:9a:49:34:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=b6c436b6-acfb-4c8b-b157-2587d63a113e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7b:62:5c:22:4b:72:0b:49:30:a7:27:e7:97:
                    d2:d1:f2:4d:de:35:06:c2:74:73:3f:06:ea:e8:1d:
                    d1:be:ae:1a:d7:43:07:59:cf:6c:8f:e6:36:f3:30:
                    f1:3d:1d:b6:26:7d:28:04:40:4e:61:f2:72:ab:de:
                    bf:3b:f2:0f:5b:2e:ab:63:04:ba:2c:af:fd:72:60:
                    f1:0f:e6:61:91:58:04:e1:41:d9:04:5b:78:cc:65:
                    43:43:75:64:fa:00:24:fc:0b:fe:b7:38:e1:47:23:
                    65:02:0f:8b:b5:9c:1f:cb:23:c3:48:06:a9:a2:f3:
                    b8:f5:bb:f6:44:dc:0a:b8:bd:7b:44:42:0c:2f:6f:
                    a0:db:ae:7c:ef:6e:c2:95:b2:a7:d8:06:27:a2:19:
                    2c:9e:f1:b3:7a:7e:fe:93:04:87:c2:79:42:40:59:
                    88:f0:16:ae:7a:3f:f5:9a:db:49:23:c1:24:64:38:
                    e9:6b:6f:f5:9d:56:ed:59:08:6d:16:de:2f:85:ef:
                    6c:85:e4:90:c8:51:87:fe:fa:b1:7c:bb:61:13:94:
                    9d:35:ba:6a:7a:5d:8c:d3:b8:8c:5d:a4:a0:2d:a2:
                    3a:25:73:fb:b2:25:51:3f:19:85:38:00:5f:47:27:
                    eb:f2:48:e5:2a:a7:00:ea:68:a2:9d:41:14:32:9d:
                    87:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9F:36:21:7F:8E:E7:F8:1E:1C:26:D7:EC:26:24:D3:DB:68:05:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/f5ba459c-c424-3d72-922e-721d68a95f32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:2f:29:85:b5:de:ff:61:bc:99:e2:d3:e8:c5:f7:36:58:f3:
         f5:58:13:b3:7c:7c:87:87:69:5a:b4:f6:a7:f5:89:8d:91:1e:
         e1:22:36:a0:bb:06:4a:ff:b4:ae:37:fc:d5:25:33:f9:2d:21:
         cc:1e:ec:84:35:23:6b:f1:d5:3d:5c:0f:b1:96:73:f8:eb:89:
         e5:7f:b7:70:91:42:99:89:fa:fb:d2:fb:44:c9:f9:3a:e4:3d:
         87:45:3c:90:6c:52:bb:ff:fb:65:78:14:fe:74:22:3f:a7:84:
         d0:2b:37:ec:95:be:03:39:13:cd:a7:10:db:92:b6:13:37:31:
         d8:7f:36:54:bb:5d:7c:95:c5:e9:4c:ea:0f:d1:07:e3:48:84:
         a5:67:f1:35:3b:e1:41:11:cb:70:93:46:c2:0e:bb:89:a2:73:
         ee:3c:66:d7:46:5e:9e:d7:4f:c9:21:fd:91:30:d0:35:43:59:
         6b:4f:0a:5b:05:06:07:f4:09:35:fa:6b:80:8a:d0:44:28:e8:
         54:4b:cd:7b:68:e0:c6:ae:7a:e6:78:37:88:92:dd:f9:d0:98:
         d2:98:20:ff:8a:4e:67:60:22:a6:b5:4d:69:6e:8b:1e:ed:81:
         74:3a:1a:7c:26:fc:0a:30:a7:40:2a:46:6f:af:9a:5d:7e:73:
         03:83:4f:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6N75sLZyiOmkk0IoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzJmM2RkZTEtNDNkZC00ZmZkLWFlMjQtMGMzOGNlOGNm
MTAzMB4XDTI2MDcxOTIxMDAxMloXDTI2MTAxNzIxMDAxMlowLzEtMCsGA1UEAxMk
YjZjNDM2YjYtYWNmYi00YzhiLWIxNTctMjU4N2Q2M2ExMTNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXtiXCJLcgtJMKcn55fS0fJN3jUGwnRzPwbq
6B3Rvq4a10MHWc9sj+Y28zDxPR22Jn0oBEBOYfJyq96/O/IPWy6rYwS6LK/9cmDx
D+ZhkVgE4UHZBFt4zGVDQ3Vk+gAk/Av+tzjhRyNlAg+LtZwfyyPDSAapovO49bv2
RNwKuL17REIML2+g2658727ClbKn2AYnohksnvGzen7+kwSHwnlCQFmI8Bauej/1
mttJI8EkZDjpa2/1nVbtWQhtFt4vhe9sheSQyFGH/vqxfLthE5SdNbpqel2M07iM
XaSgLaI6JXP7siVRPxmFOABfRyfr8kjlKqcA6miinUEUMp2H4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLCfNiF/juf4Hhwm1+wmJNPbaAXoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYz
ZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4Y2U4Y2YxMDMvZjViYTQ1OWMtYzQyNC0z
ZDcyLTkyMmUtNzIxZDY4YTk1ZjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzJmM2RkZTEtNDNkZC00ZmZkLWFl
MjQtMGMzOGNlOGNmMTAzLzMyZjNkZGUxLTQzZGQtNGZmZC1hZTI0LTBjMzhjZThj
ZjEwMy5jcmwwHwYDVR0jBBgwFoAUwm3TJModbgtevZO1bwZ8M3FVCcwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMmYzZGRlMS00M2RkLTRmZmQtYWUyNC0wYzM4
Y2U4Y2YxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1vcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIIvKYW13v9hvJni0+jF9zZY8/VYE7N8fIeHaVq09qf1iY2RHuEiNqC7
Bkr/tK43/NUlM/ktIcwe7IQ1I2vx1T1cD7GWc/jrieV/t3CRQpmJ+vvS+0TJ+Trk
PYdFPJBsUrv/+2V4FP50Ij+nhNArN+yVvgM5E82nENuSthM3Mdh/NlS7XXyVxelM
6g/RB+NIhKVn8TU74UERy3CTRsIOu4mic+48ZtdGXp7XT8kh/ZEw0DVDWWtPClsF
Bgf0CTX6a4CK0EQo6FRLzXto4MaueuZ4N4iS3fnQmNKYIP+KTmdgIqa1TWluix7t
gXQ6Gnwm/Aowp0AqRm+vml1+cwODT34=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:33:58 2026 by rpki-client