Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/af436f3f-5772-3c53-bef4-cd6bcd31c2f0.roa
File:                     af436f3f-5772-3c53-bef4-cd6bcd31c2f0.roa (raw, json)
Hash identifier:          s7KpLTKiu4h6QTmGNQZqHM1hol45TfCy3bB6cwI2EEg=
Subject key identifier:   A2:C0:F0:65:1B:CF:1B:07:DA:99:5C:D0:A6:40:1B:08:B8:C4:39:FD
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F4328584E6B592BA4E0ED9618C59D3F40
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/af436f3f-5772-3c53-bef4-cd6bcd31c2f0.roa
Signing time:             Tue 07 Jul 2026 11:39:40 +0000
ROA not before:           Tue 07 Jul 2026 11:39:40 +0000
ROA not after:            Mon 05 Oct 2026 11:39:40 +0000
asID:                     23280
IP address blocks:        134.49.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:59:2b:a4:e0:ed:96:18:c5:9d:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Jul  7 11:39:40 2026 GMT
            Not After : Oct  5 11:39:40 2026 GMT
        Subject: CN=d48c0dfb-50f9-44e6-8bf1-5e2089c24f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fd:1e:83:0f:37:be:94:68:0c:7e:36:4d:35:
                    80:b7:f9:2f:eb:d9:2a:34:46:4a:bd:25:4c:90:86:
                    96:ee:bc:4d:ae:cf:6a:c4:c5:ad:de:4c:72:98:69:
                    a4:34:5f:7a:83:d3:e1:3c:c3:6d:61:f6:05:97:eb:
                    d6:e9:52:09:6b:51:8b:45:fe:0c:ba:14:e3:68:1c:
                    78:9a:1c:3c:ef:f0:5d:8c:6d:9c:61:ce:59:0b:92:
                    dd:9f:02:64:1c:9a:58:92:4a:26:c3:34:e4:2e:93:
                    af:ff:8c:0a:89:ec:6b:c3:23:30:6a:e9:e3:9b:66:
                    d1:08:4e:bf:ba:f4:b7:e8:72:00:0f:b5:03:b9:e8:
                    79:7b:0f:80:78:45:28:9f:43:0b:cb:05:fa:bb:68:
                    ec:b7:ec:b8:84:a1:67:63:58:e4:97:ea:fb:66:6a:
                    87:71:02:03:13:38:af:70:be:95:ce:6b:20:d6:62:
                    72:77:a5:68:fd:31:59:17:0b:a0:db:56:10:7a:5c:
                    65:2a:67:56:a0:f2:3d:ca:f4:8f:8a:99:90:2b:37:
                    9d:d1:d2:cb:e1:2d:72:a1:d4:95:bd:ad:e6:a6:0b:
                    b0:61:3b:6d:3d:2a:89:32:79:46:38:8a:e1:77:4e:
                    bb:5a:28:0b:4f:3c:e4:b7:64:7b:96:be:bf:8f:46:
                    d7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C0:F0:65:1B:CF:1B:07:DA:99:5C:D0:A6:40:1B:08:B8:C4:39:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/af436f3f-5772-3c53-bef4-cd6bcd31c2f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.49.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:18:b7:42:e9:8a:39:72:f9:bb:44:4f:1e:ac:d3:c2:01:62:
         0e:5b:0f:10:ec:1b:51:ac:a3:68:a8:81:7f:3f:df:e5:7e:1d:
         3a:59:e2:01:c0:72:0d:48:ef:b8:67:ab:8a:c4:6a:f7:d6:7c:
         30:a8:85:e4:84:22:36:69:bf:af:38:ed:7f:7d:a5:dc:29:13:
         7c:ec:93:48:24:2b:d2:a7:d5:17:0d:98:97:72:11:75:35:25:
         04:2c:42:33:8f:35:55:91:13:cb:78:a3:40:83:79:24:04:20:
         da:21:f4:be:1a:ed:dc:0b:0d:a0:60:29:d5:ac:35:1c:25:6e:
         e4:59:ac:31:cd:62:ef:ce:fb:97:0b:22:ae:fd:50:96:e5:57:
         40:5e:b2:3d:81:37:22:d1:92:1d:7c:12:b9:fc:27:27:d7:96:
         7a:96:ac:a6:de:e5:e6:f0:4b:1b:93:b5:f6:bc:51:bb:5c:1f:
         a5:07:b4:c4:22:09:69:59:a0:91:99:18:5b:a0:f7:90:1d:b1:
         ac:da:f5:2e:c2:b1:87:2b:79:ee:94:a3:98:85:e9:40:d4:cf:
         ed:7a:f1:9a:d7:43:71:06:c7:d2:a0:88:cd:66:19:f2:1f:01:
         c4:d9:bd:29:cc:e8:4e:eb:2e:21:b6:71:56:6c:8c:47:46:e9:
         cf:78:e9:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rWSuk4O2WGMWdP0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3
MGE0MB4XDTI2MDcwNzExMzk0MFoXDTI2MTAwNTExMzk0MFowLzEtMCsGA1UEAxMk
ZDQ4YzBkZmItNTBmOS00NGU2LThiZjEtNWUyMDg5YzI0ZjM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/0egw83vpRoDH42TTWAt/kv69kqNEZKvSVM
kIaW7rxNrs9qxMWt3kxymGmkNF96g9PhPMNtYfYFl+vW6VIJa1GLRf4MuhTjaBx4
mhw87/BdjG2cYc5ZC5LdnwJkHJpYkkomwzTkLpOv/4wKiexrwyMwaunjm2bRCE6/
uvS36HIAD7UDueh5ew+AeEUon0MLywX6u2jst+y4hKFnY1jkl+r7ZmqHcQIDEziv
cL6Vzmsg1mJyd6Vo/TFZFwug21YQelxlKmdWoPI9yvSPipmQKzed0dLL4S1yodSV
va3mpguwYTttPSqJMnlGOIrhd067WigLTzzkt2R7lr6/j0bX1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKLA8GUbzxsH2plc0KZAGwi4xDn9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi
NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvYWY0MzZmM2YtNTc3Mi0z
YzUzLWJlZjQtY2Q2YmNkMzFjMmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0
YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5
NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl
M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhjGPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFAYt0Lpijly+btETx6s08IBYg5bDxDsG1Gso2iogX8/3+V+HTpZ4gHA
cg1I77hnq4rEavfWfDCoheSEIjZpv6847X99pdwpE3zsk0gkK9Kn1RcNmJdyEXU1
JQQsQjOPNVWRE8t4o0CDeSQEINoh9L4a7dwLDaBgKdWsNRwlbuRZrDHNYu/O+5cL
Iq79UJblV0Besj2BNyLRkh18Ern8JyfXlnqWrKbe5ebwSxuTtfa8UbtcH6UHtMQi
CWlZoJGZGFug95Adsaza9S7CsYcree6Uo5iF6UDUz+168ZrXQ3EGx9KgiM1mGfIf
AcTZvSnM6E7rLiG2cVZsjEdG6c946bg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:01:11 2026 by rpki-client