Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/d1a1d0b0-a062-33ea-95ef-6f49f11b6ba7.roa
File:                     d1a1d0b0-a062-33ea-95ef-6f49f11b6ba7.roa (raw, json)
Hash identifier:          zVLRR6FgsbijKc6kPb+SruvDANq4mS8grnMb9XP5Ywo=
Subject key identifier:   5C:F1:B5:4E:4F:B5:17:AA:EC:FE:9E:FB:A1:01:2D:5B:2D:17:CF:F5
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F4328584DDBBB0B786D537E3E8D88BAC0
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/d1a1d0b0-a062-33ea-95ef-6f49f11b6ba7.roa
Signing time:             Sun 17 May 2026 01:00:24 +0000
ROA not before:           Sun 17 May 2026 01:00:24 +0000
ROA not after:            Sat 15 Aug 2026 01:00:24 +0000
asID:                     14537
IP address blocks:        198.37.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:db:bb:0b:78:6d:53:7e:3e:8d:88:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: May 17 01:00:24 2026 GMT
            Not After : Aug 15 01:00:24 2026 GMT
        Subject: CN=1f3b0679-3ac7-4a98-a60f-05610915949b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2b:c4:6d:75:80:cd:47:c1:71:5c:d1:77:5a:
                    53:04:9b:8a:0b:1e:90:18:f6:a8:83:9c:8c:4f:21:
                    46:44:0d:56:aa:9e:85:6f:1c:29:2a:ec:e3:8a:71:
                    ee:03:2d:9e:08:58:60:56:0e:3a:69:1b:05:8b:21:
                    ef:30:48:80:15:1f:4b:2b:b2:d9:93:7a:28:f6:49:
                    46:14:28:a4:f5:36:29:d0:11:ea:38:35:a7:6c:59:
                    90:ab:29:b9:c4:3f:c5:b8:ce:02:0b:1f:07:17:d7:
                    63:79:f7:ad:ec:ad:69:62:a5:68:e3:eb:68:84:06:
                    13:d9:4e:e0:87:c1:ce:ea:44:19:c4:32:f7:65:f0:
                    b7:91:cb:05:65:4e:0d:2d:9e:a1:6b:b2:bd:e2:ca:
                    d5:c2:e7:9e:be:3d:ba:40:1b:16:44:7b:06:47:ef:
                    6a:26:af:43:90:c6:36:bd:93:d7:29:1c:3c:39:ae:
                    b4:89:3f:49:e1:1a:39:05:0a:87:7c:95:fa:96:ac:
                    77:87:69:1d:5b:db:ed:99:a0:90:80:ce:ba:c1:dc:
                    32:fa:c0:05:c2:4f:09:2d:c6:93:30:bb:b0:b6:88:
                    45:0b:55:44:67:8c:ca:6e:31:06:6d:0b:1d:b3:b9:
                    5d:76:24:87:f7:15:a3:3d:55:5a:40:0f:fd:c8:1a:
                    30:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F1:B5:4E:4F:B5:17:AA:EC:FE:9E:FB:A1:01:2D:5B:2D:17:CF:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/d1a1d0b0-a062-33ea-95ef-6f49f11b6ba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:c0:59:b3:dd:da:41:87:bf:ed:2c:54:bf:61:e5:40:7c:c9:
         6f:23:cd:6f:e0:d7:89:d9:1d:a2:a1:c5:32:1d:68:c1:8a:60:
