Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ca96c743-26b4-3af6-9b1c-895a1d32be10.roa
File:                     ca96c743-26b4-3af6-9b1c-895a1d32be10.roa (raw, json)
Hash identifier:          vMqoANfu95R4MJxWDAIBk70E3rfm2OayBO8NfLGYptI=
Subject key identifier:   FB:CB:E3:CE:00:D0:CE:75:31:2F:E0:69:86:71:B5:C7:11:20:24:84
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584E86F4ECD1257F1C3CA30CC080
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ca96c743-26b4-3af6-9b1c-895a1d32be10.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     13807
IP address blocks:        162.221.232.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:ec:d1:25:7f:1c:3c:a3:0c:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=ba880ae2-14b8-4c78-9f52-84426fed1b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:89:e3:d0:51:62:7b:6e:39:ee:e7:6d:40:
                    a9:df:c4:30:44:1e:71:52:1b:b1:cf:08:76:77:cf:
                    c2:78:12:99:dc:18:32:2a:98:20:56:dc:20:7c:2c:
                    dd:d4:80:c6:58:40:33:ee:c7:b1:24:f8:fd:9f:db:
                    1f:b5:42:a5:4a:ed:54:a5:f6:18:59:a4:b0:c6:13:
                    cb:8d:58:e8:56:95:da:1f:77:69:9c:23:52:34:7e:
                    69:44:3d:5f:ac:c8:83:d8:b5:d5:fa:52:f4:06:a2:
                    78:55:cf:87:cf:6a:e6:3a:ab:7c:4e:7b:dd:43:7a:
                    8d:bf:a7:36:35:24:eb:d6:d4:6a:79:ed:c0:81:ce:
                    29:33:ee:28:90:2f:61:4c:27:57:5e:f5:d4:70:9b:
                    a2:70:c2:4e:40:32:63:e0:ad:7f:d0:c1:18:6e:bc:
                    8a:46:58:75:a2:dd:92:4f:ee:11:6f:42:24:ff:0b:
                    3a:55:6c:9f:33:5d:9b:4a:72:da:94:2c:28:8a:4e:
                    94:4c:b5:12:99:7b:cf:71:cc:ab:7f:55:b7:56:92:
                    35:62:10:79:a2:21:40:86:e8:59:65:ab:f0:6a:34:
                    17:8a:fe:33:b0:e6:9b:fc:79:11:bf:89:60:4d:9d:
                    5a:aa:7e:b5:a3:dd:56:f9:20:af:ac:42:9b:0e:5d:
                    23:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:CB:E3:CE:00:D0:CE:75:31:2F:E0:69:86:71:B5:C7:11:20:24:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ca96c743-26b4-3af6-9b1c-895a1d32be10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:90:4a:e4:52:cd:dc:48:24:79:04:63:1d:ba:be:d2:dd:e0:
         a0:17:be:48:e0:6d:42:a9:a1:3c:85:66:94:02:35:37:20:9a:
         d6:bf:05:4e:06:4c:9a:b6:d4:ee:e6:da:46:2a:23:f4:3a:3a:
         42:49:71:78:22:c4:44:19:00:6b:31:6f:22:b1:4f:15:26:5f:
         5d:29:52:74:92:d9:81:c7:91:d8:92:68:fc:70:ee:ea:30:ca:
         61:97:e9:e6:83:b4:d3:b6:26:11:4a:86:25:fe:e6:5e:a8:3c:
         ee:ae:19:58:1c:b7:39:0f:d7:76:66:d5:e0:86:1c:1d:ad:ee:
         e7:d6:df:3f:e2:79:e5:3f:bd:0b:55:38:00:64:08:6e:ad:55:
         33:bd:b2:0e:36:dd:d3:ab:e5:e6:f7:57:44:f9:e1:f4:fe:ab:
         c0:b5:45:7f:e2:3c:35:31:54:ac:d2:c7:8b:7a:b9:ae:61:c1:
         3c:ff:7f:c4:c3:61:5e:80:81:7b:de:a6:8f:0d:90:3a:e5:c5:
         93:3c:2a:f3:2f:5f:10:5b:91:75:78:53:26:15:e5:52:1f:7f:
         99:b9:11:be:ff:57:d5:1d:d0:33:3b:14:fa:6b:22:fb:f9:2e:
         75:41:1f:ab:c7:54:43:bb:5c:05:aa:b3:71:68:b6:10:0c:48:
         9c:cc:42:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9OzRJX8cPKMMwIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw
NTM2MB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk
YmE4ODBhZTItMTRiOC00Yzc4LTlmNTItODQ0MjZmZWQxYjFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5eJ49BRYntuOe7nbUCp38QwRB5xUhuxzwh2
d8/CeBKZ3BgyKpggVtwgfCzd1IDGWEAz7sexJPj9n9sftUKlSu1UpfYYWaSwxhPL
jVjoVpXaH3dpnCNSNH5pRD1frMiD2LXV+lL0BqJ4Vc+Hz2rmOqt8TnvdQ3qNv6c2
NSTr1tRqee3Agc4pM+4okC9hTCdXXvXUcJuicMJOQDJj4K1/0MEYbryKRlh1ot2S
T+4Rb0Ik/ws6VWyfM12bSnLalCwoik6UTLUSmXvPccyrf1W3VpI1YhB5oiFAhuhZ
ZavwajQXiv4zsOab/HkRv4lgTZ1aqn61o91W+SCvrEKbDl0jrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPvL484A0M51MS/gaYZxtccRICSEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm
MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvY2E5NmM3NDMtMjZiNC0z
YWY2LTliMWMtODk1YTFkMzJiZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3
OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj
MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh
ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCot3oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAICQSuRSzdxIJHkEYx26vtLd4KAXvkjgbUKpoTyFZpQCNTcgmta/BU4G
TJq21O7m2kYqI/Q6OkJJcXgixEQZAGsxbyKxTxUmX10pUnSS2YHHkdiSaPxw7uow
ymGX6eaDtNO2JhFKhiX+5l6oPO6uGVgctzkP13Zm1eCGHB2t7ufW3z/ieeU/vQtV
OABkCG6tVTO9sg423dOr5eb3V0T54fT+q8C1RX/iPDUxVKzSx4t6ua5hwTz/f8TD
YV6AgXvepo8NkDrlxZM8KvMvXxBbkXV4UyYV5VIff5m5Eb7/V9Ud0DM7FPprIvv5
LnVBH6vHVEO7XAWqs3FothAMSJzMQlk=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:08:11 2026 by rpki-client