Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/5c55cbca-4bf7-3dc2-be98-8c1e177874ee.roa
File:                     5c55cbca-4bf7-3dc2-be98-8c1e177874ee.roa (raw, json)
Hash identifier:          PNYRwmjNrHBg+Afo8bAwDsD1vcmg02Odfb9XU/EV4oE=
Subject key identifier:   7F:F6:2F:FB:B7:4E:D9:D9:60:96:0F:5E:BA:8C:E1:12:25:3D:09:7B
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F4328584E97B506D6355DB05B7780EEAC
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/5c55cbca-4bf7-3dc2-be98-8c1e177874ee.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     23520
IP address blocks:        69.79.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b5:06:d6:35:5d:b0:5b:77:80:ee:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=74036128-6441-4c17-a14d-a229ddbdd31b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d7:8c:94:03:cb:35:86:f5:e1:d3:a2:e1:e5:
                    49:54:ef:ac:44:60:e5:12:5e:ff:bc:64:2a:cc:34:
                    cf:20:30:13:0a:54:ce:c3:26:fa:3d:4d:c3:c0:99:
                    3c:77:82:ce:60:99:04:87:2c:a7:98:0a:11:dc:63:
                    58:da:f8:b0:c9:2e:00:20:a6:fe:e8:ad:ba:4e:eb:
                    cc:58:64:64:b9:ca:89:6b:92:88:6f:8c:a3:9b:a3:
                    0f:26:2a:73:1e:92:3a:96:8a:bf:62:51:6d:3e:86:
                    04:06:98:60:41:76:63:05:03:d7:00:40:08:dd:8f:
                    5d:fe:6c:58:29:25:ad:ba:73:d1:de:45:bb:e1:5b:
                    38:47:7a:42:9a:d1:3b:88:c7:e9:38:46:af:9f:71:
                    f7:42:f9:0f:6b:c7:e6:65:e2:cf:e4:4d:ce:eb:0c:
                    c6:f5:83:c0:37:88:76:00:d5:29:1f:70:23:47:1c:
                    cc:de:91:88:97:d6:05:68:b1:d5:a4:17:5c:5e:b7:
                    13:eb:57:c1:14:48:18:d5:95:3d:56:69:6a:4d:d6:
                    2e:48:0c:03:cb:85:b8:6f:35:91:74:03:7f:6c:40:
                    f9:7e:9a:05:5d:21:4d:b2:62:59:86:e0:ea:a4:4a:
                    d4:99:73:a0:51:85:f0:53:f2:b5:da:d8:6a:e7:2a:
                    e5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F6:2F:FB:B7:4E:D9:D9:60:96:0F:5E:BA:8C:E1:12:25:3D:09:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/5c55cbca-4bf7-3dc2-be98-8c1e177874ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.79.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:1a:8c:83:ba:63:10:f7:d4:83:fc:55:34:ce:45:16:6c:27:
         1f:e5:77:a8:36:04:74:04:d1:ed:34:ba:e7:08:38:d7:22:07:
         df:c8:96:1b:b2:95:c2:f7:1b:48:97:e9:cb:a3:bd:f8:7a:20:
         67:9d:85:05:f0:d3:22:da:d2:5b:9e:e6:73:40:10:d6:62:9b:
         75:c0:db:1c:be:65:62:b9:c3:bd:09:cc:d6:86:11:f3:30:78:
         21:b7:02:f9:af:b1:42:d0:b8:55:2a:f8:08:6e:51:0f:7e:47:
         df:30:2a:b8:fd:2b:81:2d:b3:4c:52:4e:8d:d7:9d:74:83:5a:
         fc:1e:f3:f9:7f:88:a9:ed:69:b0:3a:0a:46:1b:28:92:e8:27:
         ef:2a:7a:dc:39:07:7d:eb:c0:72:a2:00:4d:1c:41:f2:aa:de:
         a3:cd:ce:9e:85:c0:ee:94:8e:80:84:47:5b:c6:71:49:18:37:
         ce:7b:b0:e5:10:3d:38:73:35:74:3d:16:67:96:7c:26:84:b0:
         9a:0e:24:44:db:c7:8a:f5:dc:9e:1c:4f:63:79:22:08:0d:b0:
         00:7a:05:42:27:6b:17:0b:12:6d:cc:59:a1:41:b7:7e:4e:75:
         47:ea:f3:2e:b5:ff:97:6c:67:50:88:16:44:20:57:68:1a:fc:
         6b:c5:21:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtQbWNV2wW3eA7qwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODBlNDMyNzctNDQ5MC00Y2M5LTk5ZWMtNTcyNmFmMDhj
OGFiMB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk
NzQwMzYxMjgtNjQ0MS00YzE3LWExNGQtYTIyOWRkYmRkMzFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlteMlAPLNYb14dOi4eVJVO+sRGDlEl7/vGQq
zDTPIDATClTOwyb6PU3DwJk8d4LOYJkEhyynmAoR3GNY2viwyS4AIKb+6K26TuvM
WGRkucqJa5KIb4yjm6MPJipzHpI6loq/YlFtPoYEBphgQXZjBQPXAEAI3Y9d/mxY
KSWtunPR3kW74Vs4R3pCmtE7iMfpOEavn3H3QvkPa8fmZeLP5E3O6wzG9YPAN4h2
ANUpH3AjRxzM3pGIl9YFaLHVpBdcXrcT61fBFEgY1ZU9VmlqTdYuSAwDy4W4bzWR
dAN/bED5fpoFXSFNsmJZhuDqpErUmXOgUYXwU/K12thq5yrlyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH/2L/u3TtnZYJYPXrqM4RIlPQl7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MGU0
MzI3Ny00NDkwLTRjYzktOTllYy01NzI2YWYwOGM4YWIvNWM1NWNiY2EtNGJmNy0z
ZGMyLWJlOTgtOGMxZTE3Nzg3NGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODBlNDMyNzctNDQ5MC00Y2M5LTk5
ZWMtNTcyNmFmMDhjOGFiLzgwZTQzMjc3LTQ0OTAtNGNjOS05OWVjLTU3MjZhZjA4
YzhhYi5jcmwwHwYDVR0jBBgwFoAU9W5QKXAQrkNBl+H/jCjkkjkd3fAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84MGU0MzI3Ny00NDkwLTRjYzktOTllYy01NzI2
YWYwOGM4YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARU/mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGkajIO6YxD31IP8VTTORRZsJx/ld6g2BHQE0e00uucIONciB9/Ilhuy
lcL3G0iX6cujvfh6IGedhQXw0yLa0lue5nNAENZim3XA2xy+ZWK5w70JzNaGEfMw
eCG3AvmvsULQuFUq+AhuUQ9+R98wKrj9K4Ets0xSTo3XnXSDWvwe8/l/iKntabA6
CkYbKJLoJ+8qetw5B33rwHKiAE0cQfKq3qPNzp6FwO6UjoCER1vGcUkYN857sOUQ
PThzNXQ9FmeWfCaEsJoOJETbx4r13J4cT2N5IggNsAB6BUInaxcLEm3MWaFBt35O
dUfq8y61/5dsZ1CIFkQgV2ga/GvFIVk=
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:57:42 2026 by rpki-client