Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/18060447-9200-3267-9614-9783e6247f3b.roa
File:                     18060447-9200-3267-9614-9783e6247f3b.roa (raw, json)
Hash identifier:          NuZUuZD5LU9XheW4K1nra1PK6vUndgO9hzeLQ2x0gCc=
Subject key identifier:   AC:CB:D1:0F:6B:EA:77:2E:D9:99:FA:39:5E:0B:FD:5F:CC:F1:31:DD
Certificate issuer:       /CN=e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596
Certificate serial:       010D0C9F4328584CFC82402F970323D091217C40
Authority key identifier: ED:4B:46:DC:16:7F:90:97:72:93:5F:B5:77:41:50:FD:92:5C:C3:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/18060447-9200-3267-9614-9783e6247f3b.roa
Signing time:             Thu 26 Feb 2026 02:00:32 +0000
ROA not before:           Thu 26 Feb 2026 02:00:32 +0000
ROA not after:            Wed 27 May 2026 01:00:32 +0000
asID:                     202021
IP address blocks:        198.133.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fc:82:40:2f:97:03:23:d0:91:21:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596
        Validity
            Not Before: Feb 26 02:00:32 2026 GMT
            Not After : May 27 01:00:32 2026 GMT
        Subject: CN=7af93e6e-57eb-4608-9841-60d0641bd61e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:01:53:65:94:51:d2:7b:6e:fd:98:e2:0a:d3:
                    34:57:d7:86:d0:1f:19:ff:57:24:ce:07:d8:f9:70:
                    42:e7:e2:09:47:b8:3f:1e:f0:a0:05:27:a0:60:17:
                    e9:69:2c:24:28:1c:f9:af:1d:88:3a:aa:e6:95:a1:
                    1e:06:16:26:a8:b1:7a:b6:b4:f5:60:45:72:fc:ca:
                    bd:ee:88:4d:41:e8:14:40:bb:19:e4:ab:74:94:ff:
                    ee:02:11:99:5d:ee:b6:4f:b2:6e:1e:57:bf:85:75:
                    fa:56:00:70:0d:40:a8:20:55:a6:2a:6c:bf:02:40:
                    cb:1e:8a:ba:25:2f:00:4a:a6:fa:db:34:51:e6:36:
                    6d:9b:4d:49:de:43:cd:54:94:fb:11:26:3a:c2:5d:
                    d2:78:df:62:65:8c:11:39:c7:49:90:9c:02:e1:cb:
                    f4:29:33:a4:2d:3e:99:6c:4b:8b:b3:dd:63:6b:56:
                    9c:ff:b3:2d:12:ff:82:35:6d:a8:21:4d:cd:48:1e:
                    42:29:81:0a:dd:87:3a:2a:10:99:c8:90:47:27:3a:
                    a3:d3:8a:57:6a:f0:b3:2c:d3:69:51:27:c4:ac:43:
                    8a:5c:1b:55:d2:29:72:03:7c:26:3b:3f:24:4e:ec:
                    0d:24:e4:84:e7:3e:97:a6:3c:45:35:6f:38:52:de:
                    63:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CB:D1:0F:6B:EA:77:2E:D9:99:FA:39:5E:0B:FD:5F:CC:F1:31:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/18060447-9200-3267-9614-9783e6247f3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.crl

            X509v3 Authority Key Identifier:
                keyid:ED:4B:46:DC:16:7F:90:97:72:93:5F:B5:77:41:50:FD:92:5C:C3:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e6ada8f5-6be3-4a9f-9a2c-1e1aa0e37596.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:c4:e4:f0:ac:46:fa:73:db:0a:e6:71:ed:4a:e5:14:14:dd:
         8f:78:d8:1d:8c:19:79:f6:06:da:94:7a:da:b9:00:38:ee:aa:
         aa:b7:32:a3:a8:88:89:32:fd:c8:ba:a3:e9:c4:2a:29:d5:fe:
         7b:8e:0c:51:e6:67:06:fb:0c:f1:8f:b9:7a:74:20:b7:22:6f:
         be:9d:a9:5b:84:75:e5:72:13:59:ec:4f:0f:50:49:2b:5f:ec:
         f3:d3:75:86:d7:32:b4:7d:da:51:dc:98:5c:e0:3b:1a:07:63:
         13:97:e3:3f:56:f6:62:a6:ce:d1:6b:fd:00:5d:81:95:7d:d4:
         3f:d6:a0:4f:17:e8:eb:c1:09:89:e1:2a:4c:db:a6:1a:e6:94:
         0d:05:62:87:10:4c:8b:15:2a:7c:df:44:0c:3a:7b:7b:01:3a:
         86:24:68:5c:2a:8a:24:bd:29:16:2c:5e:dd:64:4c:2a:4d:6c:
         26:f5:ea:6b:79:b4:57:45:f7:02:b3:70:d7:cf:7e:68:8f:3c:
         04:b8:15:f6:95:a7:09:b4:69:66:5e:0d:81:db:0b:4d:1c:de:
         85:4b:7e:54:65:24:7e:39:4d:c3:55:8b:08:b1:d7:59:81:73:
         71:cc:23:90:62:9a:ec:8d:fa:96:38:a0:13:0a:03:01:36:30:
         0d:09:74:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz8gkAvlwMj0JEhfEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTZhZGE4ZjUtNmJlMy00YTlmLTlhMmMtMWUxYWEwZTM3
NTk2MB4XDTI2MDIyNjAyMDAzMloXDTI2MDUyNzAxMDAzMlowLzEtMCsGA1UEAxMk
N2FmOTNlNmUtNTdlYi00NjA4LTk4NDEtNjBkMDY0MWJkNjFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AFTZZRR0ntu/ZjiCtM0V9eG0B8Z/1ckzgfY
+XBC5+IJR7g/HvCgBSegYBfpaSwkKBz5rx2IOqrmlaEeBhYmqLF6trT1YEVy/Mq9
7ohNQegUQLsZ5Kt0lP/uAhGZXe62T7JuHle/hXX6VgBwDUCoIFWmKmy/AkDLHoq6
JS8ASqb62zRR5jZtm01J3kPNVJT7ESY6wl3SeN9iZYwROcdJkJwC4cv0KTOkLT6Z
bEuLs91ja1ac/7MtEv+CNW2oIU3NSB5CKYEK3Yc6KhCZyJBHJzqj04pXavCzLNNp
USfErEOKXBtV0ilyA3wmOz8kTuwNJOSE5z6XpjxFNW84Ut5jSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKzL0Q9r6ncu2Zn6OV4L/V/M8THdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNmFk
YThmNS02YmUzLTRhOWYtOWEyYy0xZTFhYTBlMzc1OTYvMTgwNjA0NDctOTIwMC0z
MjY3LTk2MTQtOTc4M2U2MjQ3ZjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTZhZGE4ZjUtNmJlMy00YTlmLTlh
MmMtMWUxYWEwZTM3NTk2L2U2YWRhOGY1LTZiZTMtNGE5Zi05YTJjLTFlMWFhMGUz
NzU5Ni5jcmwwHwYDVR0jBBgwFoAU7UtG3BZ/kJdyk1+1d0FQ/ZJcw20wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNmFkYThmNS02YmUzLTRhOWYtOWEyYy0xZTFh
YTBlMzc1OTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoXSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEvE5PCsRvpz2wrmce1K5RQU3Y942B2MGXn2BtqUetq5ADjuqqq3MqOo
iIky/ci6o+nEKinV/nuODFHmZwb7DPGPuXp0ILcib76dqVuEdeVyE1nsTw9QSStf
7PPTdYbXMrR92lHcmFzgOxoHYxOX4z9W9mKmztFr/QBdgZV91D/WoE8X6OvBCYnh
KkzbphrmlA0FYocQTIsVKnzfRAw6e3sBOoYkaFwqiiS9KRYsXt1kTCpNbCb16mt5
tFdF9wKzcNfPfmiPPAS4FfaVpwm0aWZeDYHbC00c3oVLflRlJH45TcNViwix11mB
c3HMI5BimuyN+pY4oBMKAwE2MA0JdO0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:25:31 2026 by rpki-client