         61:89:69:92:92:5c:a9:a9:b3:d8:9b:97:c3:4b:43:30:67:2d:
         fa:d4:5b:8b:61:36:93:2e:90:2d:39:9c:c0:1b:c5:81:e5:3e:
         90:48:30:ab:3f:e4:47:97:55:d3:ac:36:e4:0b:d5:5f:0e:74:
         6e:78:bf:ce:83:0f:c5:9b:5e:cd:f0:b2:68:c9:dc:9f:c2:2e:
         fe:26:17:9e:81:db:40:9d:28:d6:85:b9:d8:48:a3:5a:f5:92:
         9f:97:c2:b6:9b:0d:c2:a3:04:a5:ca:c8:00:fb:69:e5:fe:54:
         e8:85:e0:87:aa:03:2e:85:05:4d:27:61:cd:28:d2:7b:5d:c1:
         fd:d2:8d:67:fc:ac:a1:8e:00:34:4b:18:6d:92:c7:66:d1:e1:
         19:22:fd:21:1f:7f:4e:14:a1:75:3d:ff:97:ff:33:bd:d7:19:
         a6:75:48:a2:61:d3:8f:ff:64:3d:d6:3a:15:36:b3:19:9f:37:
         61:49:6c:b9:7d:94:80:86:1f:52:13:01:08:2e:dc:a8:10:cd:
         53:07:3b:96:9d:8d:e4:29:ef:00:99:ef:03:c9:5d:bb:e3:67:
         2f:20:e8:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3buwt4bVN+Po2IusAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJkZmJjMjAtYjQ4ZC00YWQzLTlhZGEtYWFhMWE4ODU3
MGRjMB4XDTI2MDUxNzAxMDAyNFoXDTI2MDgxNTAxMDAyNFowLzEtMCsGA1UEAxMk
MWYzYjA2NzktM2FjNy00YTk4LWE2MGYtMDU2MTA5MTU5NDliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyvEbXWAzUfBcVzRd1pTBJuKCx6QGPaog5yM
TyFGRA1Wqp6FbxwpKuzjinHuAy2eCFhgVg46aRsFiyHvMEiAFR9LK7LZk3oo9klG
FCik9TYp0BHqODWnbFmQqym5xD/FuM4CCx8HF9djefet7K1pYqVo4+tohAYT2U7g
h8HO6kQZxDL3ZfC3kcsFZU4NLZ6ha7K94srVwueevj26QBsWRHsGR+9qJq9DkMY2
vZPXKRw8Oa60iT9J4Ro5BQqHfJX6lqx3h2kdW9vtmaCQgM66wdwy+sAFwk8JLcaT
MLuwtohFC1VEZ4zKbjEGbQsds7lddiSH9xWjPVVaQA/9yBow3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFzxtU5PtReq7P6e+6EBLVstF8/1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRm
YmMyMC1iNDhkLTRhZDMtOWFkYS1hYWExYTg4NTcwZGMvZDFhMWQwYjAtYTA2Mi0z
M2VhLTk1ZWYtNmY0OWYxMWI2YmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjJkZmJjMjAtYjQ4ZC00YWQzLTlh
ZGEtYWFhMWE4ODU3MGRjLzIyZGZiYzIwLWI0OGQtNGFkMy05YWRhLWFhYTFhODg1
NzBkYy5jcmwwHwYDVR0jBBgwFoAU1CRpq+RlUcheIrjvsqe6UvFiZYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMmRmYmMyMC1iNDhkLTRhZDMtOWFkYS1hYWEx
YTg4NTcwZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxiUyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHTAWbPd2kGHv+0sVL9h5UB8yW8jzW/g14nZHaKhxTIdaMGKYGGJaZKS
XKmps9ibl8NLQzBnLfrUW4thNpMukC05nMAbxYHlPpBIMKs/5EeXVdOsNuQL1V8O
dG54v86DD8WbXs3wsmjJ3J/CLv4mF56B20CdKNaFudhIo1r1kp+XwrabDcKjBKXK
yAD7aeX+VOiF4IeqAy6FBU0nYc0o0ntdwf3SjWf8rKGOADRLGG2Sx2bR4Rki/SEf
f04UoXU9/5f/M73XGaZ1SKJh04//ZD3WOhU2sxmfN2FJbLl9lICGH1ITAQgu3KgQ
zVMHO5adjeQp7wCZ7wPJXbvjZy8g6PE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:47:25 2026 by rpki-client