Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa
File:                     cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa (raw, json)
Hash identifier:          dCdugpF8th8RwAx1t65FdSEYIkMQf2Zn4787m4L5VMw=
Subject key identifier:   1F:8B:31:6D:B4:B9:7A:2B:C8:3E:8E:7E:58:E5:03:15:AF:04:7B:E0
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E0D8435CD836FC9669EF2CCC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     397204
IP address blocks:        216.168.228.53/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:35:cd:83:6f:c9:66:9e:f2:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=50422386-9623-479b-a353-6f8b39632806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:71:c9:e9:82:fe:d3:e2:1e:b7:26:64:c8:b9:
                    6f:c7:49:e0:84:f8:b4:23:5f:9b:45:3c:c0:54:db:
                    a4:b9:8e:8b:54:6f:ae:6b:da:56:ff:c8:20:a2:72:
                    5f:ae:cc:c9:ac:f0:6b:d1:77:9b:ba:fa:0a:4d:e6:
                    32:f7:88:9c:f0:c0:d9:bc:05:ec:2c:c2:94:e0:e4:
                    31:47:7d:b1:ea:e9:a0:1d:18:6f:76:0a:a3:ae:7b:
                    d2:dc:00:55:30:3a:b7:44:7c:bb:7e:11:a2:21:fb:
                    0b:90:ce:cf:04:32:d9:2d:c0:97:d9:1b:1a:c7:42:
                    91:79:6d:a7:f6:c0:97:c3:06:69:bf:a3:32:b8:46:
                    06:f4:5c:f4:27:e9:c3:79:38:8c:56:c9:83:b9:56:
                    b5:35:42:5b:8c:25:8c:bf:31:14:af:33:0a:ca:9b:
                    4e:79:ee:bb:d2:58:db:73:17:72:e0:ac:81:11:c3:
                    0c:5e:59:cf:bf:28:05:1d:3f:c1:4d:72:09:9e:43:
                    24:27:6a:42:2e:3f:e3:94:a6:8e:a9:2e:8a:ce:eb:
                    05:f5:03:f4:5a:b7:35:40:30:d6:cd:24:fb:f4:4f:
                    6c:f2:db:67:01:58:93:00:99:d2:19:42:b9:56:50:
                    e2:89:1c:8f:a0:17:1b:0f:0a:64:48:a0:f6:ed:a0:
                    bd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8B:31:6D:B4:B9:7A:2B:C8:3E:8E:7E:58:E5:03:15:AF:04:7B:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/cf1c8a0a-91d9-385c-94c6-29582b4f34cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.228.53/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:66:83:0e:3e:6a:5e:4f:e5:bf:e7:6c:6a:13:63:7f:20:c0:
         79:42:41:1d:38:58:56:d9:09:76:d4:e2:f8:3d:79:b4:3d:21:
         99:42:ce:35:3e:43:a9:c3:96:6c:63:07:87:c2:14:f3:cc:a6:
         7e:79:d5:e0:c2:5c:03:76:28:55:e0:08:5a:aa:cf:73:97:eb:
         92:75:d1:dd:e3:1b:36:e8:7a:bf:71:cc:bc:eb:a9:e3:4e:4b:
         2b:3e:1d:dd:30:d9:89:e2:f9:7b:94:e7:bb:02:c1:84:bf:72:
         23:de:f9:c9:0c:0f:ad:38:85:1d:40:99:85:20:de:db:c6:97:
         05:3e:60:6b:fc:c2:22:0d:b9:85:5c:da:0f:9e:f3:27:32:6b:
         6f:68:1d:50:54:a4:92:4d:16:a9:ae:a1:52:06:56:de:21:ec:
         7e:99:6a:05:f0:0c:7a:49:c5:34:8e:60:db:4e:56:6f:10:2d:
         88:bc:92:b0:ce:05:4a:81:6d:68:34:9f:06:d5:ae:cf:fd:3e:
         e1:7c:03:db:ef:ef:b4:4d:0f:21:bc:09:2e:f3:85:40:d5:f6:
         28:d6:6c:f2:8a:f2:0e:14:26:66:28:cb:53:85:50:f0:81:15:
         c8:cb:b8:07:b6:d0:3c:b4:75:78:99:c0:84:ed:cf:8d:47:fb:
         74:0a:44:2a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4NhDXNg2/JZp7yzMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk
NTA0MjIzODYtOTYyMy00NzliLWEzNTMtNmY4YjM5NjMyODA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnHJ6YL+0+IetyZkyLlvx0nghPi0I1+bRTzA
VNukuY6LVG+ua9pW/8ggonJfrszJrPBr0XebuvoKTeYy94ic8MDZvAXsLMKU4OQx
R32x6umgHRhvdgqjrnvS3ABVMDq3RHy7fhGiIfsLkM7PBDLZLcCX2Rsax0KReW2n
9sCXwwZpv6MyuEYG9Fz0J+nDeTiMVsmDuVa1NUJbjCWMvzEUrzMKyptOee670ljb
cxdy4KyBEcMMXlnPvygFHT/BTXIJnkMkJ2pCLj/jlKaOqS6KzusF9QP0Wrc1QDDW
zST79E9s8ttnAViTAJnSGUK5VlDiiRyPoBcbDwpkSKD27aC9EwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFB+LMW20uXoryD6OfljlAxWvBHvgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvY2YxYzhhMGEtOTFkOS0z
ODVjLTk0YzYtMjk1ODJiNGYzNGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2KjkNTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAHZoMOPmpeT+W/52xqE2N/IMB5QkEdOFhW2Ql21OL4PXm0PSGZQs41
PkOpw5ZsYweHwhTzzKZ+edXgwlwDdihV4Ahaqs9zl+uSddHd4xs26Hq/ccy866nj
TksrPh3dMNmJ4vl7lOe7AsGEv3Ij3vnJDA+tOIUdQJmFIN7bxpcFPmBr/MIiDbmF
XNoPnvMnMmtvaB1QVKSSTRaprqFSBlbeIex+mWoF8Ax6ScU0jmDbTlZvEC2IvJKw
zgVKgW1oNJ8G1a7P/T7hfAPb7++0TQ8hvAku84VA1fYo1mzyivIOFCZmKMtThVDw
gRXIy7gHttA8tHV4mcCE7c+NR/t0CkQq
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:23:07 2026 by rpki-client