Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/eaeb2381-815c-3c19-bef2-acee696a2e25.roa
File:                     eaeb2381-815c-3c19-bef2-acee696a2e25.roa (raw, json)
Hash identifier:          3V5x/fGAyFTNaOlR9ywjJKz5Ujx3+azuhC2Sscg7W6A=
Subject key identifier:   20:4D:48:02:3E:D2:B4:DD:07:6C:E8:E5:EE:AB:25:A3:C2:D7:5C:BE
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584DF4DBA4D3DAA825331D464380
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/eaeb2381-815c-3c19-bef2-acee696a2e25.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     81
IP address blocks:        198.86.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:a4:d3:da:a8:25:33:1d:46:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=25f59c04-1264-405c-9f9a-155e46f343f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bd:6a:ed:3f:28:b3:82:9c:6b:21:c8:b7:b4:
                    a0:12:09:7b:43:76:3b:d0:fe:d5:93:51:49:f1:60:
                    53:78:53:5f:71:41:82:72:48:d9:1a:a1:55:2a:31:
                    44:93:fd:25:09:da:1b:e3:b0:e6:c4:2f:73:ab:6d:
                    e5:73:31:c2:9f:fb:b2:38:45:79:f1:62:3a:93:ab:
                    ac:0c:8c:5c:72:6b:0d:35:e9:cb:3a:a2:be:03:dd:
                    5c:77:ff:79:db:37:e9:75:f2:7f:29:3d:ec:70:f8:
                    5d:e1:4f:0b:6c:0f:f0:57:7f:be:63:57:9a:a3:db:
                    a0:a3:3e:60:e3:ae:ee:14:4a:66:8d:a8:ab:0d:37:
                    0a:f9:0c:55:e9:2a:e5:0e:e0:cc:65:95:51:bb:29:
                    c4:0b:61:61:d5:90:00:20:95:ce:e3:3a:ae:b9:4b:
                    61:c9:fc:61:61:b0:cf:6d:d3:8a:ca:12:f0:0a:1f:
                    44:58:6c:c8:2d:8a:4d:e5:2e:5f:85:a2:f8:7f:52:
                    34:55:e4:73:87:52:82:f3:2a:6c:a1:af:64:03:c9:
                    63:5c:69:0a:96:57:b4:8c:43:11:2e:c6:5d:94:b3:
                    44:83:61:3f:67:ab:a6:5e:ec:62:27:ba:44:d1:86:
                    26:4d:ff:f2:4c:38:d4:a0:43:33:8c:95:bb:34:45:
                    2b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4D:48:02:3E:D2:B4:DD:07:6C:E8:E5:EE:AB:25:A3:C2:D7:5C:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/eaeb2381-815c-3c19-bef2-acee696a2e25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.86.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:a8:31:bc:60:87:65:17:d4:4a:68:26:5b:cf:16:dc:f8:d2:
         34:82:a1:43:3f:44:7e:e1:36:69:bf:0d:e2:64:27:35:43:98:
         d9:1d:8a:73:a5:95:19:cb:fe:0e:53:1a:a7:ef:12:cc:41:de:
         83:ec:14:87:bf:33:78:27:a3:3c:80:b4:07:51:9b:cb:aa:e8:
         22:8d:80:36:c6:da:16:44:fd:07:09:5f:7c:28:ad:b4:20:17:
         0c:46:27:62:10:71:70:bf:c9:dc:ed:4c:f1:95:82:3c:f6:5f:
         c4:e9:bc:19:df:ef:f6:7e:7e:97:78:5a:56:92:a6:3c:b1:84:
         73:71:e4:a5:6d:78:21:d9:8b:d5:93:c4:c3:23:51:2c:c0:07:
         f2:3f:3d:a2:f8:c1:dc:ed:20:40:89:b2:9a:8d:a0:d6:25:a8:
         59:7e:9b:e5:2c:89:20:9b:9b:31:89:37:45:88:bd:e5:95:0e:
         bd:3f:43:7f:10:1d:83:58:b7:f3:36:f9:f3:57:6a:78:46:de:
         f5:5c:a7:65:d7:4f:46:4f:d6:2d:94:8a:d1:a6:9c:4b:c7:8f:
         00:b3:23:fa:f2:8c:2a:2f:0e:f1:65:4f:ef:51:60:1e:fb:fa:
         5c:ac:43:8a:0c:9d:e4:62:52:d9:c7:97:63:2e:13:8c:cf:83:
         31:75:c2:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3026TT2qglMx1GQ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk
MjVmNTljMDQtMTI2NC00MDVjLTlmOWEtMTU1ZTQ2ZjM0M2Y1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL1q7T8os4KcayHIt7SgEgl7Q3Y70P7Vk1FJ
8WBTeFNfcUGCckjZGqFVKjFEk/0lCdob47DmxC9zq23lczHCn/uyOEV58WI6k6us
DIxccmsNNenLOqK+A91cd/952zfpdfJ/KT3scPhd4U8LbA/wV3++Y1eao9ugoz5g
467uFEpmjairDTcK+QxV6SrlDuDMZZVRuynEC2Fh1ZAAIJXO4zquuUthyfxhYbDP
bdOKyhLwCh9EWGzILYpN5S5fhaL4f1I0VeRzh1KC8ypsoa9kA8ljXGkKlle0jEMR
LsZdlLNEg2E/Z6umXuxiJ7pE0YYmTf/yTDjUoEMzjJW7NEUrDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCBNSAI+0rTdB2zo5e6rJaPC11y+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZWFlYjIzODEtODE1Yy0z
YzE5LWJlZjItYWNlZTY5NmEyZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxlb4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAKoMbxgh2UX1EpoJlvPFtz40jSCoUM/RH7hNmm/DeJkJzVDmNkdinOl
lRnL/g5TGqfvEsxB3oPsFIe/M3gnozyAtAdRm8uq6CKNgDbG2hZE/QcJX3worbQg
FwxGJ2IQcXC/ydztTPGVgjz2X8TpvBnf7/Z+fpd4WlaSpjyxhHNx5KVteCHZi9WT
xMMjUSzAB/I/PaL4wdztIECJspqNoNYlqFl+m+UsiSCbmzGJN0WIveWVDr0/Q38Q
HYNYt/M2+fNXanhG3vVcp2XXT0ZP1i2UitGmnEvHjwCzI/ryjCovDvFlT+9RYB77
+lysQ4oMneRiUtnHl2MuE4zPgzF1wp8=
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:33:16 2026 by rpki-client