Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/fca5d0bd-8cef-3bba-bc5f-5789cb4b37a5.roa
File:                     fca5d0bd-8cef-3bba-bc5f-5789cb4b37a5.roa (raw, json)
Hash identifier:          VD96cmDxn+WhAhE7rYskRDk/TqRY9Cp5Ipxk8MfAWAo=
Subject key identifier:   A3:72:24:93:86:89:D8:03:7E:41:98:85:94:E3:D4:E2:C7:3B:FA:5A
Certificate issuer:       /CN=4d6573b2-9f3e-43b9-a710-eaee606df226
Certificate serial:       010D0C9F4328584E94EA5FC4EBB906043C183D00
Authority key identifier: 20:63:FC:C3:CE:AA:32:56:26:BD:59:C0:71:B0:16:84:43:E3:05:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/fca5d0bd-8cef-3bba-bc5f-5789cb4b37a5.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     3128
IP address blocks:        143.200.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/4d6573b2-9f3e-43b9-a710-eaee606df226.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/4d6573b2-9f3e-43b9-a710-eaee606df226.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:5f:c4:eb:b9:06:04:3c:18:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d6573b2-9f3e-43b9-a710-eaee606df226
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=39e277cb-f3a6-4fab-9c5a-58dc8cdf4a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:87:34:d3:a2:ff:39:e5:70:c8:93:fa:c6:91:
                    c7:e9:01:4f:dd:b2:f0:e3:8e:1e:b8:ab:6a:ed:01:
                    cd:75:20:63:84:13:5c:2d:d4:c7:1b:a2:84:ab:24:
                    d9:f7:7c:20:be:de:9a:2a:63:ec:e8:42:22:d6:b7:
                    1f:e0:fa:82:f1:c0:4c:60:ac:94:5b:a2:d8:b1:4c:
                    25:29:49:83:1a:1d:08:aa:0c:2f:0e:be:91:af:79:
                    8e:db:d1:bc:cd:4f:1a:8e:2f:d8:e5:17:b1:e1:43:
                    ee:b7:88:62:dc:3e:2b:c8:3b:85:c1:10:44:d2:a5:
                    d0:ca:05:cf:28:3b:bd:ba:c4:72:10:6c:8e:c3:45:
                    31:60:f5:95:41:b3:7d:e0:97:82:40:29:ac:02:52:
                    f8:21:ee:5d:95:7d:e4:99:3c:f0:a1:58:62:70:84:
                    6b:eb:57:3c:97:6d:a0:b9:69:81:b5:a0:30:d4:4a:
                    69:eb:70:b8:03:a5:74:25:0a:95:9d:17:b1:c3:f5:
                    b2:13:45:e3:ff:d2:23:3b:18:e6:8b:7a:84:d7:1f:
                    df:f7:5b:99:cf:00:a6:04:c2:08:d9:cf:69:01:3c:
                    d4:9a:50:b1:67:8d:e2:2f:36:9c:4e:b7:ed:ba:67:
                    ef:9d:38:06:1c:b9:7d:e4:19:f9:5f:cf:34:c0:48:
                    96:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:72:24:93:86:89:D8:03:7E:41:98:85:94:E3:D4:E2:C7:3B:FA:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/fca5d0bd-8cef-3bba-bc5f-5789cb4b37a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226/4d6573b2-9f3e-43b9-a710-eaee606df226.crl

            X509v3 Authority Key Identifier:
