Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e2a1b438-d73d-3a41-9858-6dc6df976c19.roa
File:                     e2a1b438-d73d-3a41-9858-6dc6df976c19.roa (raw, json)
Hash identifier:          JcSwqmeSzQCLojFwBBGb+OyWF1lWB1FDlx3KfncWpok=
Subject key identifier:   9F:C9:5D:73:5D:ED:7B:49:EB:67:C1:3A:AC:C3:AD:86:38:45:08:2D
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584DF4DBA4A7686BF2BF8F3B5F80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e2a1b438-d73d-3a41-9858-6dc6df976c19.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     81
IP address blocks:        198.86.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:a4:a7:68:6b:f2:bf:8f:3b:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=39b8c82a-cdbe-40ca-8bf6-84d4bc4cd585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:10:54:b4:a6:47:c6:4a:e0:53:29:64:1b:9c:
                    eb:67:97:a9:5a:81:ae:bb:5e:c8:b9:c4:d9:61:66:
                    17:f1:f0:bb:c0:5e:0c:00:07:d3:95:5e:6a:3f:67:
                    bb:ab:6b:d6:7d:0a:d7:95:1d:4a:f7:c2:37:c3:a3:
                    67:e2:84:b6:3b:1e:bb:82:d9:66:45:2c:cf:ca:2f:
                    db:16:b6:03:b7:59:89:b9:77:61:86:7e:b0:fa:7d:
                    27:c0:64:6e:ef:af:29:74:1c:b3:21:75:34:38:41:
                    8a:e4:fd:bd:7e:24:2d:42:88:ec:11:e6:a0:a4:14:
                    3b:22:44:f7:0b:6c:31:cf:7f:d8:79:02:2a:a3:c5:
                    19:81:b1:94:de:f3:5e:3d:75:85:6b:27:79:f6:86:
                    1e:a5:7c:7d:2c:82:f1:68:7e:2b:6d:e0:ef:d0:e3:
                    4a:0f:d3:cb:fa:24:c9:8d:1e:8d:6f:58:3e:23:b5:
                    28:64:ed:8b:48:05:0a:a3:87:0a:97:d6:08:14:0d:
                    31:4e:06:d8:b8:cb:ee:1f:b8:a9:85:b1:6e:a7:b0:
                    58:2d:08:10:a2:11:d3:82:1c:ed:0f:24:f2:e7:36:
                    85:3e:16:ff:20:29:44:35:3e:2a:8c:bf:0f:32:8a:
                    0c:e7:ae:3a:5b:6e:aa:de:9d:3a:1f:43:76:b0:66:
                    51:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C9:5D:73:5D:ED:7B:49:EB:67:C1:3A:AC:C3:AD:86:38:45:08:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e2a1b438-d73d-3a41-9858-6dc6df976c19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.86.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:68:72:5a:0e:aa:1a:43:82:42:44:72:8a:34:98:09:3f:bd:
         8d:28:0d:7b:af:e2:0c:08:66:c8:b6:7e:78:34:d7:af:a9:8a:
         50:8c:88:66:41:9f:1d:fa:ed:a9:b0:ee:5c:87:79:7c:da:fd:
         12:b6:66:15:35:b6:bb:7d:ce:8a:5a:d1:f4:9f:e3:e4:e5:2a:
         fa:55:df:d0:9a:f9:7b:75:9d:ed:fa:76:de:8c:a2:71:8a:45:
         9d:b8:79:cf:34:1a:0b:a9:2c:9d:3b:f2:36:7f:6a:fb:66:88:
         eb:f8:c3:59:72:35:60:9c:28:e7:41:4e:36:5f:65:18:c7:f1:
         76:3c:e6:7a:91:0f:48:94:c7:8e:6c:8e:83:88:4c:69:45:c9:
         4e:a3:8d:24:47:81:3d:bb:00:c7:17:6d:6e:80:41:7b:43:d9:
         57:aa:56:04:a3:f5:65:a9:9a:56:db:2d:78:06:60:28:82:2f:
         51:ea:1c:a7:98:96:c5:54:e2:46:ce:e5:fb:fa:cd:1b:97:d9:
         c4:8b:09:0f:1d:6c:e5:80:ad:db:c2:74:bd:4b:70:76:3d:6d:
         6e:37:2e:24:2a:f1:eb:13:8c:86:21:77:53:89:e0:22:65:7b:
         5a:d3:56:94:5a:e7:27:fb:f6:65:5e:a2:e6:19:34:c9:b5:63:
         05:54:69:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3026SnaGvyv487X4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk
MzliOGM4MmEtY2RiZS00MGNhLThiZjYtODRkNGJjNGNkNTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBBUtKZHxkrgUylkG5zrZ5epWoGuu17IucTZ
YWYX8fC7wF4MAAfTlV5qP2e7q2vWfQrXlR1K98I3w6Nn4oS2Ox67gtlmRSzPyi/b
FrYDt1mJuXdhhn6w+n0nwGRu768pdByzIXU0OEGK5P29fiQtQojsEeagpBQ7IkT3
C2wxz3/YeQIqo8UZgbGU3vNePXWFayd59oYepXx9LILxaH4rbeDv0ONKD9PL+iTJ
jR6Nb1g+I7UoZO2LSAUKo4cKl9YIFA0xTgbYuMvuH7iphbFup7BYLQgQohHTghzt
DyTy5zaFPhb/IClENT4qjL8PMooM5646W26q3p06H0N2sGZRdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ/JXXNd7XtJ62fBOqzDrYY4RQgtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZTJhMWI0MzgtZDczZC0z
YTQxLTk4NTgtNmRjNmRmOTc2YzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxlYQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGxocloOqhpDgkJEcoo0mAk/vY0oDXuv4gwIZsi2fng016+pilCMiGZB
nx367amw7lyHeXza/RK2ZhU1trt9zopa0fSf4+TlKvpV39Ca+Xt1ne36dt6MonGK
RZ24ec80GgupLJ078jZ/avtmiOv4w1lyNWCcKOdBTjZfZRjH8XY85nqRD0iUx45s
joOITGlFyU6jjSRHgT27AMcXbW6AQXtD2VeqVgSj9WWpmlbbLXgGYCiCL1HqHKeY
lsVU4kbO5fv6zRuX2cSLCQ8dbOWArdvCdL1LcHY9bW43LiQq8esTjIYhd1OJ4CJl
e1rTVpRa5yf79mVeouYZNMm1YwVUad0=
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:33:11 2026 by rpki-client