Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/70ca4136-f521-3058-923b-d284bef247de.roa
File:                     70ca4136-f521-3058-923b-d284bef247de.roa (raw, json)
Hash identifier:          vPSoDE9DyG8VkkcT/9Gxs12lGnDKCTLo0WCkH2qVU74=
Subject key identifier:   82:7E:FB:F6:3C:B2:DD:53:2A:16:41:18:9C:D0:7A:40:59:7F:61:30
Certificate issuer:       /CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
Certificate serial:       010D0C9F4328584DB07581F0D2C730912A949780
Authority key identifier: 53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/70ca4136-f521-3058-923b-d284bef247de.roa
Signing time:             Fri 01 May 2026 13:00:30 +0000
ROA not before:           Fri 01 May 2026 13:00:30 +0000
ROA not after:            Thu 30 Jul 2026 13:00:30 +0000
asID:                     204321
IP address blocks:        170.149.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:75:81:f0:d2:c7:30:91:2a:94:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
        Validity
            Not Before: May  1 13:00:30 2026 GMT
            Not After : Jul 30 13:00:30 2026 GMT
        Subject: CN=c5c4956d-9e17-41d3-beae-6c6637e78f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4a:f0:87:f1:17:e5:11:f1:60:7e:74:3e:22:
                    a1:fb:0a:20:85:e0:db:fa:58:33:08:06:59:46:33:
                    6c:31:1a:51:8a:86:f2:3b:b6:cd:b0:07:a5:54:20:
                    3b:03:6c:a4:22:8c:36:56:55:b3:44:bd:9b:ac:26:
                    b7:69:9e:cf:7d:c9:3e:7a:25:9b:02:52:14:b8:33:
                    bc:05:54:cb:10:a1:70:9d:d2:40:ef:b2:5d:05:ad:
                    44:d2:35:36:76:f6:2e:e9:62:8a:54:9d:39:c7:c2:
                    5a:7c:e9:a4:6e:09:cd:87:b2:d0:7a:ad:65:b6:f8:
                    1a:4c:e6:04:b7:aa:62:d1:eb:ec:cf:a7:54:a7:3c:
                    3c:8c:e8:90:9d:bf:20:92:41:94:89:e7:15:b1:48:
                    d6:09:8c:ba:a1:9f:ac:9a:51:91:f6:ba:b8:2b:40:
                    e6:50:68:3e:62:6d:8f:51:61:9a:c6:c2:4d:66:ef:
                    95:92:af:62:ea:a9:c6:ef:09:e6:81:0a:72:b7:dc:
                    f4:8c:fc:dd:f4:a4:78:55:06:60:d7:6e:06:c0:93:
                    1a:b8:b9:c7:aa:9a:f2:30:cb:06:0e:61:9e:6a:ac:
                    7a:50:3f:53:8f:22:ea:d5:21:a4:42:f7:b2:43:ba:
                    6c:00:99:b2:69:e4:3e:2e:9d:aa:5c:d4:66:e7:9b:
                    68:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7E:FB:F6:3C:B2:DD:53:2A:16:41:18:9C:D0:7A:40:59:7F:61:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/70ca4136-f521-3058-923b-d284bef247de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl

            X509v3 Authority Key Identifier:
