Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/c844b065-2a1a-31c2-88f6-22f75ccc8a82.roa
File:                     c844b065-2a1a-31c2-88f6-22f75ccc8a82.roa (raw, json)
Hash identifier:          uaEt1efbyqgttQnGhxg/CL2sbHP6F1ezO5Eo/wVkORQ=
Subject key identifier:   DA:3D:BA:25:B2:98:5E:55:A0:48:34:4B:0E:56:97:EA:F9:A4:10:85
Certificate issuer:       /CN=d29c11ab-c477-4c3c-8a5d-aa4ac4233132
Certificate serial:       010D0C9F4328584E577F52D666561D9DBE522B80
Authority key identifier: CE:33:02:1B:7C:ED:F3:76:C3:A0:82:31:3C:FC:D5:6C:F0:E8:89:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/c844b065-2a1a-31c2-88f6-22f75ccc8a82.roa
Signing time:             Tue 30 Jun 2026 09:00:12 +0000
ROA not before:           Tue 30 Jun 2026 09:00:12 +0000
ROA not after:            Mon 28 Sep 2026 09:00:12 +0000
asID:                     394149
IP address blocks:        199.185.184.0/23 maxlen: 23
                          2620:121:9000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:57:7f:52:d6:66:56:1d:9d:be:52:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d29c11ab-c477-4c3c-8a5d-aa4ac4233132
        Validity
            Not Before: Jun 30 09:00:12 2026 GMT
            Not After : Sep 28 09:00:12 2026 GMT
        Subject: CN=8918c8df-fb5e-4a03-b76c-ea0ddc711662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bc:99:8d:e5:cf:45:88:fc:bf:d8:9b:c8:cc:
                    70:41:fc:f0:02:9f:eb:1f:9e:f4:8b:42:05:17:3e:
                    d0:c3:0e:02:3a:1e:d6:a2:bf:45:0e:9f:73:8f:c5:
                    5e:78:88:72:e8:ec:09:9e:cf:c2:14:50:29:c1:fe:
                    db:fa:1e:f3:96:16:9c:74:00:58:77:ff:6e:9b:2f:
                    ad:3b:c6:44:0c:9b:e4:8e:45:29:58:df:1c:49:60:
                    42:f9:ac:2c:14:a6:31:a7:8c:b7:b8:67:09:8e:8c:
                    12:f8:99:a4:10:11:ce:9d:b1:b6:2d:54:cc:f4:7f:
                    24:56:7e:b1:c0:ac:da:9d:ed:92:11:67:30:88:cf:
                    2b:8c:1c:47:4c:af:00:db:d0:ba:d1:e1:84:cf:ab:
                    62:28:df:d8:a9:28:55:1f:d4:fd:a5:36:08:47:02:
                    1d:50:af:ad:10:0a:6d:34:ae:4b:dd:79:d8:9d:7b:
                    b4:24:2a:59:30:e1:af:81:e1:d5:ca:25:cf:06:29:
                    d9:b0:2f:28:03:20:d0:1f:1d:23:72:eb:a1:b0:c0:
                    ca:73:8c:1f:33:cb:c6:98:1a:51:d0:50:94:85:68:
                    f0:5e:69:08:bd:ef:77:d4:18:67:81:d3:10:bd:6f:
                    f9:d7:4e:72:8e:e2:d7:81:28:89:d2:78:a3:21:e7:
                    22:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3D:BA:25:B2:98:5E:55:A0:48:34:4B:0E:56:97:EA:F9:A4:10:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/c844b065-2a1a-31c2-88f6-22f75ccc8a82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.crl

            X509v3 Authority Key Identifier:
                keyid:CE:33:02:1B:7C:ED:F3:76:C3:A0:82:31:3C:FC:D5:6C:F0:E8:89:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.185.184.0/23
