Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cc932142-18fc-3deb-a82e-ab811028566d.roa
File:                     cc932142-18fc-3deb-a82e-ab811028566d.roa (raw, json)
Hash identifier:          8pVBqxU5qTtypVcygaitfm+HfyvHsymffBcv8HU1NQI=
Subject key identifier:   F6:C9:E6:4A:B4:49:E2:E9:07:96:AC:FB:B2:38:67:0E:6D:BA:3E:4C
Certificate issuer:       /CN=cb0e4e7e-2c75-4541-8d67-ed2543afd5f3
Certificate serial:       010D0C9F4328584E7E95043506040C305C3CC980
Authority key identifier: 12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cc932142-18fc-3deb-a82e-ab811028566d.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     31898
IP address blocks:        162.223.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:95:04:35:06:04:0c:30:5c:3c:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb0e4e7e-2c75-4541-8d67-ed2543afd5f3
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=1f97ec4f-8ecb-4c2d-8f1c-2473fdf035c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8a:3b:2f:14:20:b1:1f:d9:5d:75:8d:64:e7:
                    a1:98:7c:43:58:c1:fb:a9:18:e3:7c:0b:81:73:97:
                    a0:7f:fb:e5:ee:2d:1c:c9:0f:25:39:7d:f2:56:a0:
                    88:55:f6:a2:32:9b:71:29:d8:31:c2:e5:01:b9:c2:
                    4f:c3:4f:82:08:1c:70:e7:f4:72:05:a3:ec:ad:71:
                    80:55:77:0d:e2:56:79:91:ad:63:62:1b:26:39:54:
                    6f:76:ff:bb:20:8e:54:97:ea:ad:dd:8b:49:49:14:
                    80:4e:eb:d0:75:9c:0c:40:8b:6e:af:01:d5:aa:74:
                    4e:28:f7:83:89:a9:5b:f6:14:cf:ae:b1:6b:36:29:
                    dc:60:42:d2:e0:34:47:24:28:44:47:fb:de:1f:f5:
                    0a:1e:45:48:2c:ac:26:83:f3:ca:79:c7:36:e0:2e:
                    66:6b:8d:4d:1a:ca:ff:d3:b9:b5:3d:2b:09:4e:13:
                    c3:2d:1a:74:42:35:f6:b5:fe:19:34:9f:7f:27:15:
                    dc:4e:9d:68:3f:d8:aa:6b:2e:dd:8b:15:1f:60:96:
                    ba:fe:1e:07:e8:69:6a:93:71:2b:58:db:06:70:27:
                    52:0c:0a:ec:29:42:62:36:8d:f4:cc:19:1b:87:fd:
                    ef:d3:d5:eb:8f:c7:b2:02:39:d7:df:2b:11:84:60:
                    35:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C9:E6:4A:B4:49:E2:E9:07:96:AC:FB:B2:38:67:0E:6D:BA:3E:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cc932142-18fc-3deb-a82e-ab811028566d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.crl

            X509v3 Authority Key Identifier:
                keyid:12:8F:83:F3:B6:50:D2:E5:1F:5D:42:02:A0:55:D6:B2:14:CF:AC:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb0e4e7e-2c75-4541-8d67-ed2543afd5f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.223.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:53:bd:92:98:92:d2:69:79:37:5b:4b:ee:e6:5c:18:71:8c:
         29:f9:e6:5c:08:58:17:b5:20:35:af:1f:45:c7:b5:4f:01:26:
         a1:16:b8:72:70:c8:53:5f:2e:38:3e:ef:0c:d6:be:d7:2d:d0:
         24:4f:54:5f:55:d3:fa:d7:48:bc:4e:f7:7c:03:37:e0:15:cd:
         23:04:b5:9b:93:3d:d1:19:fb:25:eb:40:a3:9d:5a:35:50:69:
         3e:eb:03:2f:59:83:59:b4:d4:4d:27:36:82:22:3d:5f:b9:ef:
         fd:ef:ae:cf:61:7e:12:9f:49:06:47:06:0d:a0:a9:39:ac:4d:
         53:1b:fa:c2:5d:1c:6e:bb:a1:c0:bd:13:eb:db:76:e0:bc:bb:
         4b:af:0e:33:8c:25:51:58:d0:22:db:6c:23:e4:b8:9e:05:a5:
         55:15:15:66:77:d7:d7:a1:04:e6:45:76:0e:af:e1:8e:01:0e:
         64:d1:1e:5e:30:ec:5e:0c:9a:6c:ea:d4:17:81:a7:5d:23:6a:
         8c:09:59:d2:64:25:73:50:8f:8c:37:fa:9a:a1:ba:cf:96:dc:
         32:32:96:d3:dd:9c:f9:6d:20:fb:48:45:19:fc:d3:e6:1f:ef:
         3f:31:fd:8e:48:c5:ed:aa:9a:88:eb:3a:83:0c:a1:c6:ea:76:
         70:52:1f:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lQQ1BgQMMFw8yYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2IwZTRlN2UtMmM3NS00NTQxLThkNjctZWQyNTQzYWZk
NWYzMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk
MWY5N2VjNGYtOGVjYi00YzJkLThmMWMtMjQ3M2ZkZjAzNWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoo7LxQgsR/ZXXWNZOehmHxDWMH7qRjjfAuB
c5egf/vl7i0cyQ8lOX3yVqCIVfaiMptxKdgxwuUBucJPw0+CCBxw5/RyBaPsrXGA
VXcN4lZ5ka1jYhsmOVRvdv+7II5Ul+qt3YtJSRSATuvQdZwMQIturwHVqnROKPeD
ialb9hTPrrFrNincYELS4DRHJChER/veH/UKHkVILKwmg/PKecc24C5ma41NGsr/
07m1PSsJThPDLRp0QjX2tf4ZNJ9/JxXcTp1oP9iqay7dixUfYJa6/h4H6Glqk3Er
WNsGcCdSDArsKUJiNo30zBkbh/3v09Xrj8eyAjnX3ysRhGA1GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPbJ5kq0SeLpB5as+7I4Zw5tuj5MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jYjBl
NGU3ZS0yYzc1LTQ1NDEtOGQ2Ny1lZDI1NDNhZmQ1ZjMvY2M5MzIxNDItMThmYy0z
ZGViLWE4MmUtYWI4MTEwMjg1NjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2IwZTRlN2UtMmM3NS00NTQxLThk
NjctZWQyNTQzYWZkNWYzL2NiMGU0ZTdlLTJjNzUtNDU0MS04ZDY3LWVkMjU0M2Fm
ZDVmMy5jcmwwHwYDVR0jBBgwFoAUEo+D87ZQ0uUfXUICoFXWshTPrMcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jYjBlNGU3ZS0yYzc1LTQ1NDEtOGQ2Ny1lZDI1
NDNhZmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAot/vMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADxTvZKYktJpeTdbS+7mXBhxjCn55lwIWBe1IDWvH0XHtU8BJqEWuHJw
yFNfLjg+7wzWvtct0CRPVF9V0/rXSLxO93wDN+AVzSMEtZuTPdEZ+yXrQKOdWjVQ
aT7rAy9Zg1m01E0nNoIiPV+57/3vrs9hfhKfSQZHBg2gqTmsTVMb+sJdHG67ocC9
E+vbduC8u0uvDjOMJVFY0CLbbCPkuJ4FpVUVFWZ319ehBOZFdg6v4Y4BDmTRHl4w
7F4Mmmzq1BeBp10jaowJWdJkJXNQj4w3+pqhus+W3DIyltPdnPltIPtIRRn80+Yf
7z8x/Y5Ixe2qmojrOoMMocbqdnBSH7g=
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:36 2026 by rpki-client