Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/298a02c7-4ecb-31ef-8002-ed669e1cd0bb.roa
File:                     298a02c7-4ecb-31ef-8002-ed669e1cd0bb.roa (raw, json)
Hash identifier:          5tN5ERBP53LZwEVwVur9mdJMWH8iwBX2UQkBS4Nrxg4=
Subject key identifier:   C9:F1:00:29:CD:8C:A7:D2:36:F4:1C:72:48:EA:0E:CB:E5:1B:92:9F
Certificate issuer:       /CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
Certificate serial:       010D0C9F4328584D905AA523B0061752192E8EC0
Authority key identifier: BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/298a02c7-4ecb-31ef-8002-ed669e1cd0bb.roa
Signing time:             Mon 20 Apr 2026 01:00:24 +0000
ROA not before:           Mon 20 Apr 2026 01:00:24 +0000
ROA not after:            Sun 19 Jul 2026 01:00:24 +0000
asID:                     15296
IP address blocks:        199.216.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:90:5a:a5:23:b0:06:17:52:19:2e:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f3c7c4-a771-47a9-a4e8-0aae7df7b234
        Validity
            Not Before: Apr 20 01:00:24 2026 GMT
            Not After : Jul 19 01:00:24 2026 GMT
        Subject: CN=7da4f68d-09e2-4762-857f-6611404f7e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b9:37:d3:30:58:0b:09:14:94:1d:be:d6:a4:
                    2b:1d:1d:35:10:9c:04:0e:2d:4c:ca:9f:d1:30:ee:
                    79:bd:51:bd:8b:8f:61:93:25:e1:a7:13:0b:b5:aa:
                    00:8f:39:21:b6:da:b3:c8:02:e8:e8:f8:a4:49:eb:
                    53:21:53:d9:3b:0e:87:e8:52:fa:e0:21:ea:80:fc:
                    2f:07:3c:2c:0a:7d:6d:dd:24:6f:a2:30:bc:c0:4b:
                    88:09:1b:d7:3f:47:3c:d8:54:05:a4:39:da:c7:45:
                    f9:27:f7:ea:08:64:fc:55:7b:5b:47:d9:a6:25:2e:
                    3c:22:c1:f5:19:df:67:22:d9:fd:0e:e7:e4:e0:f0:
                    f4:61:28:41:98:af:14:11:04:56:db:68:50:33:6d:
                    80:4b:56:46:e7:10:f8:aa:10:cf:96:0f:04:71:48:
                    0d:20:0d:72:4c:d3:88:d7:09:d2:f6:c2:19:02:45:
                    5a:75:cf:fe:ed:dd:91:ba:81:64:8c:b8:d2:be:be:
                    9c:ff:d5:ad:67:a0:04:ef:22:ae:39:52:82:b7:aa:
                    91:52:7a:4e:12:69:f5:f7:1b:71:43:5f:72:e8:2c:
                    1d:7f:ec:75:86:64:ab:1b:73:55:f8:84:d9:5b:16:
                    ee:99:df:d7:30:9d:0e:a1:57:60:cb:fb:2b:48:2a:
                    ad:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F1:00:29:CD:8C:A7:D2:36:F4:1C:72:48:EA:0E:CB:E5:1B:92:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/298a02c7-4ecb-31ef-8002-ed669e1cd0bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.crl

            X509v3 Authority Key Identifier:
