Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d5af8938-fe55-34cf-8a95-3ff9247e6446.roa
File:                     d5af8938-fe55-34cf-8a95-3ff9247e6446.roa (raw, json)
Hash identifier:          PL28blvh1Ehyw6Y0QMzOQLeKIAslDcO35NO/DPTzMHg=
Subject key identifier:   AD:C8:60:6A:AC:B7:20:E3:5D:35:B4:06:8D:89:66:9F:CE:E8:B8:6E
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584DFBD5E4BDD8791F7841CBBB60
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d5af8938-fe55-34cf-8a95-3ff9247e6446.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     152705
IP address blocks:        107.151.244.0/22 maxlen: 24
                          198.44.170.0/24 maxlen: 24
                          198.44.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:e4:bd:d8:79:1f:78:41:cb:bb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=306bb9ae-6713-4b29-bfbf-400d40a1e0d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7b:c3:50:77:45:4c:6f:31:5b:70:04:b2:88:
                    cc:b3:06:2f:af:76:77:37:b3:87:23:d6:86:97:67:
                    94:fd:52:5c:7a:48:d3:db:54:b7:a4:8b:01:33:25:
                    ca:c9:84:7f:92:6d:fc:24:21:35:f7:24:b1:48:b5:
                    fc:a8:60:54:73:36:16:2e:6c:6e:dd:78:27:c7:fa:
                    ef:49:4c:78:ae:82:4d:17:7d:c0:31:e5:8f:7d:f4:
                    a6:4f:6a:c4:37:9a:46:bf:80:68:d0:30:e9:6f:8c:
                    83:e9:2e:c5:58:43:97:25:6b:18:8e:d7:26:04:bb:
                    17:ae:6e:00:d5:05:fa:42:46:14:5a:de:c2:95:8a:
                    75:73:4d:f6:ba:43:72:1b:61:a9:e3:47:c1:8e:06:
                    ac:46:07:27:c7:60:40:54:c7:38:ad:27:5b:ec:2a:
                    32:e7:73:e1:85:11:17:9d:90:23:dd:06:b8:1f:07:
                    4a:95:9b:55:85:d9:f1:9b:e1:35:39:b6:9e:67:83:
                    e4:f7:00:eb:c0:7d:3f:3c:22:6c:1e:c5:b4:dc:78:
                    20:b1:03:18:5b:55:7f:ff:c0:d2:5e:aa:0c:cd:c1:
                    8e:64:8a:1a:86:8e:0a:1f:74:d2:e1:27:04:20:bb:
                    ed:21:69:90:7d:5b:4b:e1:0c:6c:21:af:e1:4f:19:
                    09:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C8:60:6A:AC:B7:20:E3:5D:35:B4:06:8D:89:66:9F:CE:E8:B8:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/d5af8938-fe55-34cf-8a95-3ff9247e6446.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.244.0/22
                  198.44.170.0/24
                  198.44.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:9f:6e:a7:78:3e:01:4e:75:76:53:6e:ce:3d:96:d4:53:ec:
         56:14:76:89:e8:b6:9c:56:c7:c6:ae:f3:e8:9a:90:c2:14:c8:
         0e:01:00:2f:e5:79:9d:f2:ed:fd:f3:54:1b:f5:5d:57:98:6a:
         a2:6e:1d:73:e7:b3:89:da:64:e1:f4:55:5c:55:75:f5:18:36:
         f6:e5:00:52:87:26:6f:a1:98:c0:54:c7:4a:7a:23:67:4f:3a:
         74:42:bd:96:c5:ba:8b:3c:68:ae:b7:c8:57:22:c0:b0:d6:5c:
         db:0c:d1:8c:36:ed:d4:cf:dc:3b:6c:76:e7:78:16:35:e6:2b:
         e7:e6:c6:e2:65:0f:ef:4e:d8:3b:50:56:9f:a4:4a:5c:c1:93:
         38:a0:ad:15:08:54:0e:35:b3:66:b0:39:d8:7d:e8:27:79:40:
         1b:b0:2a:83:f1:c6:32:fd:49:be:e5:e0:57:f4:eb:ce:b3:12:
         2c:b4:5f:11:f6:99:2e:00:15:8e:81:e6:fd:a2:6d:40:61:67:
         fb:16:3f:49:45:2f:ac:db:b8:af:cf:db:03:92:4d:ff:80:ee:
         87:ae:07:bc:75:cc:9f:c1:ef:58:14:19:79:2b:ca:0e:8c:30:
         1d:17:5a:72:f7:73:93:a5:bd:cd:0b:dc:c2:57:81:66:08:c3:
         8b:16:ab:48
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE371eS92HkfeEHLu2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz
ZjgyMB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk
MzA2YmI5YWUtNjcxMy00YjI5LWJmYmYtNDAwZDQwYTFlMGQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHvDUHdFTG8xW3AEsojMswYvr3Z3N7OHI9aG
l2eU/VJcekjT21S3pIsBMyXKyYR/km38JCE19ySxSLX8qGBUczYWLmxu3Xgnx/rv
SUx4roJNF33AMeWPffSmT2rEN5pGv4Bo0DDpb4yD6S7FWEOXJWsYjtcmBLsXrm4A
1QX6QkYUWt7ClYp1c032ukNyG2Gp40fBjgasRgcnx2BAVMc4rSdb7Coy53PhhREX
nZAj3Qa4HwdKlZtVhdnxm+E1ObaeZ4Pk9wDrwH0/PCJsHsW03HggsQMYW1V//8DS
XqoMzcGOZIoaho4KH3TS4ScEILvtIWmQfVtL4QxsIa/hTxkJiQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFK3IYGqstyDjXTW0Bo2JZp/O6LhuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0
OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvZDVhZjg5MzgtZmU1NS0z
NGNmLThhOTUtM2ZmOTI0N2U2NDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk
ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj
M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm
NjYwYzNmODIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCa5f0AwQA
xiyqAwQCxiywMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAAOfbqd4PgFOdXZTbs49ltRT7FYUdonotpxWx8au
8+iakMIUyA4BAC/leZ3y7f3zVBv1XVeYaqJuHXPns4naZOH0VVxVdfUYNvblAFKH
Jm+hmMBUx0p6I2dPOnRCvZbFuos8aK63yFciwLDWXNsM0Yw27dTP3Dtsdud4FjXm
K+fmxuJlD+9O2DtQVp+kSlzBkzigrRUIVA41s2awOdh96Cd5QBuwKoPxxjL9Sb7l
4Ff0686zEiy0XxH2mS4AFY6B5v2ibUBhZ/sWP0lFL6zbuK/P2wOSTf+A7oeuB7x1
zJ/B71gUGXkryg6MMB0XWnL3c5Olvc0L3MJXgWYIw4sWq0g=
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:08:38 2026 by rpki-client