                keyid:20:63:FC:C3:CE:AA:32:56:26:BD:59:C0:71:B0:16:84:43:E3:05:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4d6573b2-9f3e-43b9-a710-eaee606df226.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.200.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:8b:f3:09:0a:fb:88:ad:d3:d0:5c:38:48:d9:2f:b6:bb:fb:
         04:61:9d:03:cc:5e:fe:a0:80:a7:6c:ab:fa:e0:75:2f:8f:e7:
         9e:4d:9c:82:ad:4b:e0:81:66:ba:f1:22:74:8b:42:75:a1:8d:
         31:51:ec:5e:cc:43:4a:89:11:d7:07:db:4b:ae:dd:bc:8f:67:
         66:1a:0b:b5:99:3c:71:87:89:02:56:32:ca:fc:3f:b1:4c:bc:
         7a:62:2b:36:46:48:58:0d:19:4a:cf:f7:f2:52:1b:1e:c9:a4:
         59:09:66:a2:93:01:12:d9:60:80:2f:1b:27:14:4c:b8:d7:f3:
         32:ae:63:06:3d:ed:38:2f:7e:6c:d8:2a:92:f4:a1:ee:15:8d:
         56:8e:04:ab:83:08:88:17:03:48:81:c8:40:94:56:23:56:76:
         72:11:69:ea:17:35:57:ce:62:a2:6c:35:8a:0b:ed:8f:0d:6c:
         6a:ff:15:de:8f:92:fd:0a:09:57:21:4d:6c:6d:1b:3f:cd:74:
         02:4d:9f:c3:71:08:32:c1:30:98:eb:6e:e4:d4:4c:38:4d:98:
         70:92:30:d5:2e:62:50:32:a3:15:12:f6:ce:54:be:d1:36:6e:
         2c:b7:44:33:22:53:75:b4:80:38:30:07:21:40:72:66:6a:aa:
         17:bf:36:3e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6U6l/E67kGBDwYPQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGQ2NTczYjItOWYzZS00M2I5LWE3MTAtZWFlZTYwNmRm
MjI2MB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk
MzllMjc3Y2ItZjNhNi00ZmFiLTljNWEtNThkYzhjZGY0YTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4c006L/OeVwyJP6xpHH6QFP3bLw444euKtq
7QHNdSBjhBNcLdTHG6KEqyTZ93wgvt6aKmPs6EIi1rcf4PqC8cBMYKyUW6LYsUwl
KUmDGh0IqgwvDr6Rr3mO29G8zU8aji/Y5Rex4UPut4hi3D4ryDuFwRBE0qXQygXP
KDu9usRyEGyOw0UxYPWVQbN94JeCQCmsAlL4Ie5dlX3kmTzwoVhicIRr61c8l22g
uWmBtaAw1Epp63C4A6V0JQqVnRexw/WyE0Xj/9IjOxjmi3qE1x/f91uZzwCmBMII
2c9pATzUmlCxZ43iLzacTrftumfvnTgGHLl95Bn5X880wEiWKQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKNyJJOGidgDfkGYhZTj1OLHO/paMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80ZDY1
NzNiMi05ZjNlLTQzYjktYTcxMC1lYWVlNjA2ZGYyMjYvZmNhNWQwYmQtOGNlZi0z
YmJhLWJjNWYtNTc4OWNiNGIzN2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGQ2NTczYjItOWYzZS00M2I5LWE3
MTAtZWFlZTYwNmRmMjI2LzRkNjU3M2IyLTlmM2UtNDNiOS1hNzEwLWVhZWU2MDZk
ZjIyNi5jcmwwHwYDVR0jBBgwFoAUIGP8w86qMlYmvVnAcbAWhEPjBaowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80ZDY1NzNiMi05ZjNlLTQzYjktYTcxMC1lYWVl
NjA2ZGYyMjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAj8gwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAVovzCQr7iK3T0Fw4SNkvtrv7BGGdA8xe/qCAp2yr+uB1L4/nnk2cgq1L
4IFmuvEidItCdaGNMVHsXsxDSokR1wfbS67dvI9nZhoLtZk8cYeJAlYyyvw/sUy8
emIrNkZIWA0ZSs/38lIbHsmkWQlmopMBEtlggC8bJxRMuNfzMq5jBj3tOC9+bNgq
kvSh7hWNVo4Eq4MIiBcDSIHIQJRWI1Z2chFp6hc1V85iomw1igvtjw1sav8V3o+S
/QoJVyFNbG0bP810Ak2fw3EIMsEwmOtu5NRMOE2YcJIw1S5iUDKjFRL2zlS+0TZu
LLdEMyJTdbSAODAHIUByZmqqF782Pg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:47:29 2026 by rpki-client