Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/ef2d5f51-941a-3751-8c9f-25bbcd51a746.roa
File:                     ef2d5f51-941a-3751-8c9f-25bbcd51a746.roa (raw, json)
Hash identifier:          YPqn8zBj7Y+KHFRXcyy9NkrYsoqAtCdzD6d0OoQqyDY=
Subject key identifier:   C3:2F:08:36:B8:01:D6:44:0F:DC:45:E0:3B:0B:7C:48:E4:60:5B:22
Certificate issuer:       /CN=bb49c202-f644-4fa6-8a36-084312761f72
Certificate serial:       010D0C9F4328584F0F4112FF5053ED022FA254E0
Authority key identifier: CF:B3:27:7C:51:09:97:90:36:B3:FB:CF:B2:8C:86:C0:AB:F0:6B:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/ef2d5f51-941a-3751-8c9f-25bbcd51a746.roa
Signing time:             Fri 04 Sep 2026 04:43:41 +0000
ROA not before:           Fri 04 Sep 2026 04:43:41 +0000
ROA not after:            Thu 03 Dec 2026 05:43:41 +0000
asID:                     147281
IP address blocks:        172.98.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0f:41:12:ff:50:53:ed:02:2f:a2:54:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb49c202-f644-4fa6-8a36-084312761f72
        Validity
            Not Before: Sep  4 04:43:41 2026 GMT
            Not After : Dec  3 05:43:41 2026 GMT
        Subject: CN=519dff00-90da-47dc-b251-818842e37399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a5:12:8a:40:1d:87:55:61:fd:63:5c:df:4c:
                    74:c9:46:5d:b4:0a:cc:6e:23:f7:ca:82:c2:7f:90:
                    fb:32:9d:20:a2:08:d1:da:10:f9:e3:00:09:ba:9f:
                    8c:2c:ba:4b:d3:53:fe:20:50:af:62:00:8f:b4:4f:
                    b8:c2:ee:0a:12:9b:a0:26:f5:93:b6:31:4b:f9:ed:
                    a6:49:42:b3:63:ee:ec:9e:ad:e8:d8:65:0f:1d:51:
                    68:2c:25:0f:c8:a5:31:ae:33:e7:6e:05:b5:44:4d:
                    f0:6a:ea:13:47:92:53:ce:a0:d8:f6:ee:cd:a1:19:
                    bb:bb:42:bd:89:05:70:ef:b0:37:b7:50:28:af:e2:
                    47:7a:4c:b6:81:52:dd:40:42:2f:5a:ee:04:09:d6:
                    d6:e3:ed:c1:30:df:fd:c6:7a:88:fa:1d:fe:5b:ce:
                    46:ff:76:33:a6:ad:ee:a5:7b:ff:d6:a9:5d:69:b8:
                    e5:a4:ba:9c:a7:45:10:13:c7:20:e5:36:e3:6e:0b:
                    aa:f3:05:e6:77:b9:41:71:ff:ff:69:2a:ed:66:1e:
                    28:2c:f9:5d:33:19:4e:b7:22:49:99:b6:5b:c2:4c:
                    79:9d:91:e1:6b:10:25:60:88:b7:60:1c:08:07:7e:
                    20:fe:43:01:c0:96:4e:b8:4b:56:1a:f2:00:f4:5b:
                    a9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2F:08:36:B8:01:D6:44:0F:DC:45:E0:3B:0B:7C:48:E4:60:5B:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/ef2d5f51-941a-3751-8c9f-25bbcd51a746.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72/bb49c202-f644-4fa6-8a36-084312761f72.crl

            X509v3 Authority Key Identifier:
                keyid:CF:B3:27:7C:51:09:97:90:36:B3:FB:CF:B2:8C:86:C0:AB:F0:6B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bb49c202-f644-4fa6-8a36-084312761f72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ab:15:c1:d0:9e:bd:a4:a5:72:cd:5f:17:a3:5b:17:c3:a1:
         38:00:06:de:6c:6d:1f:a8:47:09:9d:90:1b:44:35:8f:fd:d4:
         33:67:6f:29:98:a2:3a:9f:c4:5f:fd:57:82:72:22:2d:a1:73:
         38:f1:0e:cc:23:f5:23:49:7c:34:5d:5c:40:d5:b7:0e:20:2f:
         d6:e8:d9:f8:7f:46:bd:88:89:f6:8c:f9:e9:38:67:90:db:c4:
         14:d7:8a:5c:9b:d5:45:b3:5f:92:db:1c:99:4d:dc:d2:75:5b:
         d0:99:39:a7:43:6b:f3:d4:40:0e:25:5a:e1:39:f8:f2:a4:73:
         95:0b:05:bb:ff:f2:ad:4f:66:62:f7:b3:74:02:e5:5e:40:d5:
         01:d9:af:53:07:4b:07:63:85:72:38:96:f9:9e:ff:e4:0b:c9:
         f2:ba:ab:ed:29:eb:2a:3b:5a:8f:7e:b1:98:90:30:5d:3a:21:
         1e:2e:1a:b6:77:94:a1:91:22:0f:df:cd:d5:1b:32:a9:ac:51:
         2a:86:2c:5a:a8:62:22:8d:34:83:78:05:5b:1d:d9:3c:95:f3:
         55:e4:4f:56:de:d7:9e:cd:7a:98:eb:26:e2:43:64:52:e2:c4:
         fe:c1:e7:fe:5f:52:77:96:99:b5:04:b2:a7:b4:7e:fa:bc:a3:
         05:50:0f:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8PQRL/UFPtAi+iVOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmI0OWMyMDItZjY0NC00ZmE2LThhMzYtMDg0MzEyNzYx
ZjcyMB4XDTI2MDkwNDA0NDM0MVoXDTI2MTIwMzA1NDM0MVowLzEtMCsGA1UEAxMk
NTE5ZGZmMDAtOTBkYS00N2RjLWIyNTEtODE4ODQyZTM3Mzk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqUSikAdh1Vh/WNc30x0yUZdtArMbiP3yoLC
f5D7Mp0gogjR2hD54wAJup+MLLpL01P+IFCvYgCPtE+4wu4KEpugJvWTtjFL+e2m
SUKzY+7snq3o2GUPHVFoLCUPyKUxrjPnbgW1RE3wauoTR5JTzqDY9u7NoRm7u0K9
iQVw77A3t1Aor+JHeky2gVLdQEIvWu4ECdbW4+3BMN/9xnqI+h3+W85G/3Yzpq3u
pXv/1qldabjlpLqcp0UQE8cg5Tbjbguq8wXmd7lBcf//aSrtZh4oLPldMxlOtyJJ
mbZbwkx5nZHhaxAlYIi3YBwIB34g/kMBwJZOuEtWGvIA9FupEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMMvCDa4AdZED9xF4DsLfEjkYFsiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iYjQ5
YzIwMi1mNjQ0LTRmYTYtOGEzNi0wODQzMTI3NjFmNzIvZWYyZDVmNTEtOTQxYS0z
NzUxLThjOWYtMjViYmNkNTFhNzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmI0OWMyMDItZjY0NC00ZmE2LThh
MzYtMDg0MzEyNzYxZjcyL2JiNDljMjAyLWY2NDQtNGZhNi04YTM2LTA4NDMxMjc2
MWY3Mi5jcmwwHwYDVR0jBBgwFoAUz7MnfFEJl5A2s/vPsoyGwKvwa6gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iYjQ5YzIwMi1mNjQ0LTRmYTYtOGEzNi0wODQz
MTI3NjFmNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGLTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAGrFcHQnr2kpXLNXxejWxfDoTgABt5sbR+oRwmdkBtENY/91DNnbymY
ojqfxF/9V4JyIi2hczjxDswj9SNJfDRdXEDVtw4gL9bo2fh/Rr2IifaM+ek4Z5Db
xBTXilyb1UWzX5LbHJlN3NJ1W9CZOadDa/PUQA4lWuE5+PKkc5ULBbv/8q1PZmL3
s3QC5V5A1QHZr1MHSwdjhXI4lvme/+QLyfK6q+0p6yo7Wo9+sZiQMF06IR4uGrZ3
lKGRIg/fzdUbMqmsUSqGLFqoYiKNNIN4BVsd2TyV81XkT1be157NepjrJuJDZFLi
xP7B5/5fUneWmbUEsqe0fvq8owVQDxU=
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:33:53 2026 by rpki-client