Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e5980411-174b-477f-83d7-607e6bdd6922/5562d195-b8f9-37e5-aab2-56038d9c2a9e.roa
File:                     5562d195-b8f9-37e5-aab2-56038d9c2a9e.roa (raw, json)
Hash identifier:          u9kOp5CoJ4mLGW1JXEfEPQX04E4YYLATD6x5h1HpvSs=
Subject key identifier:   D8:FE:34:5B:EC:A5:2D:E0:AE:D3:F2:E8:B7:8B:F7:4D:03:A3:CB:E3
Certificate issuer:       /CN=e5980411-174b-477f-83d7-607e6bdd6922
Certificate serial:       010D0C9F4328584D86955B6A2658AD7B2666D900
Authority key identifier: 40:FD:5A:CB:DD:94:63:EB:3F:A1:C3:D2:B3:DD:20:54:77:83:1B:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e5980411-174b-477f-83d7-607e6bdd6922.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e5980411-174b-477f-83d7-607e6bdd6922/5562d195-b8f9-37e5-aab2-56038d9c2a9e.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     40463
IP address blocks:        209.178.216.0/21 maxlen: 24
                          2602:f9fd::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e5980411-174b-477f-83d7-607e6bdd6922/e5980411-174b-477f-83d7-607e6bdd6922.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e5980411-174b-477f-83d7-607e6bdd6922/e5980411-174b-477f-83d7-607e6bdd6922.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e5980411-174b-477f-83d7-607e6bdd6922.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:5b:6a:26:58:ad:7b:26:66:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5980411-174b-477f-83d7-607e6bdd6922
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=8f053503-6ec7-400b-986a-6dc46ae5398b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:99:e2:ff:a0:41:15:4c:50:85:5f:b3:44:ad:
                    f6:b0:97:c3:cf:5c:58:71:56:23:06:31:7a:bc:e2:
                    5e:00:d2:ce:99:a0:c2:16:fb:72:b7:7a:5a:86:5b:
                    37:27:01:e9:e0:ae:09:31:ca:1d:e5:af:8d:f1:40:
                    65:25:d7:f3:9f:a9:69:d3:a3:1e:a6:7e:a7:f5:36:
                    f1:d6:bc:08:00:72:94:41:81:37:55:64:1f:35:88:
                    82:76:77:34:01:7d:6c:1b:6e:21:01:d2:48:b3:7a:
                    0b:54:87:23:e5:bf:52:8f:20:52:0c:67:56:d6:ee:
                    1a:b8:3a:4a:65:f3:03:2a:16:c2:d4:d4:c8:e8:a3:
                    fe:eb:ae:0b:ca:7d:8d:ef:e4:71:2e:67:7e:af:69:
                    64:93:c4:55:eb:14:05:21:a8:b0:8b:88:64:b7:7e:
                    42:88:ce:72:5a:4e:7a:cc:e4:bb:48:da:59:c0:b8:
                    b8:4e:e1:21:33:c6:3d:84:74:6b:9e:ab:07:75:5d:
                    27:81:a9:72:a8:7a:30:0a:00:82:a0:42:5e:3d:82:
                    81:51:90:d1:57:a6:5b:54:d4:cc:70:c6:a3:b0:6c:
                    26:51:b9:62:69:dd:30:88:6a:9c:2f:2b:3c:b8:b7:
                    3f:83:82:62:fa:ff:82:d1:2b:2e:05:24:63:66:64:
                    88:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FE:34:5B:EC:A5:2D:E0:AE:D3:F2:E8:B7:8B:F7:4D:03:A3:CB:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e5980411-174b-477f-83d7-607e6bdd6922/5562d195-b8f9-37e5-aab2-56038d9c2a9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e5980411-174b-477f-83d7-607e6bdd6922/e5980411-174b-477f-83d7-607e6bdd6922.crl

