Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/de5b00f2-cadd-3f54-97b7-032b7ca57259.roa
File:                     de5b00f2-cadd-3f54-97b7-032b7ca57259.roa (raw, json)
Hash identifier:          fulRBYGg+lTsUK6LKbE8KHWHSva+DuW+osx5tuMxmJM=
Subject key identifier:   DB:45:F5:F8:A1:73:83:3E:BB:96:BF:54:C0:FE:9F:79:7C:16:B0:CC
Certificate issuer:       /CN=237e8029-86f4-41b0-ab75-535531b02fb3
Certificate serial:       010D0C9F4328584DFA7081251AFE5F08A95A2300
Authority key identifier: F8:32:2A:B4:B0:35:C2:D6:A3:D4:EC:A3:B3:76:1C:14:AE:AB:6B:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/de5b00f2-cadd-3f54-97b7-032b7ca57259.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     30713
IP address blocks:        209.221.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/237e8029-86f4-41b0-ab75-535531b02fb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/237e8029-86f4-41b0-ab75-535531b02fb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:81:25:1a:fe:5f:08:a9:5a:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237e8029-86f4-41b0-ab75-535531b02fb3
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=5ca16b66-f017-4f2c-acc5-05e51390fecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a1:97:bd:d0:1f:f8:a2:d5:f5:2d:10:6c:6f:
                    da:50:b5:ec:d9:5b:bc:e0:7c:86:c9:8d:c7:e5:22:
                    39:53:c2:39:fb:7b:aa:2b:e0:7b:87:7d:e0:9b:9f:
                    1a:ab:94:1c:92:23:fd:e8:33:d2:2b:4a:75:98:15:
                    9b:a5:58:73:74:49:db:86:8a:7a:45:2d:79:6e:b6:
                    f0:b4:24:c1:02:af:eb:28:8c:cd:70:1d:d5:7a:b5:
                    2e:db:e1:4e:2b:2b:0c:96:07:7d:6a:9d:7c:a0:3e:
                    12:03:3f:6b:84:f5:6f:85:34:3e:ec:70:12:02:1d:
                    57:1d:a6:2a:e0:58:10:7d:9d:12:c8:da:79:ea:09:
                    e7:b0:06:9f:27:de:b6:e4:7f:e9:78:2e:a4:55:7d:
                    59:87:2f:49:d8:1a:bc:db:76:58:ba:51:2d:fc:96:
                    14:78:90:a1:3f:03:69:21:2e:ae:f8:4d:70:60:7e:
                    c0:6e:5f:db:89:82:18:75:9c:54:99:b1:c0:88:21:
                    dd:16:6c:32:6d:be:47:fc:00:08:68:ce:33:b7:a0:
                    55:56:fa:28:50:e0:32:b3:53:bd:51:fe:4c:30:3b:
                    b8:7a:c5:fd:78:5e:d5:d2:ca:a9:a3:11:22:dd:77:
                    81:97:d0:34:1f:72:b1:8a:6e:7f:da:c8:a6:d7:fb:
                    a3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:45:F5:F8:A1:73:83:3E:BB:96:BF:54:C0:FE:9F:79:7C:16:B0:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/de5b00f2-cadd-3f54-97b7-032b7ca57259.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/237e8029-86f4-41b0-ab75-535531b02fb3.crl

            X509v3 Authority Key Identifier:
