Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/282f9e34-ee84-3db6-bfa5-3c62d7a4968c.roa
File:                     282f9e34-ee84-3db6-bfa5-3c62d7a4968c.roa (raw, json)
Hash identifier:          9TbZLLtLlo8LfZ8MK5FbxIz8NRMXftwpfgE93V1MdD0=
Subject key identifier:   46:F2:77:BC:BC:8C:ED:B3:43:80:A6:57:FD:38:E2:C6:E2:51:BE:D5
Certificate issuer:       /CN=d6b690dc-d325-42b2-9834-06e4a779b209
Certificate serial:       010D0C9F4328584D65152BCAC448530168BC7298
Authority key identifier: ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/282f9e34-ee84-3db6-bfa5-3c62d7a4968c.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     14618
IP address blocks:        198.252.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:2b:ca:c4:48:53:01:68:bc:72:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b690dc-d325-42b2-9834-06e4a779b209
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=9cf6b069-396d-4c10-8918-bdddba04129c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1f:46:02:11:a2:66:8a:ec:3e:1e:93:d0:0b:
                    df:40:13:c3:8a:aa:f1:2b:2d:88:88:6a:51:a1:ac:
                    91:8d:02:e2:1f:c7:56:07:4e:7b:3f:b4:49:6e:b5:
                    04:40:ff:c8:48:0c:6e:f9:68:26:b9:ee:63:e4:e3:
                    31:04:4d:0b:c3:55:9e:52:37:ed:f2:87:78:29:2f:
                    2a:81:5e:78:65:16:08:b1:94:15:20:0a:4a:e2:21:
                    05:1d:af:bc:e8:54:27:81:eb:cc:b4:5f:c1:9c:bf:
                    47:08:a5:dd:b3:5c:fe:29:f5:fe:0a:da:88:39:01:
                    14:97:52:d9:e2:2d:ee:20:66:1f:dc:e7:fe:f5:58:
                    f0:c1:4e:ab:45:84:f5:cb:6f:15:3e:e3:25:e7:29:
                    47:b1:5b:f9:97:e3:68:68:8e:a7:e1:25:6c:77:92:
                    96:85:6d:8e:d2:8c:f5:dd:66:32:06:01:ef:75:13:
                    98:a3:7c:b9:35:97:3a:26:13:ed:71:fe:82:31:48:
                    cd:2f:8f:96:3b:7f:01:78:6e:49:d7:e8:96:5a:7f:
                    14:1a:f3:40:c1:9f:24:d9:b8:36:c5:91:37:bc:76:
                    ec:98:ca:58:c3:68:20:62:17:39:d4:8a:90:49:f1:
                    77:bb:82:d9:c8:6c:f5:d0:f8:24:32:4b:b6:9d:c1:
                    41:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F2:77:BC:BC:8C:ED:B3:43:80:A6:57:FD:38:E2:C6:E2:51:BE:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/282f9e34-ee84-3db6-bfa5-3c62d7a4968c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl

            X509v3 Authority Key Identifier:
                keyid:ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.252.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:72:3e:6b:99:32:1d:06:b3:06:21:ef:52:22:15:c0:45:8d:
         cd:e4:3b:5e:62:d2:86:cd:fb:e9:cd:50:62:ae:7f:f5:70:24:
         76:55:e7:f6:07:b1:c4:62:b3:43:f3:3f:3a:f5:9e:bb:f0:db:
         3d:13:fb:53:82:ad:63:f0:fa:f7:fa:38:f7:11:f8:91:f4:55:
         e0:f9:99:4e:56:d3:83:16:2e:33:f9:4e:dc:f7:8a:a6:d8:d1:
         fc:c0:d7:2d:c5:44:a0:75:3a:2c:70:b7:12:1f:81:56:1a:0f:
         ad:d9:85:06:f5:cf:40:8e:78:f4:2a:85:ca:30:62:a7:5a:42:
         66:20:f7:b4:46:cd:c3:d3:b6:2b:47:bf:9e:f5:e1:9b:16:52:
         9a:63:65:fb:5a:ec:15:2e:1c:b9:7f:f2:f1:29:de:f8:0c:39:
         9b:00:43:7f:f6:7f:33:62:66:ef:ff:b9:b1:f1:5b:43:24:d8:
         78:4e:22:67:12:7c:f0:19:4b:3a:fe:af:10:94:cf:7c:1e:2e:
         f1:df:a2:ee:f1:57:1d:b4:6d:7c:f7:9c:1d:67:4d:00:d9:4b:
         51:62:31:6e:9f:b0:c6:b9:19:31:1e:ff:e3:1b:79:2a:9a:3e:
         47:54:39:ba:b6:2b:f4:ba:87:c3:00:ce:ab:59:90:c2:2b:64:
         ac:6a:4b:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFSvKxEhTAWi8cpgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZiNjkwZGMtZDMyNS00MmIyLTk4MzQtMDZlNGE3Nzli
MjA5MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk
OWNmNmIwNjktMzk2ZC00YzEwLTg5MTgtYmRkZGJhMDQxMjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjR9GAhGiZorsPh6T0AvfQBPDiqrxKy2IiGpR
oayRjQLiH8dWB057P7RJbrUEQP/ISAxu+Wgmue5j5OMxBE0Lw1WeUjft8od4KS8q
gV54ZRYIsZQVIApK4iEFHa+86FQngevMtF/BnL9HCKXds1z+KfX+CtqIOQEUl1LZ
4i3uIGYf3Of+9VjwwU6rRYT1y28VPuMl5ylHsVv5l+NoaI6n4SVsd5KWhW2O0oz1
3WYyBgHvdROYo3y5NZc6JhPtcf6CMUjNL4+WO38BeG5J1+iWWn8UGvNAwZ8k2bg2
xZE3vHbsmMpYw2ggYhc51IqQSfF3u4LZyGz10PgkMku2ncFBEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEbyd7y8jO2zQ4CmV/044sbiUb7VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNmI2
OTBkYy1kMzI1LTQyYjItOTgzNC0wNmU0YTc3OWIyMDkvMjgyZjllMzQtZWU4NC0z
ZGI2LWJmYTUtM2M2MmQ3YTQ5NjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDZiNjkwZGMtZDMyNS00MmIyLTk4
MzQtMDZlNGE3NzliMjA5L2Q2YjY5MGRjLWQzMjUtNDJiMi05ODM0LTA2ZTRhNzc5
YjIwOS5jcmwwHwYDVR0jBBgwFoAU7UQThqHLnfMmsjfCW7+YxO/SX4wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNmI2OTBkYy1kMzI1LTQyYjItOTgzNC0wNmU0
YTc3OWIyMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvyIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF9yPmuZMh0GswYh71IiFcBFjc3kO15i0obN++nNUGKuf/VwJHZV5/YH
scRis0PzPzr1nrvw2z0T+1OCrWPw+vf6OPcR+JH0VeD5mU5W04MWLjP5Ttz3iqbY
0fzA1y3FRKB1OixwtxIfgVYaD63ZhQb1z0COePQqhcowYqdaQmYg97RGzcPTtitH
v5714ZsWUppjZfta7BUuHLl/8vEp3vgMOZsAQ3/2fzNiZu//ubHxW0Mk2HhOImcS
fPAZSzr+rxCUz3weLvHfou7xVx20bXz3nB1nTQDZS1FiMW6fsMa5GTEe/+MbeSqa
PkdUObq2K/S6h8MAzqtZkMIrZKxqSyY=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:23:25 2026 by rpki-client