            X509v3 Authority Key Identifier:
                keyid:40:FD:5A:CB:DD:94:63:EB:3F:A1:C3:D2:B3:DD:20:54:77:83:1B:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e5980411-174b-477f-83d7-607e6bdd6922.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.178.216.0/21
                IPv6:
                  2602:f9fd::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:f8:e1:23:05:df:db:a2:a5:22:41:88:3d:b7:63:84:76:26:
         4e:e6:b1:6d:d2:64:48:a6:b9:b0:f7:11:3b:46:65:b5:3d:ef:
         54:88:35:56:ec:fb:25:35:6d:3f:7e:c8:e8:d4:ec:6f:6e:96:
         9c:fe:16:ec:f3:f8:50:f6:ed:d3:ee:79:66:66:06:6e:69:7b:
         3b:0f:af:24:e5:53:1c:13:60:bf:f2:3e:27:ef:d6:55:9f:8d:
         11:e6:14:03:32:39:72:e1:d7:c6:78:97:b5:20:02:49:52:5f:
         25:0a:1b:dc:79:0a:74:e4:4d:9a:ba:8a:62:61:d0:f9:ba:7c:
         3e:9a:bc:74:c7:7f:c8:47:7f:a4:7d:b1:2a:91:75:f0:f7:03:
         80:8b:86:16:04:83:04:66:a9:56:b4:54:5f:c6:6c:1f:80:64:
         1e:1a:90:26:d5:3e:ba:27:72:59:14:39:6d:c4:de:e0:b9:29:
         a6:a7:19:b4:64:a6:48:eb:a3:15:36:83:87:cf:47:94:08:82:
         ff:26:06:ae:55:13:0d:c7:25:a3:ce:b6:94:81:7f:61:bd:74:
         c7:71:43:06:bf:86:e5:1d:de:f1:88:db:0a:bb:1e:ed:7e:76:
         ed:fc:4e:26:cd:c8:1a:81:14:d7:d6:58:ed:f6:91:b2:b6:b7:
         e7:cf:93:d0
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE2GlVtqJliteyZm2QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTU5ODA0MTEtMTc0Yi00NzdmLTgzZDctNjA3ZTZiZGQ2
OTIyMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk
OGYwNTM1MDMtNmVjNy00MDBiLTk4NmEtNmRjNDZhZTUzOThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJni/6BBFUxQhV+zRK32sJfDz1xYcVYjBjF6
vOJeANLOmaDCFvtyt3pahls3JwHp4K4JMcod5a+N8UBlJdfzn6lp06Mepn6n9Tbx
1rwIAHKUQYE3VWQfNYiCdnc0AX1sG24hAdJIs3oLVIcj5b9SjyBSDGdW1u4auDpK
ZfMDKhbC1NTI6KP+664Lyn2N7+RxLmd+r2lkk8RV6xQFIaiwi4hkt35CiM5yWk56
zOS7SNpZwLi4TuEhM8Y9hHRrnqsHdV0ngalyqHowCgCCoEJePYKBUZDRV6ZbVNTM
cMajsGwmUbliad0wiGqcLys8uLc/g4Ji+v+C0SsuBSRjZmSItQIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFNj+NFvspS3grtPy6LeL900Do8vjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lNTk4
MDQxMS0xNzRiLTQ3N2YtODNkNy02MDdlNmJkZDY5MjIvNTU2MmQxOTUtYjhmOS0z
N2U1LWFhYjItNTYwMzhkOWMyYTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTU5ODA0MTEtMTc0Yi00NzdmLTgz
ZDctNjA3ZTZiZGQ2OTIyL2U1OTgwNDExLTE3NGItNDc3Zi04M2Q3LTYwN2U2YmRk
NjkyMi5jcmwwHwYDVR0jBBgwFoAUQP1ay92UY+s/ocPSs90gVHeDG4wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9lNTk4MDQxMS0xNzRiLTQ3N2YtODNkNy02MDdl
NmJkZDY5MjIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQD0bLYMA0E
AgACMAcDBQAmAvn9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAFn44SMF39uipSJBiD23Y4R2Jk7msW3SZEim
ubD3ETtGZbU971SINVbs+yU1bT9+yOjU7G9ulpz+Fuzz+FD27dPueWZmBm5pezsP
ryTlUxwTYL/yPifv1lWfjRHmFAMyOXLh18Z4l7UgAklSXyUKG9x5CnTkTZq6imJh
0Pm6fD6avHTHf8hHf6R9sSqRdfD3A4CLhhYEgwRmqVa0VF/GbB+AZB4akCbVPron
clkUOW3E3uC5KaanGbRkpkjroxU2g4fPR5QIgv8mBq5VEw3HJaPOtpSBf2G9dMdx
Qwa/huUd3vGI2wq7Hu1+du38TibNyBqBFNfWWO32kbK2t+fPk9A=
-----END CERTIFICATE-----
Generated at Sat Apr 18 04:00:42 2026 by rpki-client