Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/cfb18649-d381-3b8e-8c0d-7a5962362836.roa
File:                     cfb18649-d381-3b8e-8c0d-7a5962362836.roa (raw, json)
Hash identifier:          MyLYGGJOnGJHz89JPZHZJVmohwWir77qljKgaha2gCA=
Subject key identifier:   89:28:7C:96:2C:DD:EA:40:1C:FB:98:37:E4:37:A0:F5:BE:5E:3E:D9
Certificate issuer:       /CN=c98d46fd-3b1c-46a7-b369-35b753e6c60e
Certificate serial:       010D0C9F4328584E09CB43E472AD78CE9018F600
Authority key identifier: 1A:35:7E:67:CF:79:42:57:0E:DA:D8:43:CB:B1:15:EA:1D:D6:03:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/cfb18649-d381-3b8e-8c0d-7a5962362836.roa
Signing time:             Tue 02 Jun 2026 13:00:10 +0000
ROA not before:           Tue 02 Jun 2026 13:00:10 +0000
ROA not after:            Mon 31 Aug 2026 13:00:10 +0000
asID:                     26077
IP address blocks:        161.38.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:cb:43:e4:72:ad:78:ce:90:18:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98d46fd-3b1c-46a7-b369-35b753e6c60e
        Validity
            Not Before: Jun  2 13:00:10 2026 GMT
            Not After : Aug 31 13:00:10 2026 GMT
        Subject: CN=77c924f8-6c00-451b-b8f8-58ee39bbf803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:89:97:cd:37:2d:b9:1f:0d:75:e9:f1:2f:d6:
                    d5:0c:72:54:25:a8:50:37:41:84:d2:1c:a1:f3:6b:
                    b2:2a:2c:39:3a:55:11:0e:9f:8d:8a:6e:20:73:06:
                    94:ea:4c:88:69:a5:84:3e:dd:4e:73:05:95:50:b5:
                    4a:f0:50:ba:d4:b4:0b:ad:83:56:4c:39:57:93:b6:
                    26:ef:0d:f1:e3:3d:bf:38:da:a5:2f:5e:c9:32:ec:
                    ff:49:0e:ae:75:02:0e:2a:fc:c3:18:4e:7f:48:87:
                    8c:3d:88:f5:63:63:b6:12:35:5f:f3:d6:fd:85:49:
                    2c:4e:f8:65:8e:0c:73:a9:37:e3:eb:b2:b5:ba:a6:
                    34:53:3d:c8:49:20:0c:81:ff:a2:ce:bd:73:e9:5f:
                    25:74:f5:11:8b:ab:da:33:3c:21:f9:83:24:ce:ba:
                    63:b1:61:66:c2:6f:f0:ff:6b:4e:d6:27:ef:a8:36:
                    1f:a3:d4:15:a8:38:73:46:d0:22:57:f1:9f:34:55:
                    2c:5b:bb:e2:de:47:a3:b5:15:e2:fb:f1:25:a9:44:
                    fc:2b:a9:76:4f:87:ea:e3:ac:3f:6c:39:95:dd:da:
                    ba:95:8c:66:61:85:db:6b:64:5b:74:35:a1:02:eb:
                    7a:65:4b:f4:ce:63:e2:71:5c:10:b7:9a:44:c8:5e:
                    ff:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:28:7C:96:2C:DD:EA:40:1C:FB:98:37:E4:37:A0:F5:BE:5E:3E:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/cfb18649-d381-3b8e-8c0d-7a5962362836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e/c98d46fd-3b1c-46a7-b369-35b753e6c60e.crl

            X509v3 Authority Key Identifier:
