Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de962637-5957-3361-b0f3-b1ed59737e18.roa
File:                     de962637-5957-3361-b0f3-b1ed59737e18.roa (raw, json)
Hash identifier:          mmBtr3x/7CgM24V7YeP/EtWk8G5qfpAStElvyUFrnLU=
Subject key identifier:   1C:E1:4F:A8:A9:CF:D9:53:9F:F6:14:C5:0C:E7:2D:85:C8:FE:CE:6B
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584DE2B5F53C63F918522979C380
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de962637-5957-3361-b0f3-b1ed59737e18.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     396613
IP address blocks:        198.41.0.4/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:f5:3c:63:f9:18:52:29:79:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=f320f9ff-b2b8-454b-9df9-f5d01c7c221d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e3:93:a4:9a:06:af:f7:4a:0c:9c:39:dd:d8:
                    2b:0d:da:0d:75:6c:e9:61:98:60:1b:3d:39:8f:d6:
                    f1:a6:2e:1a:0f:97:b4:82:9b:be:e7:8e:d7:8b:a8:
                    e9:1f:56:ab:ee:f7:f2:4a:a5:07:12:b6:76:e9:8f:
                    77:50:a8:f7:74:54:a5:29:59:aa:d2:22:e8:71:36:
                    d3:d5:90:e5:15:10:5e:1d:42:61:16:e1:cc:1f:d4:
                    65:c5:0e:cb:50:9a:25:aa:c9:b4:c8:f9:14:d2:0f:
                    91:d9:16:6d:0d:55:d0:af:07:d7:a2:f0:a4:34:44:
                    3e:97:3d:82:93:4b:af:11:74:77:ac:fb:b1:ab:35:
                    01:0c:a7:82:88:f2:ac:c7:c6:f1:65:0b:b8:9b:5f:
                    70:a7:e3:44:8e:04:c6:bf:df:c2:cd:45:6f:2d:79:
                    62:1a:8f:36:20:34:b7:a4:c5:30:40:46:7e:9b:cf:
                    b8:f7:ff:39:a7:8d:30:96:ae:1c:2f:bf:af:f8:90:
                    4e:ed:e3:df:c5:e8:ee:04:76:93:0e:e8:02:f7:d3:
                    b1:3d:4e:28:86:e3:1b:64:45:c4:d5:89:eb:58:99:
                    7b:5e:c3:62:4c:98:35:6b:48:3b:d6:d6:af:e1:aa:
                    ed:81:a5:8d:ef:5b:1b:bf:88:71:fc:52:23:ad:7b:
                    c9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E1:4F:A8:A9:CF:D9:53:9F:F6:14:C5:0C:E7:2D:85:C8:FE:CE:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de962637-5957-3361-b0f3-b1ed59737e18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.4/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:b4:ce:62:cd:7f:79:b9:33:ea:58:c9:e1:4f:01:58:60:a1:
         fc:be:12:93:a1:1b:00:58:c3:3c:7f:4a:90:e0:67:7d:ca:51:
         b6:ad:cd:f0:31:56:fe:0e:a0:99:a0:4f:72:90:31:40:99:be:
         3a:09:8b:d3:b0:82:9d:9e:96:1b:c4:47:d6:91:a4:f8:cf:5c:
         a6:cd:14:94:b7:27:34:e9:e9:9f:f9:86:62:05:98:07:b4:bd:
         3c:c3:12:8c:61:5d:32:c8:5b:e2:5f:e6:48:6c:1d:7d:e6:2b:
         30:da:a6:14:67:6b:eb:23:49:f1:34:9c:b2:82:6a:d5:c5:c7:
         d1:1c:01:a1:33:7f:a0:f5:ac:19:33:99:ef:e2:a9:f8:cb:c1:
         ba:5e:de:34:16:72:5f:b0:2b:1b:28:01:39:21:ea:c2:f1:04:
         9e:21:25:08:11:97:fa:33:b4:71:f9:21:0e:9c:9a:6f:db:e9:
         02:02:0d:26:f1:39:65:cd:8f:0a:99:ad:91:e2:32:2d:26:8f:
         a3:4b:6c:41:ef:d5:2b:d1:46:76:73:ca:8f:25:9e:23:0c:d9:
         e0:a2:53:07:7a:fd:57:f3:0d:42:ec:d1:74:8d:db:0f:30:95:
         f9:d5:c6:13:05:81:e5:c7:7a:2a:22:70:e4:22:f3:56:95:16:
         a7:10:b0:09
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3itfU8Y/kYUil5w4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk
ZjMyMGY5ZmYtYjJiOC00NTRiLTlkZjktZjVkMDFjN2MyMjFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uOTpJoGr/dKDJw53dgrDdoNdWzpYZhgGz05
j9bxpi4aD5e0gpu+547Xi6jpH1ar7vfySqUHErZ26Y93UKj3dFSlKVmq0iLocTbT
1ZDlFRBeHUJhFuHMH9RlxQ7LUJolqsm0yPkU0g+R2RZtDVXQrwfXovCkNEQ+lz2C
k0uvEXR3rPuxqzUBDKeCiPKsx8bxZQu4m19wp+NEjgTGv9/CzUVvLXliGo82IDS3
pMUwQEZ+m8+49/85p40wlq4cL7+v+JBO7ePfxejuBHaTDugC99OxPU4ohuMbZEXE
1YnrWJl7XsNiTJg1a0g71tav4artgaWN71sbv4hx/FIjrXvJBQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBzhT6ipz9lTn/YUxQznLYXI/s5rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZGU5NjI2MzctNTk1Ny0z
MzYxLWIwZjMtYjFlZDU5NzM3ZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikABDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBrtM5izX95uTPqWMnhTwFYYKH8vhKToRsAWMM8f0qQ4Gd9ylG2rc3w
MVb+DqCZoE9ykDFAmb46CYvTsIKdnpYbxEfWkaT4z1ymzRSUtyc06emf+YZiBZgH
tL08wxKMYV0yyFviX+ZIbB195isw2qYUZ2vrI0nxNJyygmrVxcfRHAGhM3+g9awZ
M5nv4qn4y8G6Xt40FnJfsCsbKAE5IerC8QSeISUIEZf6M7Rx+SEOnJpv2+kCAg0m
8TllzY8Kma2R4jItJo+jS2xB79Ur0UZ2c8qPJZ4jDNngolMHev1X8w1C7NF0jdsP
MJX51cYTBYHlx3oqInDkIvNWlRanELAJ
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:11:42 2026 by rpki-client