                keyid:F8:32:2A:B4:B0:35:C2:D6:A3:D4:EC:A3:B3:76:1C:14:AE:AB:6B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.221.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:cd:ef:cb:f4:50:63:28:e4:3b:59:4f:24:b8:67:9d:a2:40:
         f5:60:76:44:6e:3e:40:e5:8d:8f:96:28:d4:ba:af:72:05:43:
         40:6a:d3:df:61:e5:01:81:1f:1d:4a:b2:a4:04:64:9d:2c:31:
         de:25:b9:83:17:78:83:fa:54:18:02:3b:ea:a4:14:34:b2:e0:
         f7:16:26:ac:40:52:06:6b:d0:b0:64:52:55:76:c0:c8:4e:06:
         34:40:70:2f:f0:4b:ea:ff:4b:1a:da:5d:48:9c:98:9a:bb:c5:
         b0:d5:73:e2:c3:7d:2f:54:b8:a9:d9:b9:bd:ff:d4:77:3a:b7:
         d0:69:47:b7:d8:a4:cb:f8:21:d7:23:a7:a6:1e:9d:d5:1b:0a:
         56:89:4e:1a:2c:59:eb:ec:7f:0a:c2:fa:c4:62:68:d8:e1:b1:
         b0:6e:f7:45:ad:3e:6c:49:b4:61:5f:75:0b:5b:25:d8:c1:29:
         e3:e0:32:eb:37:d3:2f:a5:77:63:65:c8:91:6a:70:58:14:3f:
         90:65:d8:3a:45:be:9b:32:35:a8:39:35:6f:bf:21:f9:c6:59:
         37:ac:3b:b0:ee:68:8b:75:04:c5:eb:21:0e:1a:63:ce:0a:3a:
         09:b2:aa:92:0e:be:59:8f:f3:04:38:ee:08:66:46:35:7a:e7:
         ce:91:2a:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cIElGv5fCKlaIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjM3ZTgwMjktODZmNC00MWIwLWFiNzUtNTM1NTMxYjAy
ZmIzMB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk
NWNhMTZiNjYtZjAxNy00ZjJjLWFjYzUtMDVlNTEzOTBmZWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6GXvdAf+KLV9S0QbG/aULXs2Vu84HyGyY3H
5SI5U8I5+3uqK+B7h33gm58aq5QckiP96DPSK0p1mBWbpVhzdEnbhop6RS15brbw
tCTBAq/rKIzNcB3VerUu2+FOKysMlgd9ap18oD4SAz9rhPVvhTQ+7HASAh1XHaYq
4FgQfZ0SyNp56gnnsAafJ9625H/peC6kVX1Zhy9J2Bq823ZYulEt/JYUeJChPwNp
IS6u+E1wYH7Abl/biYIYdZxUmbHAiCHdFmwybb5H/AAIaM4zt6BVVvooUOAys1O9
Uf5MMDu4esX9eF7V0sqpoxEi3XeBl9A0H3Kxim5/2sim1/ujDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNtF9fihc4M+u5a/VMD+n3l8FrDMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMzdl
ODAyOS04NmY0LTQxYjAtYWI3NS01MzU1MzFiMDJmYjMvZGU1YjAwZjItY2FkZC0z
ZjU0LTk3YjctMDMyYjdjYTU3MjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjM3ZTgwMjktODZmNC00MWIwLWFi
NzUtNTM1NTMxYjAyZmIzLzIzN2U4MDI5LTg2ZjQtNDFiMC1hYjc1LTUzNTUzMWIw
MmZiMy5jcmwwHwYDVR0jBBgwFoAU+DIqtLA1wtaj1Oyjs3YcFK6ra3MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMzdlODAyOS04NmY0LTQxYjAtYWI3NS01MzU1
MzFiMDJmYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0d1AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB3N78v0UGMo5DtZTyS4Z52iQPVgdkRuPkDljY+WKNS6r3IFQ0Bq099h
5QGBHx1KsqQEZJ0sMd4luYMXeIP6VBgCO+qkFDSy4PcWJqxAUgZr0LBkUlV2wMhO
BjRAcC/wS+r/SxraXUicmJq7xbDVc+LDfS9UuKnZub3/1Hc6t9BpR7fYpMv4Idcj
p6YendUbClaJThosWevsfwrC+sRiaNjhsbBu90WtPmxJtGFfdQtbJdjBKePgMus3
0y+ld2NlyJFqcFgUP5Bl2DpFvpsyNag5NW+/IfnGWTesO7DuaIt1BMXrIQ4aY84K
OgmyqpIOvlmP8wQ47ghmRjV6586RKnE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:01:23 2026 by rpki-client