Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa
File:                     300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa (raw, json)
Hash identifier:          1/SkIk4aJienxsoXUwNY+SlIMH7AOQTtyRHxQV8xLkM=
Subject key identifier:   68:81:CB:E4:D3:0F:16:AC:E8:7E:6A:1C:66:44:C7:B3:0D:1C:78:5D
Certificate issuer:       /CN=cd8deff7-6be9-4d16-8349-9f6439775b0a
Certificate serial:       010D0C9F4328584E18AEEF9D285F67048E74D800
Authority key identifier: CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     2728
IP address blocks:        162.255.88.0/21 maxlen: 24
                          199.185.174.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:ef:9d:28:5f:67:04:8e:74:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd8deff7-6be9-4d16-8349-9f6439775b0a
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=db53b2a0-5192-475d-92d8-f66f295536f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:18:01:50:59:75:f2:38:da:45:4b:f2:c8:f2:
                    11:97:20:65:69:99:a2:a2:9e:2e:4f:10:53:b5:39:
                    44:87:06:ef:4a:05:2b:6d:3a:39:5b:b7:cd:01:55:
                    68:30:ca:89:98:10:89:41:5f:39:f2:05:c6:b1:98:
                    78:3e:a7:0a:54:e1:98:7a:61:b3:ed:ec:4d:bb:27:
                    8b:bc:c1:0f:13:bc:eb:9c:29:20:8d:31:07:e5:7d:
                    b1:c1:55:44:77:12:ea:04:e4:fb:60:15:b7:d0:8c:
                    da:13:24:65:c1:dd:e2:ed:ff:e8:a4:4a:a3:ed:f4:
                    47:4c:ba:5c:67:2b:94:b3:63:af:66:d4:98:8e:89:
                    02:f5:00:18:57:bb:62:bd:11:f3:88:0c:35:0d:ad:
                    df:81:45:e6:cd:3b:00:06:e1:25:cd:1b:a3:24:aa:
                    bd:42:2b:67:fd:1e:6e:e8:c2:18:e0:36:45:6f:81:
                    e7:11:88:38:b5:01:ed:21:98:0e:88:4f:91:e2:f3:
                    69:d0:0d:29:cd:02:12:de:f2:8a:32:45:7b:81:7a:
                    a8:40:5a:16:e6:9b:7b:da:76:0a:39:2b:6c:f4:60:
                    b4:c1:e6:25:1f:cb:df:bd:ed:fb:e5:9e:81:b7:84:
                    9a:10:1a:2e:bf:91:ee:55:9a:5f:35:22:75:e3:a0:
                    6e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:81:CB:E4:D3:0F:16:AC:E8:7E:6A:1C:66:44:C7:B3:0D:1C:78:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl

            X509v3 Authority Key Identifier:
                keyid:CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.88.0/21
                  199.185.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:15:69:8f:46:97:1f:b1:e8:eb:26:fa:6e:99:c8:4d:5b:2f:
         3b:a6:db:c0:79:d0:12:9a:41:cb:82:d7:36:68:85:a7:ac:a8:
         ae:78:93:5e:c5:b0:a2:f9:4b:c5:8b:10:2b:59:be:84:f2:86:
         1e:74:8f:af:e7:22:59:e7:42:5c:6d:7b:00:46:2d:c5:8e:54:
         07:d6:b2:50:fc:12:89:e6:99:30:ec:97:b4:f9:62:f7:f5:eb:
         a3:28:d3:d5:b4:fd:dc:75:17:48:d3:bf:38:e4:1b:0c:bb:b4:
         66:64:6b:ed:24:35:a8:85:d0:e4:79:2e:d4:b3:44:d0:1c:d4:
         73:50:25:04:e5:e7:8b:64:c9:4f:0f:f5:3e:72:ae:0a:53:65:
         a8:84:9a:21:09:7f:2e:4b:af:2b:4b:70:aa:4e:41:52:d1:3c:
         d3:3a:5d:d0:74:62:5a:16:a3:02:0e:98:e6:b6:86:7a:41:7a:
         d0:79:c7:70:17:6c:e4:2a:49:cf:a2:bd:6d:d2:50:3c:f4:74:
         5c:09:7d:69:86:2b:a3:8b:91:78:19:a6:6c:2e:58:c1:5a:2f:
         9f:41:44:91:49:67:24:17:82:33:c7:83:2f:87:6e:cb:9b:90:
         d4:3b:28:6e:d3:0f:d1:cd:f0:bf:7d:04:e9:00:69:38:16:96:
         bd:83:da:8d
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE4Yru+dKF9nBI502AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2Q4ZGVmZjctNmJlOS00ZDE2LTgzNDktOWY2NDM5Nzc1
YjBhMB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk
ZGI1M2IyYTAtNTE5Mi00NzVkLTkyZDgtZjY2ZjI5NTUzNmY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xgBUFl18jjaRUvyyPIRlyBlaZmiop4uTxBT
tTlEhwbvSgUrbTo5W7fNAVVoMMqJmBCJQV858gXGsZh4PqcKVOGYemGz7exNuyeL
vMEPE7zrnCkgjTEH5X2xwVVEdxLqBOT7YBW30IzaEyRlwd3i7f/opEqj7fRHTLpc
ZyuUs2OvZtSYjokC9QAYV7tivRHziAw1Da3fgUXmzTsABuElzRujJKq9Qitn/R5u
6MIY4DZFb4HnEYg4tQHtIZgOiE+R4vNp0A0pzQIS3vKKMkV7gXqoQFoW5pt72nYK
OSts9GC0weYlH8vfve375Z6Bt4SaEBouv5HuVZpfNSJ146BuWwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFGiBy+TTDxas6H5qHGZEx7MNHHhdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZDhk
ZWZmNy02YmU5LTRkMTYtODM0OS05ZjY0Mzk3NzViMGEvMzAwYTVhNGQtNWQwZC0z
ZTIyLWE5YTEtZTI1OTFhOGUzNjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2Q4ZGVmZjctNmJlOS00ZDE2LTgz
NDktOWY2NDM5Nzc1YjBhL2NkOGRlZmY3LTZiZTktNGQxNi04MzQ5LTlmNjQzOTc3
NWIwYS5jcmwwHwYDVR0jBBgwFoAUzhQlAW3FZ7kkMlbx3Mqao7fddM0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9jZDhkZWZmNy02YmU5LTRkMTYtODM0OS05ZjY0
Mzk3NzViMGEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDov9YAwQB
x7muMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAIoVaY9Glx+x6Osm+m6ZyE1bLzum28B50BKaQcuC1zZohaes
qK54k17FsKL5S8WLECtZvoTyhh50j6/nIlnnQlxtewBGLcWOVAfWslD8EonmmTDs
l7T5Yvf166Mo09W0/dx1F0jTvzjkGwy7tGZka+0kNaiF0OR5LtSzRNAc1HNQJQTl
54tkyU8P9T5yrgpTZaiEmiEJfy5LrytLcKpOQVLRPNM6XdB0YloWowIOmOa2hnpB
etB5x3AXbOQqSc+ivW3SUDz0dFwJfWmGK6OLkXgZpmwuWMFaL59BRJFJZyQXgjPH
gy+HbsubkNQ7KG7TD9HN8L99BOkAaTgWlr2D2o0=
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:05 2026 by rpki-client