Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/adea607a-1b36-32c8-9cc0-bafdfcd78db0.roa
File:                     adea607a-1b36-32c8-9cc0-bafdfcd78db0.roa (raw, json)
Hash identifier:          EppeLWtslIP/Nv9iy9o995vTZeVsY2UuO2mzixuQndI=
Subject key identifier:   CB:2E:4F:2A:D2:4D:DA:CA:9E:D9:20:C4:42:9D:10:CD:FD:C2:26:46
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D83CAC7591684E3B18F837B20
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/adea607a-1b36-32c8-9cc0-bafdfcd78db0.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     22773
IP address blocks:        24.248.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:c7:59:16:84:e3:b1:8f:83:7b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=1152d585-c3ef-4774-8f3b-1d4f07b79a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3b:86:70:19:f2:0b:86:82:87:62:76:47:b9:
                    a9:53:b9:1f:ab:b4:20:34:9f:2a:7b:15:57:88:13:
                    3b:1f:cd:c7:08:73:f0:e4:88:b1:20:16:8a:de:62:
                    83:2f:8e:a3:d3:00:53:68:72:0c:2e:14:a7:5d:18:
                    bb:8f:b3:48:5d:52:ba:84:69:1a:8d:3a:7d:ec:07:
                    7e:d4:f4:34:ad:bb:69:7a:eb:e9:d6:ec:a6:fb:26:
                    0c:b4:a8:ec:a6:d0:a3:77:4f:93:83:5d:83:21:57:
                    df:9e:60:03:97:a0:20:e6:c2:e7:ce:c9:6d:8a:02:
                    71:a6:43:07:7a:06:ea:98:e3:42:1f:af:b6:bf:44:
                    5e:76:64:37:24:70:2a:b1:3a:40:92:e9:f7:56:4d:
                    d9:72:a2:0c:65:a4:23:41:aa:42:ea:2c:9a:2f:5c:
                    b2:03:d0:88:67:34:e5:d4:fc:de:bb:78:24:c8:39:
                    2d:4a:9d:54:1b:3f:e0:ea:5a:53:36:bb:da:26:71:
                    8d:92:ba:8b:78:ff:e2:df:df:9b:b6:99:9b:5d:cb:
                    62:ea:6a:bb:64:fc:e6:02:bd:fd:7c:d8:c0:96:51:
                    ea:08:bd:e1:35:36:a1:05:cd:20:59:e8:a4:e6:27:
                    f4:57:03:cb:ff:6e:21:ca:6a:94:5c:1f:a9:a5:d1:
                    3b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2E:4F:2A:D2:4D:DA:CA:9E:D9:20:C4:42:9D:10:CD:FD:C2:26:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/adea607a-1b36-32c8-9cc0-bafdfcd78db0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.248.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:3a:66:a3:b7:ab:e8:3a:a4:03:db:ac:93:91:6b:34:5b:ea:
         af:32:7b:7a:92:59:97:d3:6d:e8:68:5e:23:71:bf:6c:f8:88:
         4c:33:5a:11:0e:1f:cd:23:cf:03:cb:71:0f:6b:c3:2f:0c:8c:
         70:6c:bb:9e:2e:0f:42:25:fd:2b:f9:6a:f0:bc:71:22:54:d7:
         aa:5a:92:cc:33:03:c2:11:a3:d8:18:2d:7f:c4:79:89:14:de:
         64:d5:6e:61:dc:47:21:43:2b:97:ec:44:6a:d2:59:cd:14:9c:
         78:a2:d7:48:f2:21:d4:68:f0:86:15:99:a7:96:fa:47:c2:cc:
         4c:0b:48:64:d6:e0:c7:69:fb:a8:19:3d:c1:eb:c1:25:a7:9f:
         47:b3:9d:ff:94:47:55:7b:b3:85:22:78:34:8a:c8:44:09:cd:
         e7:62:71:9a:0e:ed:82:e9:73:e7:67:e5:d4:0f:d9:77:80:61:
         3f:9e:21:4f:0f:fa:e0:7b:a5:76:02:97:20:c9:60:57:08:a1:
         81:e0:09:86:08:57:27:91:17:55:93:a8:c6:15:45:a4:14:16:
         09:39:f9:60:14:a8:3c:70:76:83:80:01:36:c3:f7:4a:0e:40:
         ee:70:dd:9c:77:37:d4:86:e7:d6:b0:63:93:90:b1:ca:89:51:
         7c:02:40:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2DysdZFoTjsY+DeyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
MTE1MmQ1ODUtYzNlZi00Nzc0LThmM2ItMWQ0ZjA3Yjc5YTI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTuGcBnyC4aCh2J2R7mpU7kfq7QgNJ8qexVX
iBM7H83HCHPw5IixIBaK3mKDL46j0wBTaHIMLhSnXRi7j7NIXVK6hGkajTp97Ad+
1PQ0rbtpeuvp1uym+yYMtKjsptCjd0+Tg12DIVffnmADl6Ag5sLnzsltigJxpkMH
egbqmONCH6+2v0RedmQ3JHAqsTpAkun3Vk3ZcqIMZaQjQapC6iyaL1yyA9CIZzTl
1Pzeu3gkyDktSp1UGz/g6lpTNrvaJnGNkrqLeP/i39+btpmbXcti6mq7ZPzmAr39
fNjAllHqCL3hNTahBc0gWeik5if0VwPL/24hymqUXB+ppdE7jwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMsuTyrSTdrKntkgxEKdEM39wiZGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYWRlYTYwN2EtMWIzNi0z
MmM4LTljYzAtYmFmZGZjZDc4ZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGPjlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAE6ZqO3q+g6pAPbrJORazRb6q8ye3qSWZfTbehoXiNxv2z4iEwzWhEO
H80jzwPLcQ9rwy8MjHBsu54uD0Il/Sv5avC8cSJU16pakswzA8IRo9gYLX/EeYkU
3mTVbmHcRyFDK5fsRGrSWc0UnHii10jyIdRo8IYVmaeW+kfCzEwLSGTW4Mdp+6gZ
PcHrwSWnn0eznf+UR1V7s4UieDSKyEQJzedicZoO7YLpc+dn5dQP2XeAYT+eIU8P
+uB7pXYClyDJYFcIoYHgCYYIVyeRF1WTqMYVRaQUFgk5+WAUqDxwdoOAATbD90oO
QO5w3Zx3N9SG59awY5OQscqJUXwCQJ8=
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:51:15 2026 by rpki-client