Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/304e5131-d202-3593-a38a-2341608fd98e.roa
File:                     304e5131-d202-3593-a38a-2341608fd98e.roa (raw, json)
Hash identifier:          ml+cjg/eqs8PTYt23iXyOnz5iojLxfhld5RL0kU/DOY=
Subject key identifier:   5E:90:3F:FD:D2:64:EE:CD:FF:9C:C6:9D:05:DA:FA:8F:FD:38:35:49
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F443CA600F7265C906880
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/304e5131-d202-3593-a38a-2341608fd98e.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     30712
IP address blocks:        74.82.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:44:3c:a6:00:f7:26:5c:90:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=0545f549-b0e8-4917-a9b1-10665962fc6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b5:e7:bd:a1:2a:1c:55:04:ce:38:f9:dc:63:
                    f5:91:e0:a8:b1:c9:fb:aa:92:e3:2b:e6:66:d6:ae:
                    9e:8d:15:99:fe:40:2a:17:91:2c:2f:fa:42:a9:e2:
                    8b:81:5d:00:ee:95:3c:34:f0:07:c2:8f:82:38:cd:
                    61:a5:40:5c:a0:24:25:3b:de:99:32:5e:fd:e3:ec:
                    18:da:6b:1b:20:49:37:76:e6:ed:9a:20:69:9c:be:
                    c5:e2:b2:fd:ac:f0:34:6e:1c:69:7d:45:91:26:aa:
                    29:76:93:04:47:7b:4c:91:b1:1b:31:43:aa:16:2f:
                    31:04:b1:70:ae:e9:1e:ee:82:60:63:5d:b5:15:14:
                    30:b1:b3:1b:3d:fa:ee:52:fa:42:be:a1:7d:ea:49:
                    7d:68:90:5c:56:8e:f5:2a:de:4d:74:cf:9e:06:f3:
                    3e:0c:f9:d4:62:11:a3:41:02:e6:8f:03:ba:41:8f:
                    14:f7:19:16:12:60:f8:bf:f6:70:ea:e5:fa:91:99:
                    30:6d:e2:1e:70:ec:a0:66:89:40:81:06:ea:75:96:
                    43:00:f5:78:66:0f:f6:99:f1:b4:b4:4b:27:30:37:
                    c2:de:30:a5:7a:a9:07:c4:17:4e:e5:bc:d1:ba:e4:
                    b1:f1:26:00:9e:bd:8f:b5:21:88:8d:7c:b6:fb:f2:
                    97:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:90:3F:FD:D2:64:EE:CD:FF:9C:C6:9D:05:DA:FA:8F:FD:38:35:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/304e5131-d202-3593-a38a-2341608fd98e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.82.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:43:d5:50:b2:28:5e:51:26:dd:27:1c:97:2b:b6:f3:d9:2e:
         81:55:d3:38:c5:33:61:f1:03:a8:dc:2a:12:f4:1c:6f:fb:cb:
         2f:df:6d:4d:01:61:46:13:fe:e2:5e:32:20:c2:39:82:4c:08:
         a8:46:d7:9c:21:2e:67:76:64:7e:44:f1:8f:9d:de:28:e5:f8:
         aa:9b:49:bf:b7:50:12:c0:60:e7:b7:36:44:62:08:f1:69:af:
         cf:e4:84:a6:eb:dc:e9:97:5a:22:65:99:25:be:e9:c6:21:0c:
         8f:54:78:a1:24:89:be:e4:40:67:eb:ba:f0:d2:a1:b3:ef:eb:
         09:4a:67:dc:fa:25:89:ae:dc:e6:62:8d:84:ea:66:ae:b7:9c:
         e0:b4:34:81:cd:03:c2:31:84:49:c8:ad:91:44:3f:e1:fa:c9:
         8e:88:39:37:cd:90:37:38:cd:2e:13:2d:8e:7c:ba:b2:67:cb:
         37:c9:6a:48:ad:54:87:bb:af:7b:51:ac:7c:55:90:77:9e:7f:
         b0:81:e9:a2:0b:73:9e:aa:8b:f8:0f:e5:ca:ab:06:6b:19:2a:
         68:0d:bf:01:7b:74:27:fb:f8:48:ed:45:56:05:4e:0f:88:ec:
         ad:d8:cd:9d:81:86:bc:70:ae:01:48:e5:5a:8d:aa:ca:51:45:
         76:08:8f:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46L0Q8pgD3JlyQaIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk
MDU0NWY1NDktYjBlOC00OTE3LWE5YjEtMTA2NjU5NjJmYzZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7XnvaEqHFUEzjj53GP1keCoscn7qpLjK+Zm
1q6ejRWZ/kAqF5EsL/pCqeKLgV0A7pU8NPAHwo+COM1hpUBcoCQlO96ZMl794+wY
2msbIEk3dubtmiBpnL7F4rL9rPA0bhxpfUWRJqopdpMER3tMkbEbMUOqFi8xBLFw
ruke7oJgY121FRQwsbMbPfruUvpCvqF96kl9aJBcVo71Kt5NdM+eBvM+DPnUYhGj
QQLmjwO6QY8U9xkWEmD4v/Zw6uX6kZkwbeIecOygZolAgQbqdZZDAPV4Zg/2mfG0
tEsnMDfC3jCleqkHxBdO5bzRuuSx8SYAnr2PtSGIjXy2+/KXeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF6QP/3SZO7N/5zGnQXa+o/9ODVJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMzA0ZTUxMzEtZDIwMi0z
NTkzLWEzOGEtMjM0MTYwOGZkOThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASlIAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIxD1VCyKF5RJt0nHJcrtvPZLoFV0zjFM2HxA6jcKhL0HG/7yy/fbU0B
YUYT/uJeMiDCOYJMCKhG15whLmd2ZH5E8Y+d3ijl+KqbSb+3UBLAYOe3NkRiCPFp
r8/khKbr3OmXWiJlmSW+6cYhDI9UeKEkib7kQGfruvDSobPv6wlKZ9z6JYmu3OZi
jYTqZq63nOC0NIHNA8IxhEnIrZFEP+H6yY6IOTfNkDc4zS4TLY58urJnyzfJakit
VIe7r3tRrHxVkHeef7CB6aILc56qi/gP5cqrBmsZKmgNvwF7dCf7+EjtRVYFTg+I
7K3YzZ2BhrxwrgFI5VqNqspRRXYIj6s=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:28:31 2026 by rpki-client