                IPv6:
                  2620:121:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:ca:68:29:c6:bb:03:29:a6:ee:9d:88:6f:ac:33:a9:ba:67:
         2f:df:82:7e:a1:0b:9e:a2:ab:14:8a:5d:6d:e6:b1:b5:bb:69:
         cd:c6:28:47:7c:82:f5:09:0f:31:66:6f:2f:20:7f:0a:09:fb:
         c3:25:95:a4:fb:4d:ea:93:d5:04:17:ee:26:73:35:56:e4:9b:
         d4:dd:9f:55:04:1f:3b:80:36:6b:c6:96:b0:20:52:47:5a:7d:
         38:49:f7:37:e5:c8:3a:e3:3e:f1:1e:f0:78:9f:28:c4:c3:46:
         dc:83:ba:9f:16:9a:c2:59:88:a5:13:e9:a8:8f:c3:92:65:62:
         4c:28:e5:89:b6:ce:fe:d9:e9:56:23:6d:87:87:22:f6:09:75:
         27:5a:64:31:ce:88:83:f3:2d:98:69:1c:ec:fb:65:50:62:d3:
         ee:af:3b:0e:f2:78:20:c2:b0:63:49:8c:6e:1b:a4:72:f4:59:
         10:0d:f8:8f:d4:1b:89:d4:9c:fb:09:31:d3:df:9b:7d:7a:42:
         13:13:80:66:17:49:e9:aa:ae:74:a1:5b:29:6f:85:20:8a:d7:
         34:cc:e2:e6:82:30:f1:fd:4d:7b:63:83:94:f0:a2:93:82:3c:
         41:b6:6b:2c:3c:bf:ec:65:59:8d:ca:bc:f4:ae:85:41:ee:f9:
         29:97:1a:1a
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE5Xf1LWZlYdnb5SK4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDI5YzExYWItYzQ3Ny00YzNjLThhNWQtYWE0YWM0MjMz
MTMyMB4XDTI2MDYzMDA5MDAxMloXDTI2MDkyODA5MDAxMlowLzEtMCsGA1UEAxMk
ODkxOGM4ZGYtZmI1ZS00YTAzLWI3NmMtZWEwZGRjNzExNjYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbyZjeXPRYj8v9ibyMxwQfzwAp/rH570i0IF
Fz7Qww4COh7Wor9FDp9zj8VeeIhy6OwJns/CFFApwf7b+h7zlhacdABYd/9umy+t
O8ZEDJvkjkUpWN8cSWBC+awsFKYxp4y3uGcJjowS+JmkEBHOnbG2LVTM9H8kVn6x
wKzane2SEWcwiM8rjBxHTK8A29C60eGEz6tiKN/YqShVH9T9pTYIRwIdUK+tEApt
NK5L3XnYnXu0JCpZMOGvgeHVyiXPBinZsC8oAyDQHx0jcuuhsMDKc4wfM8vGmBpR
0FCUhWjwXmkIve931BhngdMQvW/5105yjuLXgSiJ0nijIecipwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFNo9uiWymF5VoEg0Sw5Wl+r5pBCFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMjlj
MTFhYi1jNDc3LTRjM2MtOGE1ZC1hYTRhYzQyMzMxMzIvYzg0NGIwNjUtMmExYS0z
MWMyLTg4ZjYtMjJmNzVjY2M4YTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDI5YzExYWItYzQ3Ny00YzNjLThh
NWQtYWE0YWM0MjMzMTMyL2QyOWMxMWFiLWM0NzctNGMzYy04YTVkLWFhNGFjNDIz
MzEzMi5jcmwwHwYDVR0jBBgwFoAUzjMCG3zt83bDoIIxPPzVbPDoibwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kMjljMTFhYi1jNDc3LTRjM2MtOGE1ZC1hYTRh
YzQyMzMxMzIuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBx7m4MA8E
AgACMAkDBwQmIAEhkAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhMpoKca7Aymm7p2Ib6wzqbpnL9+CfqEL
nqKrFIpdbeaxtbtpzcYoR3yC9QkPMWZvLyB/Cgn7wyWVpPtN6pPVBBfuJnM1VuSb
1N2fVQQfO4A2a8aWsCBSR1p9OEn3N+XIOuM+8R7weJ8oxMNG3IO6nxaawlmIpRPp
qI/DkmViTCjlibbO/tnpViNth4ci9gl1J1pkMc6Ig/MtmGkc7PtlUGLT7q87DvJ4
IMKwY0mMbhukcvRZEA34j9QbidSc+wkx09+bfXpCExOAZhdJ6aqudKFbKW+FIIrX
NMzi5oIw8f1Ne2ODlPCik4I8QbZrLDy/7GVZjcq89K6FQe75KZcaGg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:33:35 2026 by rpki-client