                keyid:1A:35:7E:67:CF:79:42:57:0E:DA:D8:43:CB:B1:15:EA:1D:D6:03:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c98d46fd-3b1c-46a7-b369-35b753e6c60e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:b3:e6:52:f3:fc:c0:74:17:0f:9f:33:57:ba:2e:59:bf:b7:
         57:ef:1c:41:a0:3b:87:f6:52:01:23:f6:4d:66:3d:85:cb:e8:
         df:8e:78:7b:9b:2f:b0:d8:74:e4:bb:02:53:a6:76:2f:3d:bc:
         4c:8d:b8:24:49:04:e1:3d:96:85:e1:e5:26:4d:c3:56:33:78:
         d1:e7:66:8a:52:0c:fc:98:1d:e6:19:01:48:fa:82:49:da:54:
         9d:45:e3:be:dc:45:78:5d:c9:a4:34:23:6e:61:94:6b:40:e2:
         f8:2e:ca:14:00:25:4e:de:87:77:7c:50:3d:9e:a2:45:16:6c:
         d4:e1:4e:1a:9b:4c:11:8f:50:f5:50:74:66:f7:a7:25:18:8b:
         65:0f:ea:05:0e:f2:e3:7a:f3:88:38:11:6c:d6:a6:2e:14:c1:
         73:e5:fd:cc:c4:2f:cd:95:42:7e:82:e4:b8:1d:01:9f:d1:42:
         e2:f9:e6:39:02:ff:26:1f:d2:4e:41:1b:e9:58:46:bd:d0:5c:
         8c:35:bd:a7:ff:6c:33:2e:a3:42:88:72:d2:11:28:79:d1:78:
         2e:fa:ff:27:75:b5:61:ea:38:ef:98:69:b3:cc:6f:2b:41:b1:
         8e:61:52:89:4c:b6:f2:fa:63:2c:a4:ac:d3:e3:44:f0:07:61:
         e4:0e:c7:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Jy0Pkcq14zpAY9gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzk4ZDQ2ZmQtM2IxYy00NmE3LWIzNjktMzViNzUzZTZj
NjBlMB4XDTI2MDYwMjEzMDAxMFoXDTI2MDgzMTEzMDAxMFowLzEtMCsGA1UEAxMk
NzdjOTI0ZjgtNmMwMC00NTFiLWI4ZjgtNThlZTM5YmJmODAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4mXzTctuR8NdenxL9bVDHJUJahQN0GE0hyh
82uyKiw5OlURDp+Nim4gcwaU6kyIaaWEPt1OcwWVULVK8FC61LQLrYNWTDlXk7Ym
7w3x4z2/ONqlL17JMuz/SQ6udQIOKvzDGE5/SIeMPYj1Y2O2EjVf89b9hUksTvhl
jgxzqTfj67K1uqY0Uz3ISSAMgf+izr1z6V8ldPURi6vaMzwh+YMkzrpjsWFmwm/w
/2tO1ifvqDYfo9QVqDhzRtAiV/GfNFUsW7vi3kejtRXi+/ElqUT8K6l2T4fq46w/
bDmV3dq6lYxmYYXba2RbdDWhAut6ZUv0zmPicVwQt5pEyF7/iwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIkofJYs3epAHPuYN+Q3oPW+Xj7ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jOThk
NDZmZC0zYjFjLTQ2YTctYjM2OS0zNWI3NTNlNmM2MGUvY2ZiMTg2NDktZDM4MS0z
YjhlLThjMGQtN2E1OTYyMzYyODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYzk4ZDQ2ZmQtM2IxYy00NmE3LWIz
NjktMzViNzUzZTZjNjBlL2M5OGQ0NmZkLTNiMWMtNDZhNy1iMzY5LTM1Yjc1M2U2
YzYwZS5jcmwwHwYDVR0jBBgwFoAUGjV+Z895QlcO2thDy7EV6h3WAw4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jOThkNDZmZC0zYjFjLTQ2YTctYjM2OS0zNWI3
NTNlNmM2MGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoSYIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAASz5lLz/MB0Fw+fM1e6Llm/t1fvHEGgO4f2UgEj9k1mPYXL6N+OeHub
L7DYdOS7AlOmdi89vEyNuCRJBOE9loXh5SZNw1YzeNHnZopSDPyYHeYZAUj6gkna
VJ1F477cRXhdyaQ0I25hlGtA4vguyhQAJU7eh3d8UD2eokUWbNThThqbTBGPUPVQ
dGb3pyUYi2UP6gUO8uN684g4EWzWpi4UwXPl/czEL82VQn6C5LgdAZ/RQuL55jkC
/yYf0k5BG+lYRr3QXIw1vaf/bDMuo0KIctIRKHnReC76/yd1tWHqOO+YabPMbytB
sY5hUolMtvL6YyykrNPjRPAHYeQOx3M=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:33:19 2026 by rpki-client