Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/fff19177-f8d7-3c67-94cd-cfc4c8623970.roa
File:                     fff19177-f8d7-3c67-94cd-cfc4c8623970.roa (raw, json)
Hash identifier:          fEsEbz5BCydza/GSokXf5T4GRxA8eXtpViMwkwqWvdc=
Subject key identifier:   B3:0D:09:F0:EE:FF:F7:B9:00:82:48:E3:A9:11:EA:72:87:79:F6:FF
Certificate issuer:       /CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
Certificate serial:       010D0C9F4328584E54B4EA711E42864C9AE6D380
Authority key identifier: 35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/fff19177-f8d7-3c67-94cd-cfc4c8623970.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     30687
IP address blocks:        216.38.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:ea:71:1e:42:86:4c:9a:e6:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=d9957ede-5d3c-4f83-a3d7-20d787ea4d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:63:dd:be:2e:b4:5c:12:51:e1:3f:64:51:7d:
                    29:92:df:28:6d:2b:48:12:64:d7:5a:4a:c5:e0:fa:
                    e2:1d:05:39:d8:f3:c6:7c:39:fd:74:32:0c:5b:c9:
                    38:2a:ae:60:d7:ec:71:33:bd:90:d1:50:bc:03:5a:
                    7c:d0:26:f9:c6:2d:5c:79:19:00:5b:d1:80:3b:41:
                    7a:67:0e:71:9a:63:12:41:c5:8d:3a:2b:de:0b:46:
                    a7:fd:d5:2e:2b:0b:e1:df:f6:da:dd:a3:96:72:88:
                    72:d9:1a:18:0d:72:18:3e:de:e7:53:91:ab:5e:98:
                    89:2c:61:0f:11:e6:8d:21:bf:9e:1b:72:97:21:69:
                    4f:8c:f6:74:f8:3f:bd:da:6c:57:b4:1c:70:91:69:
                    e6:8d:69:2d:96:af:f8:a1:c2:80:de:85:5b:de:a3:
                    2b:03:50:d9:17:ad:81:33:07:f1:ec:f0:19:42:b0:
                    31:64:24:c7:56:70:d2:74:15:32:5f:1c:0b:12:cb:
                    1a:ac:9b:b0:84:1e:e7:8b:62:99:b4:2e:dd:0b:4f:
                    b5:6e:b6:3b:b7:4e:99:69:7e:96:a5:32:aa:00:43:
                    be:77:88:f6:dd:56:04:aa:4c:b9:5b:34:1a:77:af:
                    90:5b:e3:61:ba:ef:64:0d:13:2c:22:01:fe:82:04:
                    a2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0D:09:F0:EE:FF:F7:B9:00:82:48:E3:A9:11:EA:72:87:79:F6:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/fff19177-f8d7-3c67-94cd-cfc4c8623970.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl

            X509v3 Authority Key Identifier:
                keyid:35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:78:dd:3a:4c:33:d6:e2:e3:e1:69:ff:05:11:5e:18:35:79:
         3c:78:ab:59:8b:cb:a7:9b:52:e7:dc:6b:ff:a0:bf:a2:6a:01:
         f6:f1:3c:bc:9c:e0:f7:7c:21:63:12:23:b2:b0:00:62:7c:2a:
         26:9b:9d:df:c6:1a:6c:9b:dd:dd:28:76:cc:5d:b7:74:d3:1d:
         6b:e9:78:49:3f:c6:ff:d9:a0:ba:2f:f8:39:b3:a6:67:e2:f9:
         8e:ba:da:f1:49:3e:db:af:35:c6:02:e4:38:e3:ff:fa:00:3d:
         b8:4b:0d:9c:02:e5:68:35:17:0f:cd:24:d1:57:95:d1:0d:f5:
         71:4d:fc:3f:05:d9:3b:fb:77:9a:1a:c4:ea:41:07:14:a7:0b:
         89:fd:09:02:86:17:ee:ac:59:f7:94:2d:06:e4:a0:01:9c:49:
         e5:e8:5c:17:bb:6f:0b:ca:33:22:a6:e6:a7:39:a7:a6:ae:d3:
         da:b4:96:ad:4f:ca:6d:99:e9:31:eb:bc:1d:cf:2e:0f:29:cc:
         67:71:78:95:d9:29:c3:4b:0f:10:02:5a:d9:74:b6:cd:7d:fc:
         5a:30:e7:f0:a1:df:68:bf:66:7a:24:d5:be:51:67:8c:f1:7c:
         88:f7:2a:b4:17:8f:f8:53:a0:0e:7c:a8:5f:ae:3d:a4:72:08:
         1c:b1:35:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtOpxHkKGTJrm04AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjgyODFhMGEtMDBmMi00YWFjLWIzMTEtZTk2MWE3Y2Nl
ZGZiMB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk
ZDk5NTdlZGUtNWQzYy00ZjgzLWEzZDctMjBkNzg3ZWE0ZDc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGPdvi60XBJR4T9kUX0pkt8obStIEmTXWkrF
4PriHQU52PPGfDn9dDIMW8k4Kq5g1+xxM72Q0VC8A1p80Cb5xi1ceRkAW9GAO0F6
Zw5xmmMSQcWNOiveC0an/dUuKwvh3/ba3aOWcohy2RoYDXIYPt7nU5GrXpiJLGEP
EeaNIb+eG3KXIWlPjPZ0+D+92mxXtBxwkWnmjWktlq/4ocKA3oVb3qMrA1DZF62B
Mwfx7PAZQrAxZCTHVnDSdBUyXxwLEssarJuwhB7ni2KZtC7dC0+1brY7t06ZaX6W
pTKqAEO+d4j23VYEqky5WzQad6+QW+Nhuu9kDRMsIgH+ggSi+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLMNCfDu//e5AIJI46kR6nKHefb/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODI4
MWEwYS0wMGYyLTRhYWMtYjMxMS1lOTYxYTdjY2VkZmIvZmZmMTkxNzctZjhkNy0z
YzY3LTk0Y2QtY2ZjNGM4NjIzOTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjgyODFhMGEtMDBmMi00YWFjLWIz
MTEtZTk2MWE3Y2NlZGZiL2I4MjgxYTBhLTAwZjItNGFhYy1iMzExLWU5NjFhN2Nj
ZWRmYi5jcmwwHwYDVR0jBBgwFoAUNfABs7MMIwjruQt82C4ceWMKjxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iODI4MWEwYS0wMGYyLTRhYWMtYjMxMS1lOTYx
YTdjY2VkZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2CZdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI143TpMM9bi4+Fp/wURXhg1eTx4q1mLy6ebUufca/+gv6JqAfbxPLyc
4Pd8IWMSI7KwAGJ8Kiabnd/GGmyb3d0odsxdt3TTHWvpeEk/xv/ZoLov+Dmzpmfi
+Y662vFJPtuvNcYC5Djj//oAPbhLDZwC5Wg1Fw/NJNFXldEN9XFN/D8F2Tv7d5oa
xOpBBxSnC4n9CQKGF+6sWfeULQbkoAGcSeXoXBe7bwvKMyKm5qc5p6au09q0lq1P
ym2Z6THrvB3PLg8pzGdxeJXZKcNLDxACWtl0ts19/Fow5/Ch32i/Znok1b5RZ4zx
fIj3KrQXj/hToA58qF+uPaRyCByxNa8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:26:23 2026 by rpki-client