Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/f729f92c-837c-3bf4-b4ee-f50c40d63b9e.roa
File:                     f729f92c-837c-3bf4-b4ee-f50c40d63b9e.roa (raw, json)
Hash identifier:          shLWTz+j48EIwYmXmYy+DcXhwXfkOh0Xqlf2Vcw/ttE=
Subject key identifier:   4C:44:57:93:A3:CE:2C:01:25:C7:E7:2B:0E:27:05:D5:6D:0B:55:EE
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584D9E5004293025E49215AA5AC0
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/f729f92c-837c-3bf4-b4ee-f50c40d63b9e.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        207.202.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:04:29:30:25:e4:92:15:aa:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=d99894b6-ae12-4f45-82b1-65dcc41b4597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3f:0a:44:5d:03:c1:7e:dc:80:c4:02:57:bb:
                    22:f6:dc:c0:34:5a:aa:50:b9:d4:49:7e:55:a1:23:
                    a5:71:3b:34:94:b5:0c:f8:cd:aa:68:13:22:ba:7f:
                    f6:3c:81:48:67:6f:2d:9e:fc:9a:73:fc:f4:d0:51:
                    62:e4:e0:db:3f:c6:58:39:d0:63:6d:c2:a8:1a:a7:
                    60:27:76:97:c3:6e:b9:b4:2a:16:ad:82:21:4b:e0:
                    da:ea:a0:ee:6e:69:5e:0d:c3:72:65:c5:78:73:5a:
                    34:d7:f9:77:db:4e:af:22:e8:e4:be:22:db:c0:1f:
                    38:e3:4c:39:1b:0b:a0:c1:48:f3:f2:70:f8:dd:2c:
                    d4:84:d9:05:82:7c:4c:3e:63:5e:cd:e2:4d:15:e2:
                    a8:54:1c:e6:cf:53:d4:78:34:23:a1:fd:1c:62:cd:
                    c0:5d:fb:9f:27:1f:5e:dc:69:0e:6f:db:ca:d9:a1:
                    a9:56:33:9a:3c:f0:69:06:74:10:b8:0d:05:34:04:
                    eb:47:55:b7:d6:59:21:42:40:5f:b5:81:1e:18:84:
                    a6:e6:f7:ed:74:ae:16:83:5a:bb:ee:6d:1f:7a:0e:
                    fb:aa:2e:1d:44:7d:35:99:17:e1:72:c0:52:fc:bb:
                    52:2b:ce:c6:fd:ba:fb:37:8f:99:91:17:db:78:d7:
                    81:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:44:57:93:A3:CE:2C:01:25:C7:E7:2B:0E:27:05:D5:6D:0B:55:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/f729f92c-837c-3bf4-b4ee-f50c40d63b9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:64:d7:4b:8a:7e:91:25:f6:19:1e:a1:c4:40:b7:3f:a6:67:
         fb:4a:1b:6e:a5:5b:c1:0d:1d:6f:b4:a5:d4:db:2e:6c:f8:6b:
         e0:3b:31:bf:36:55:fe:56:04:73:dc:43:5a:6d:84:7f:12:35:
         45:b8:ff:e8:b8:54:16:48:2c:1e:cc:9a:fe:55:85:68:27:52:
         91:7f:f4:35:07:9b:c4:b9:98:92:69:d7:fe:26:e3:f7:cf:2a:
         dd:a2:6a:e6:91:d9:68:55:46:9f:3d:a9:1d:a9:0e:87:1d:61:
         ad:82:bb:93:59:53:a0:49:68:a9:4d:e7:cf:42:e3:36:f5:3e:
         bb:96:0d:2f:31:09:d7:43:11:33:2c:84:53:52:83:df:ff:c7:
         c8:e0:27:7e:a0:95:9c:0f:7c:06:af:73:22:97:7b:78:a8:12:
         4f:f0:76:d4:18:6f:ad:04:91:d1:f3:0b:83:4d:9a:15:cb:65:
         77:7b:4b:6f:b6:22:9e:63:a7:72:65:f3:b9:d3:68:77:5e:1a:
         e7:a6:01:1f:6d:77:7f:7b:ac:08:02:43:15:95:62:12:67:a3:
         93:d0:a6:e3:de:24:c6:b2:48:bf:76:9a:7c:bc:de:b5:5a:25:
         81:a8:dd:48:f7:6c:2d:27:cc:80:9f:5b:28:2a:c9:48:c6:c4:
         1c:7b:db:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUAQpMCXkkhWqWsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3
NzNlMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk
ZDk5ODk0YjYtYWUxMi00ZjQ1LTgyYjEtNjVkY2M0MWI0NTk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD8KRF0DwX7cgMQCV7si9tzANFqqULnUSX5V
oSOlcTs0lLUM+M2qaBMiun/2PIFIZ28tnvyac/z00FFi5ODbP8ZYOdBjbcKoGqdg
J3aXw265tCoWrYIhS+Da6qDubmleDcNyZcV4c1o01/l3206vIujkviLbwB8440w5
GwugwUjz8nD43SzUhNkFgnxMPmNezeJNFeKoVBzmz1PUeDQjof0cYs3AXfufJx9e
3GkOb9vK2aGpVjOaPPBpBnQQuA0FNATrR1W31lkhQkBftYEeGISm5vftdK4Wg1q7
7m0feg77qi4dRH01mRfhcsBS/LtSK87G/br7N4+ZkRfbeNeB+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFExEV5OjziwBJcfnKw4nBdVtC1XuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl
ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvZjcyOWY5MmMtODM3Yy0z
YmY0LWI0ZWUtZjUwYzQwZDYzYjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4
YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj
NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1
MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8oTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIlk10uKfpEl9hkeocRAtz+mZ/tKG26lW8ENHW+0pdTbLmz4a+A7Mb82
Vf5WBHPcQ1pthH8SNUW4/+i4VBZILB7Mmv5VhWgnUpF/9DUHm8S5mJJp1/4m4/fP
Kt2iauaR2WhVRp89qR2pDocdYa2Cu5NZU6BJaKlN589C4zb1PruWDS8xCddDETMs
hFNSg9//x8jgJ36glZwPfAavcyKXe3ioEk/wdtQYb60EkdHzC4NNmhXLZXd7S2+2
Ip5jp3Jl87nTaHdeGuemAR9td397rAgCQxWVYhJno5PQpuPeJMaySL92mny83rVa
JYGo3Uj3bC0nzICfWygqyUjGxBx72+I=
-----END CERTIFICATE-----
Generated at Wed May 13 12:56:13 2026 by rpki-client