                keyid:BB:88:4D:5F:DE:1F:DC:B6:62:A7:DE:13:88:FD:FC:A0:3F:0F:F8:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/61f3c7c4-a771-47a9-a4e8-0aae7df7b234.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.216.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:2c:d4:8e:7e:00:1d:72:cf:c7:67:69:bb:7c:df:c1:b2:b5:
         fb:04:2a:23:a6:85:6c:8e:ae:28:3f:8e:0a:a5:44:05:59:42:
         a4:2a:7d:e9:ef:b2:d5:e7:e4:70:34:0e:bb:63:27:c5:6d:43:
         02:66:bd:8c:d0:77:f5:2f:b1:99:4a:36:e3:74:39:1f:90:85:
         51:7e:4f:3d:00:27:20:59:38:24:44:8d:2b:89:c2:b1:06:b7:
         80:58:94:c4:d6:0d:a3:e6:a9:66:d2:e9:76:77:e5:ed:fd:58:
         70:0a:f1:5e:af:da:dd:48:55:08:10:85:42:a3:80:71:2e:27:
         fe:96:21:35:7a:03:12:cc:ef:81:8f:80:03:7b:10:bb:2a:1e:
         da:dc:30:c1:de:80:eb:5d:e1:26:33:7c:22:0e:4e:de:af:90:
         45:df:b2:5a:46:57:d3:53:63:93:64:87:84:83:d0:88:41:6c:
         1d:0d:d2:5a:61:d1:68:38:6b:98:52:0d:47:78:18:e4:cd:a3:
         39:54:0a:5b:44:50:0e:f7:e4:89:46:cf:65:ef:2e:31:e4:a5:
         ad:bc:0d:3e:7a:6b:6f:94:2a:5b:36:4c:19:c6:21:a9:77:62:
         48:a2:93:ba:96:7c:d6:7b:3c:ba:c3:e5:11:99:d4:49:7b:47:
         9a:0e:da:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWqUjsAYXUhkujsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjFmM2M3YzQtYTc3MS00N2E5LWE0ZTgtMGFhZTdkZjdi
MjM0MB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk
N2RhNGY2OGQtMDllMi00NzYyLTg1N2YtNjYxMTQwNGY3ZTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbk30zBYCwkUlB2+1qQrHR01EJwEDi1Myp/R
MO55vVG9i49hkyXhpxMLtaoAjzkhttqzyALo6PikSetTIVPZOw6H6FL64CHqgPwv
BzwsCn1t3SRvojC8wEuICRvXP0c82FQFpDnax0X5J/fqCGT8VXtbR9mmJS48IsH1
Gd9nItn9Dufk4PD0YShBmK8UEQRW22hQM22AS1ZG5xD4qhDPlg8EcUgNIA1yTNOI
1wnS9sIZAkVadc/+7d2RuoFkjLjSvr6c/9WtZ6AE7yKuOVKCt6qRUnpOEmn19xtx
Q19y6Cwdf+x1hmSrG3NV+ITZWxbumd/XMJ0OoVdgy/srSCqttwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMnxACnNjKfSNvQcckjqDsvlG5KfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYz
YzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFlN2RmN2IyMzQvMjk4YTAyYzctNGVjYi0z
MWVmLTgwMDItZWQ2NjllMWNkMGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjFmM2M3YzQtYTc3MS00N2E5LWE0
ZTgtMGFhZTdkZjdiMjM0LzYxZjNjN2M0LWE3NzEtNDdhOS1hNGU4LTBhYWU3ZGY3
YjIzNC5jcmwwHwYDVR0jBBgwFoAUu4hNX94f3LZip94TiP38oD8P+I4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82MWYzYzdjNC1hNzcxLTQ3YTktYTRlOC0wYWFl
N2RmN2IyMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx9jNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMQs1I5+AB1yz8dnabt838GytfsEKiOmhWyOrig/jgqlRAVZQqQqfenv
stXn5HA0DrtjJ8VtQwJmvYzQd/UvsZlKNuN0OR+QhVF+Tz0AJyBZOCREjSuJwrEG
t4BYlMTWDaPmqWbS6XZ35e39WHAK8V6v2t1IVQgQhUKjgHEuJ/6WITV6AxLM74GP
gAN7ELsqHtrcMMHegOtd4SYzfCIOTt6vkEXfslpGV9NTY5Nkh4SD0IhBbB0N0lph
0Wg4a5hSDUd4GOTNozlUCltEUA735IlGz2XvLjHkpa28DT56a2+UKls2TBnGIal3
Ykiik7qWfNZ7PLrD5RGZ1El7R5oO2rw=
-----END CERTIFICATE-----
Generated at Wed May 13 07:04:09 2026 by rpki-client