                keyid:53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.149.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:83:0a:fa:60:19:85:4b:91:ff:f0:b0:26:4c:84:ec:5a:dd:
         91:47:ab:50:fd:ed:d0:da:2c:d5:4d:7a:ec:b1:27:9c:96:13:
         4d:59:c0:cf:e2:a7:cf:f3:34:f1:14:1b:c6:ed:e7:1c:b4:89:
         b5:b6:6e:2a:5a:dc:7b:46:d3:8b:93:54:19:25:d6:78:d8:90:
         82:3e:38:f0:11:32:8e:ec:30:f8:2e:4a:5e:57:71:5e:c9:f2:
         dc:e5:f3:28:45:30:0f:0c:6a:8e:43:03:24:55:d4:ec:01:75:
         59:8d:82:11:85:3b:6e:0b:aa:6b:b2:bf:13:3b:2a:c0:fa:2d:
         36:ae:e1:5f:0c:9b:e9:b6:a1:ea:93:e2:f0:81:13:8f:14:e0:
         e2:55:3e:ce:88:b3:d8:3b:09:c0:da:69:0a:6c:26:13:29:bd:
         99:bd:e2:bf:55:8f:91:f1:7f:84:fb:2b:d0:fa:47:3b:6d:8b:
         24:48:c3:20:aa:75:1b:e7:5c:a2:3d:80:7b:7b:af:23:4a:28:
         40:d9:b3:4c:ae:17:f3:06:95:59:bc:20:ea:5f:ec:09:e7:cd:
         31:59:dd:f5:bd:fa:90:72:02:ee:f4:ec:8c:c3:42:de:cd:1c:
         3f:92:aa:5b:40:4d:c1:52:fc:cc:31:d1:32:27:ae:ab:cf:d1:
         e1:8a:1d:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2wdYHw0scwkSqUl4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjRjMzEzMDctZTEwZC00NTM3LWFhN2EtNmJiZjM2OTJj
NWQ2MB4XDTI2MDUwMTEzMDAzMFoXDTI2MDczMDEzMDAzMFowLzEtMCsGA1UEAxMk
YzVjNDk1NmQtOWUxNy00MWQzLWJlYWUtNmM2NjM3ZTc4ZjMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0rwh/EX5RHxYH50PiKh+wogheDb+lgzCAZZ
RjNsMRpRiobyO7bNsAelVCA7A2ykIow2VlWzRL2brCa3aZ7Pfck+eiWbAlIUuDO8
BVTLEKFwndJA77JdBa1E0jU2dvYu6WKKVJ05x8JafOmkbgnNh7LQeq1ltvgaTOYE
t6pi0evsz6dUpzw8jOiQnb8gkkGUiecVsUjWCYy6oZ+smlGR9rq4K0DmUGg+Ym2P
UWGaxsJNZu+Vkq9i6qnG7wnmgQpyt9z0jPzd9KR4VQZg124GwJMauLnHqpryMMsG
DmGeaqx6UD9TjyLq1SGkQveyQ7psAJmyaeQ+Lp2qXNRm55topQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIJ++/Y8st1TKhZBGJzQekBZf2EwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNGMz
MTMwNy1lMTBkLTQ1MzctYWE3YS02YmJmMzY5MmM1ZDYvNzBjYTQxMzYtZjUyMS0z
MDU4LTkyM2ItZDI4NGJlZjI0N2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjRjMzEzMDctZTEwZC00NTM3LWFh
N2EtNmJiZjM2OTJjNWQ2LzI0YzMxMzA3LWUxMGQtNDUzNy1hYTdhLTZiYmYzNjky
YzVkNi5jcmwwHwYDVR0jBBgwFoAUU0jWjSPeyR9it/CXVgVTm0JSO5wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNGMzMTMwNy1lMTBkLTQ1MzctYWE3YS02YmJm
MzY5MmM1ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqpXgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHqDCvpgGYVLkf/wsCZMhOxa3ZFHq1D97dDaLNVNeuyxJ5yWE01ZwM/i
p8/zNPEUG8bt5xy0ibW2bipa3HtG04uTVBkl1njYkII+OPARMo7sMPguSl5XcV7J
8tzl8yhFMA8Mao5DAyRV1OwBdVmNghGFO24LqmuyvxM7KsD6LTau4V8Mm+m2oeqT
4vCBE48U4OJVPs6Is9g7CcDaaQpsJhMpvZm94r9Vj5Hxf4T7K9D6RzttiyRIwyCq
dRvnXKI9gHt7ryNKKEDZs0yuF/MGlVm8IOpf7AnnzTFZ3fW9+pByAu707IzDQt7N
HD+SqltATcFS/Mwx0TInrqvP0eGKHSo=
-----END CERTIFICATE-----
Generated at Wed May 13 04:33:37 2026 by rpki-client