Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2ccc5d96-1a1a-49b5-bb5d-465d596c10e2/e24e2b8b-e013-355c-ae6c-ca7b6773d68f.roa
File:                     e24e2b8b-e013-355c-ae6c-ca7b6773d68f.roa (raw, json)
Hash identifier:          r/SJe1NjxXIdnb1BaqAl+Wwz/U0X7/U6tgjxL5b5TnA=
Subject key identifier:   DA:E8:64:7F:1F:CA:F4:91:16:35:7D:A2:2E:FF:6F:4B:22:DF:88:21
Certificate issuer:       /CN=2ccc5d96-1a1a-49b5-bb5d-465d596c10e2
Certificate serial:       010D0C9F4328584D63AF9DAC1B3C3B1347C30580
Authority key identifier: 68:DC:A1:FF:5D:87:F6:0C:7B:D6:10:B5:BD:F8:3D:B9:87:00:80:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2ccc5d96-1a1a-49b5-bb5d-465d596c10e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2ccc5d96-1a1a-49b5-bb5d-465d596c10e2/e24e2b8b-e013-355c-ae6c-ca7b6773d68f.roa
Signing time:             Sat 04 Apr 2026 01:00:25 +0000
ROA not before:           Sat 04 Apr 2026 01:00:25 +0000
ROA not after:            Fri 03 Jul 2026 01:00:25 +0000
asID:                     32958
IP address blocks:        198.183.178.0/23 maxlen: 23
                          198.183.178.0/24 maxlen: 24
                          198.183.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2ccc5d96-1a1a-49b5-bb5d-465d596c10e2/2ccc5d96-1a1a-49b5-bb5d-465d596c10e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2ccc5d96-1a1a-49b5-bb5d-465d596c10e2/2ccc5d96-1a1a-49b5-bb5d-465d596c10e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2ccc5d96-1a1a-49b5-bb5d-465d596c10e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:63:af:9d:ac:1b:3c:3b:13:47:c3:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ccc5d96-1a1a-49b5-bb5d-465d596c10e2
        Validity
            Not Before: Apr  4 01:00:25 2026 GMT
            Not After : Jul  3 01:00:25 2026 GMT
        Subject: CN=ef4b6def-7fca-4f20-96c4-6371da0aead5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:28:32:07:84:6d:f0:05:30:81:d8:9b:94:bb:
                    92:90:c0:f6:8a:e6:7e:e0:82:06:69:1f:e6:48:c4:
                    ed:d1:94:47:e7:19:fa:0f:95:51:ad:d8:8e:a4:ea:
                    54:9c:98:b1:52:1f:58:74:a8:0e:d0:5d:5f:81:07:
                    4a:31:e0:55:a2:52:36:72:c8:e6:d5:31:6a:d6:77:
                    d5:ff:a2:e0:43:0b:14:11:f0:4b:4c:9e:fd:82:b7:
                    f4:2c:db:cc:49:ee:29:6f:05:5a:43:01:73:93:e8:
                    37:07:3b:42:1e:ba:c3:d5:b5:93:f2:ee:e2:ba:b0:
                    31:82:e7:8c:95:f4:50:8b:6e:d0:54:d1:c0:cc:2d:
                    1c:64:09:3b:5b:59:65:89:ea:a5:81:ce:ca:ad:d5:
                    d8:25:a2:1c:d1:f2:bb:dd:32:46:fd:c8:48:0e:dc:
                    e5:90:e2:91:2b:11:5b:95:3f:54:b1:f2:72:6d:61:
                    5a:6a:af:6b:07:86:fb:2e:0d:ed:7d:18:55:97:1c:
                    0c:25:9b:a6:37:98:84:a2:8e:05:f4:f9:c2:17:9b:
                    80:92:1a:d0:53:43:51:d3:43:bc:b6:82:9e:47:35:
                    80:24:73:83:24:2f:24:72:af:35:9f:ec:f5:a1:b4:
                    82:ed:38:3d:d9:62:9a:88:99:63:72:40:8a:44:c1:
                    6b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E8:64:7F:1F:CA:F4:91:16:35:7D:A2:2E:FF:6F:4B:22:DF:88:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2ccc5d96-1a1a-49b5-bb5d-465d596c10e2/e24e2b8b-e013-355c-ae6c-ca7b6773d68f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2ccc5d96-1a1a-49b5-bb5d-465d596c10e2/2ccc5d96-1a1a-49b5-bb5d-465d596c10e2.crl

            X509v3 Authority Key Identifier:
                keyid:68:DC:A1:FF:5D:87:F6:0C:7B:D6:10:B5:BD:F8:3D:B9:87:00:80:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2ccc5d96-1a1a-49b5-bb5d-465d596c10e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.183.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:fb:09:e0:63:b5:e4:aa:7f:f0:b8:23:fe:c5:0d:3f:6c:53:
         f1:dd:26:2b:52:bb:9d:1e:6f:93:bd:86:51:5c:71:b4:ad:ba:
         f0:f9:29:4a:a1:90:8c:f5:53:1a:f1:d4:b2:36:6e:40:d6:68:
         55:fd:24:f2:ae:ce:4d:83:3f:6c:6e:8d:ef:80:86:ed:12:27:
         5f:15:c4:69:c7:b0:b9:fe:ed:bb:a7:8d:22:39:8e:dc:c6:67:
         e9:3f:68:80:da:6b:65:0c:a8:fe:1c:cd:5b:df:ec:ae:26:da:
         af:71:48:e9:a6:50:59:9c:ca:cc:79:5a:0d:6f:80:54:55:51:
         ff:d7:4b:27:32:cd:d5:73:69:a7:65:de:b3:a7:16:ed:b1:56:
         5c:84:7b:78:37:b6:e0:b1:3b:70:cc:c7:4e:6e:bc:27:66:14:
         0a:d7:91:6f:4c:b2:31:2d:be:d6:f5:b0:2c:3d:8d:41:66:b4:
         49:2a:e5:fa:16:83:61:20:95:29:d0:bf:f2:bd:b0:fe:de:0a:
         3c:bf:4f:27:83:88:44:d5:3d:c5:f6:09:ee:3d:80:8d:32:cb:
         42:1e:73:b7:8c:59:8d:c1:31:1d:0c:26:39:9a:75:9e:0e:87:
         b0:67:a5:4b:da:79:23:8d:99:c2:d2:01:ae:c2:97:b8:a1:45:
         ff:39:c8:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1jr52sGzw7E0fDBYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmNjYzVkOTYtMWExYS00OWI1LWJiNWQtNDY1ZDU5NmMx
MGUyMB4XDTI2MDQwNDAxMDAyNVoXDTI2MDcwMzAxMDAyNVowLzEtMCsGA1UEAxMk
ZWY0YjZkZWYtN2ZjYS00ZjIwLTk2YzQtNjM3MWRhMGFlYWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSgyB4Rt8AUwgdiblLuSkMD2iuZ+4IIGaR/m
SMTt0ZRH5xn6D5VRrdiOpOpUnJixUh9YdKgO0F1fgQdKMeBVolI2csjm1TFq1nfV
/6LgQwsUEfBLTJ79grf0LNvMSe4pbwVaQwFzk+g3BztCHrrD1bWT8u7iurAxgueM
lfRQi27QVNHAzC0cZAk7W1llieqlgc7KrdXYJaIc0fK73TJG/chIDtzlkOKRKxFb
lT9UsfJybWFaaq9rB4b7Lg3tfRhVlxwMJZumN5iEoo4F9PnCF5uAkhrQU0NR00O8
toKeRzWAJHODJC8kcq81n+z1obSC7Tg92WKaiJljckCKRMFrgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNroZH8fyvSRFjV9oi7/b0si34ghMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yY2Nj
NWQ5Ni0xYTFhLTQ5YjUtYmI1ZC00NjVkNTk2YzEwZTIvZTI0ZTJiOGItZTAxMy0z
NTVjLWFlNmMtY2E3YjY3NzNkNjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmNjYzVkOTYtMWExYS00OWI1LWJi
NWQtNDY1ZDU5NmMxMGUyLzJjY2M1ZDk2LTFhMWEtNDliNS1iYjVkLTQ2NWQ1OTZj
MTBlMi5jcmwwHwYDVR0jBBgwFoAUaNyh/12H9gx71hC1vfg9uYcAgJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8yY2NjNWQ5Ni0xYTFhLTQ5YjUtYmI1ZC00NjVk
NTk2YzEwZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxreyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEz7CeBjteSqf/C4I/7FDT9sU/HdJitSu50eb5O9hlFccbStuvD5KUqh
kIz1Uxrx1LI2bkDWaFX9JPKuzk2DP2xuje+Ahu0SJ18VxGnHsLn+7bunjSI5jtzG
Z+k/aIDaa2UMqP4czVvf7K4m2q9xSOmmUFmcysx5Wg1vgFRVUf/XSycyzdVzaadl
3rOnFu2xVlyEe3g3tuCxO3DMx05uvCdmFArXkW9MsjEtvtb1sCw9jUFmtEkq5foW
g2EglSnQv/K9sP7eCjy/TyeDiETVPcX2Ce49gI0yy0Iec7eMWY3BMR0MJjmadZ4O
h7BnpUvaeSONmcLSAa7Cl7ihRf85yCU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:19:02 2026 by rpki-client