Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/cfb6983e-4848-36b6-a5e3-eb6247e2218a.roa
File:                     cfb6983e-4848-36b6-a5e3-eb6247e2218a.roa (raw, json)
Hash identifier:          WQqSY26mgmEBcoQkrD6Y4ldF7+oZPfXSweQVmyTOAnU=
Subject key identifier:   A3:DB:23:18:E5:5D:BA:7B:EC:5E:B3:0D:92:57:EA:37:31:DA:75:98
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584F0D6CFD4253329B21C1662700
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/cfb6983e-4848-36b6-a5e3-eb6247e2218a.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     6922
IP address blocks:        198.216.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:fd:42:53:32:9b:21:c1:66:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=d1f8a765-7191-4360-a3fc-06cb1a83529e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4e:ff:d4:ca:4a:aa:1e:5a:f1:d6:09:40:04:
                    bc:40:6d:bf:c1:b5:44:b5:a8:31:a5:3d:1a:99:14:
                    de:0f:b0:a5:b3:ad:47:6e:49:ea:60:55:28:4a:b5:
                    34:bf:4e:be:a6:11:3a:61:aa:64:cd:f6:c8:59:57:
                    e5:e3:ca:67:83:f1:1f:d1:27:31:c9:9f:aa:de:df:
                    8a:4a:d7:4e:27:61:c8:2d:1d:54:31:aa:a8:5e:f9:
                    1c:4b:95:9a:33:17:e5:26:81:7c:01:4a:89:b3:48:
                    05:4f:82:ff:16:a7:03:e8:26:3d:2d:ab:86:ba:19:
                    45:25:e6:f5:ae:e5:78:3d:0c:28:75:6d:13:72:33:
                    79:53:cb:be:2a:5d:43:7a:f6:15:6c:73:72:29:96:
                    01:b9:21:34:1c:26:5b:47:65:13:ab:d7:78:40:9a:
                    f4:9f:fc:f4:46:0f:bb:7f:ca:04:ca:0b:dc:ce:9e:
                    71:43:ec:52:1f:00:65:12:74:fb:5e:25:46:9b:e5:
                    15:40:12:8d:64:e9:a2:7b:df:ec:99:07:ca:4f:cc:
                    45:de:21:be:f0:c4:27:35:35:0b:be:18:f2:55:b6:
                    46:55:40:27:fe:61:ba:39:1a:2a:b0:02:9e:64:c8:
                    98:03:aa:68:db:34:55:68:c0:b3:57:bc:0a:36:4d:
                    da:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DB:23:18:E5:5D:BA:7B:EC:5E:B3:0D:92:57:EA:37:31:DA:75:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/cfb6983e-4848-36b6-a5e3-eb6247e2218a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.216.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:2e:36:a2:10:2b:d3:38:c9:24:77:7f:84:a6:23:75:86:1f:
         52:35:37:96:48:f4:e8:fe:56:56:aa:9f:02:bb:84:27:19:e5:
         cc:fb:fd:11:11:f2:e9:d2:7e:f8:c2:99:be:98:0d:a4:d9:66:
         95:57:bf:9e:42:8a:d1:be:68:e7:38:4c:27:d7:ac:90:93:d0:
         af:fb:3a:6c:a9:39:31:c4:d4:d4:c7:73:b9:75:93:6c:9a:47:
         d4:e8:42:6f:37:cf:6f:71:b6:de:a1:00:59:f1:c1:8f:4d:bf:
         c5:b5:c8:79:68:a4:12:dc:ed:e7:ff:36:5e:5e:6f:47:46:19:
         c5:5b:05:7a:6e:f9:e1:26:19:c6:73:34:69:8d:17:03:25:bb:
         ef:e3:6c:17:ed:7f:ba:23:ed:89:5e:0c:64:37:34:f8:4e:2b:
         cf:ae:bf:30:41:ff:62:85:db:86:a1:21:03:4d:ba:62:e7:01:
         c6:77:09:a0:21:59:bd:bb:54:22:41:bd:c0:29:7d:e4:ae:59:
         4c:4b:3b:13:b7:f3:4e:48:4a:27:e3:25:28:0b:a1:85:6e:e4:
         fb:c5:18:0d:21:55:c5:b3:e3:31:96:4c:b9:88:7b:5f:84:38:
         a7:32:87:6a:55:39:cc:9e:bf:42:b7:08:c7:8a:9f:b9:3c:e6:
         1b:fe:64:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbP1CUzKbIcFmJwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU4MWEyNTYtNDFmZi00ZjUxLTgwOTItYzdmZmZhNGQ5
MjIxMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk
ZDFmOGE3NjUtNzE5MS00MzYwLWEzZmMtMDZjYjFhODM1MjllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU7/1MpKqh5a8dYJQAS8QG2/wbVEtagxpT0a
mRTeD7Cls61HbknqYFUoSrU0v06+phE6YapkzfbIWVfl48png/Ef0ScxyZ+q3t+K
StdOJ2HILR1UMaqoXvkcS5WaMxflJoF8AUqJs0gFT4L/FqcD6CY9LauGuhlFJeb1
ruV4PQwodW0TcjN5U8u+Kl1DevYVbHNyKZYBuSE0HCZbR2UTq9d4QJr0n/z0Rg+7
f8oEygvczp5xQ+xSHwBlEnT7XiVGm+UVQBKNZOmie9/smQfKT8xF3iG+8MQnNTUL
vhjyVbZGVUAn/mG6ORoqsAKeZMiYA6po2zRVaMCzV7wKNk3aCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKPbIxjlXbp77F6zDZJX6jcx2nWYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgx
YTI1Ni00MWZmLTRmNTEtODA5Mi1jN2ZmZmE0ZDkyMjEvY2ZiNjk4M2UtNDg0OC0z
NmI2LWE1ZTMtZWI2MjQ3ZTIyMThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU4MWEyNTYtNDFmZi00ZjUxLTgw
OTItYzdmZmZhNGQ5MjIxLzRlODFhMjU2LTQxZmYtNGY1MS04MDkyLWM3ZmZmYTRk
OTIyMS5jcmwwHwYDVR0jBBgwFoAUwitnYdEerOUTJk8QRtL6zHxFiyowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgxYTI1Ni00MWZmLTRmNTEtODA5Mi1jN2Zm
ZmE0ZDkyMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExthAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACsuNqIQK9M4ySR3f4SmI3WGH1I1N5ZI9Oj+VlaqnwK7hCcZ5cz7/RER
8unSfvjCmb6YDaTZZpVXv55CitG+aOc4TCfXrJCT0K/7OmypOTHE1NTHc7l1k2ya
R9ToQm83z29xtt6hAFnxwY9Nv8W1yHlopBLc7ef/Nl5eb0dGGcVbBXpu+eEmGcZz
NGmNFwMlu+/jbBftf7oj7YleDGQ3NPhOK8+uvzBB/2KF24ahIQNNumLnAcZ3CaAh
Wb27VCJBvcApfeSuWUxLOxO3805ISifjJSgLoYVu5PvFGA0hVcWz4zGWTLmIe1+E
OKcyh2pVOcyev0K3CMeKn7k85hv+ZIs=
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:30:55 2026 by rpki-client