Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/5be496da-5fa3-34ef-9393-d050c1a44dcd.roa
File:                     5be496da-5fa3-34ef-9393-d050c1a44dcd.roa (raw, json)
Hash identifier:          d5qlM1KhnzxCRDGiTcMefoAgtTbO0pbtvkbWtm653ok=
Subject key identifier:   84:AE:86:BD:67:D7:36:AE:6D:6F:4D:F1:9C:47:3B:5A:90:1E:24:95
Certificate issuer:       /CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d
Certificate serial:       010D0C9F4328584E7E9506DA1E773DABF3D3BD80
Authority key identifier: 8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/5be496da-5fa3-34ef-9393-d050c1a44dcd.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     546
IP address blocks:        206.219.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:95:06:da:1e:77:3d:ab:f3:d3:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ea67b9e-1c99-4b1c-8c50-055c10d4d55d
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=fff87247-e1f7-4783-9bee-98def76ab79a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d8:af:0e:39:ea:57:13:be:71:92:57:be:81:
                    93:8a:63:10:10:bb:af:51:25:dc:2d:4e:d1:20:13:
                    31:96:78:57:e6:08:20:f6:0c:e9:85:89:35:7b:00:
                    be:af:26:65:5b:0e:69:7b:0d:88:f2:3e:40:d3:a7:
                    d9:19:65:fa:5a:83:d4:ea:90:23:26:08:cf:af:c0:
                    fb:4c:9a:c0:a3:40:78:ef:7c:c8:d5:a8:e2:8e:07:
                    fb:25:2e:77:5d:52:8e:21:f7:60:da:e7:47:12:c3:
                    95:01:6c:4f:f5:2f:74:ce:da:d3:45:cc:d9:35:54:
                    e3:cf:27:e6:f1:bf:5f:43:50:a7:52:1f:d4:fe:dc:
                    5a:d1:ba:5a:f1:f2:c4:88:12:26:78:24:27:bf:38:
                    0c:e0:14:1b:57:7b:d4:fa:6a:cf:09:49:49:10:6d:
                    2f:96:ab:17:7b:e9:ab:10:74:32:5b:cc:e2:40:54:
                    29:f4:c3:07:18:37:a2:0f:51:c5:b4:a9:58:83:cf:
                    70:04:cb:ad:12:36:42:55:1c:31:10:f8:91:6b:a7:
                    bc:46:0a:ff:6d:0d:70:cb:98:af:8e:34:16:c2:8b:
                    02:f9:1e:cf:30:96:62:42:81:15:e7:f5:dd:75:ca:
                    97:af:8c:af:29:7e:76:ba:63:a2:9e:58:e2:42:63:
                    a4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AE:86:BD:67:D7:36:AE:6D:6F:4D:F1:9C:47:3B:5A:90:1E:24:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/5be496da-5fa3-34ef-9393-d050c1a44dcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.crl

            X509v3 Authority Key Identifier:
                keyid:8F:F9:BD:64:62:6F:68:AD:4F:51:81:74:78:57:9D:54:4A:A0:29:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0ea67b9e-1c99-4b1c-8c50-055c10d4d55d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.219.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:29:b5:8e:61:16:6c:7d:4f:8f:ef:82:0a:4e:c0:26:6a:bc:
         61:e8:66:14:d1:eb:fd:c7:43:48:be:d0:8a:ab:68:9a:16:29:
         9c:db:e1:32:34:73:67:a9:1d:72:38:bc:e8:10:da:d7:7e:26:
         4a:22:5a:fc:16:09:6a:1e:8d:78:79:59:bc:c9:0c:38:93:c1:
         ec:68:58:e1:c7:41:68:8d:57:d4:37:1b:2e:0a:30:17:c6:2e:
         1e:4d:25:14:c7:0e:9a:d3:f5:a0:0b:53:b7:dd:1d:e7:88:57:
         40:98:33:12:94:a8:d8:e4:4b:da:ac:51:56:dd:ee:b1:5b:cc:
         75:74:08:47:5d:91:da:ca:07:dc:47:9a:91:87:87:f4:50:29:
         14:1a:7f:d2:e9:a3:d7:40:f1:8b:7e:2c:15:51:e1:f0:2d:c7:
         21:c8:c2:8e:37:d5:52:dc:6f:df:11:ef:66:a0:cc:74:77:85:
         3d:6e:5d:e3:12:ce:20:8a:98:19:af:9f:98:8a:96:65:89:74:
         8a:54:35:ea:5d:b9:45:36:48:64:bf:a9:cf:70:69:3e:f9:82:
         03:4e:b1:fc:6d:55:cb:40:f0:04:22:76:57:92:3f:d1:66:11:
         85:91:c1:ee:3f:11:8f:4e:a2:f2:4a:0f:a4:e3:32:9c:89:bc:
         05:65:a6:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lQbaHnc9q/PTvYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGVhNjdiOWUtMWM5OS00YjFjLThjNTAtMDU1YzEwZDRk
NTVkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk
ZmZmODcyNDctZTFmNy00NzgzLTliZWUtOThkZWY3NmFiNzlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdivDjnqVxO+cZJXvoGTimMQELuvUSXcLU7R
IBMxlnhX5ggg9gzphYk1ewC+ryZlWw5pew2I8j5A06fZGWX6WoPU6pAjJgjPr8D7
TJrAo0B473zI1ajijgf7JS53XVKOIfdg2udHEsOVAWxP9S90ztrTRczZNVTjzyfm
8b9fQ1CnUh/U/txa0bpa8fLEiBImeCQnvzgM4BQbV3vU+mrPCUlJEG0vlqsXe+mr
EHQyW8ziQFQp9MMHGDeiD1HFtKlYg89wBMutEjZCVRwxEPiRa6e8Rgr/bQ1wy5iv
jjQWwosC+R7PMJZiQoEV5/XddcqXr4yvKX52umOinljiQmOk8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFISuhr1n1zaubW9N8ZxHO1qQHiSVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZWE2
N2I5ZS0xYzk5LTRiMWMtOGM1MC0wNTVjMTBkNGQ1NWQvNWJlNDk2ZGEtNWZhMy0z
NGVmLTkzOTMtZDA1MGMxYTQ0ZGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGVhNjdiOWUtMWM5OS00YjFjLThj
NTAtMDU1YzEwZDRkNTVkLzBlYTY3YjllLTFjOTktNGIxYy04YzUwLTA1NWMxMGQ0
ZDU1ZC5jcmwwHwYDVR0jBBgwFoAUj/m9ZGJvaK1PUYF0eFedVEqgKbwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZWE2N2I5ZS0xYzk5LTRiMWMtOGM1MC0wNTVj
MTBkNGQ1NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAztvgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABcptY5hFmx9T4/vggpOwCZqvGHoZhTR6/3HQ0i+0IqraJoWKZzb4TI0
c2epHXI4vOgQ2td+JkoiWvwWCWoejXh5WbzJDDiTwexoWOHHQWiNV9Q3Gy4KMBfG
Lh5NJRTHDprT9aALU7fdHeeIV0CYMxKUqNjkS9qsUVbd7rFbzHV0CEddkdrKB9xH
mpGHh/RQKRQaf9Lpo9dA8Yt+LBVR4fAtxyHIwo431VLcb98R72agzHR3hT1uXeMS
ziCKmBmvn5iKlmWJdIpUNepduUU2SGS/qc9waT75ggNOsfxtVctA8AQidleSP9Fm
EYWRwe4/EY9OovJKD6TjMpyJvAVlplI=
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:28:30 2026 by rpki-client