Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/cd337d2d-26cc-35ed-b565-266953cef062.roa
File:                     cd337d2d-26cc-35ed-b565-266953cef062.roa (raw, json)
Hash identifier:          97wphU66LOWhkpYQ2yjujFqTwMW9qtdAp6bVYxbpNTo=
Subject key identifier:   31:85:0B:6D:4E:C4:C5:BD:EE:D6:68:AD:24:38:5F:16:BA:3C:7F:5E
Certificate issuer:       /CN=27e2d7ee-d239-4928-9107-ceb95cacd0b8
Certificate serial:       010D0C9F4328584D4D5A43D699604B40F3556980
Authority key identifier: F6:CD:25:DF:15:39:74:43:10:7B:B9:CB:3F:43:71:1C:D0:3A:AF:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/cd337d2d-26cc-35ed-b565-266953cef062.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     54825
IP address blocks:        192.80.8.0/24 maxlen: 24
                          198.16.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:43:d6:99:60:4b:40:f3:55:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27e2d7ee-d239-4928-9107-ceb95cacd0b8
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=698f7008-96ce-48ee-82ee-d54f8e9b360f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f4:1d:94:b6:b8:ef:cc:02:e5:74:ea:dd:6f:
                    bd:bd:f0:74:95:85:94:11:0e:79:f0:01:b5:3b:be:
                    fd:5f:65:77:e8:38:57:a1:05:6e:43:06:9f:24:7b:
                    06:30:6b:0d:d9:c9:23:34:1d:10:01:fd:99:91:c9:
                    bb:f6:db:56:11:02:6d:79:fd:d1:f1:00:64:60:6c:
                    6c:cf:f4:fd:5b:be:a6:87:bf:fc:56:77:7d:af:3d:
                    0a:28:4e:70:b7:f1:9d:55:5c:72:39:38:b6:89:8c:
                    f9:df:c3:34:58:dc:6e:6b:41:a0:93:48:8e:19:bc:
                    e4:49:09:a2:6c:d1:ff:ee:45:c2:21:f5:76:99:ab:
                    af:c7:19:3d:5f:cf:13:61:8d:c6:00:a7:b0:ba:88:
                    3e:b7:8f:f5:ea:4e:21:20:f8:63:db:67:a2:45:2a:
                    6e:fc:8f:66:c5:f8:cc:71:53:be:f6:f8:36:99:3b:
                    6e:2c:fb:2a:09:43:53:52:b1:82:31:a2:76:d2:c9:
                    4a:5c:4b:31:f5:c5:3c:36:ff:09:da:38:e1:cd:38:
                    6a:cc:f3:9c:46:1c:b5:3a:29:93:a4:19:78:03:9d:
                    e0:da:92:a0:e6:6b:47:d8:aa:62:e8:82:9f:b5:1e:
                    66:75:e7:80:9a:e2:d9:24:f4:d8:0a:1d:0d:ec:cd:
                    03:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:85:0B:6D:4E:C4:C5:BD:EE:D6:68:AD:24:38:5F:16:BA:3C:7F:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/cd337d2d-26cc-35ed-b565-266953cef062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.crl

            X509v3 Authority Key Identifier:
                keyid:F6:CD:25:DF:15:39:74:43:10:7B:B9:CB:3F:43:71:1C:D0:3A:AF:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.8.0/24
                  198.16.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:72:48:78:ec:64:0e:56:79:f1:3a:cb:77:aa:03:fa:05:a4:
         eb:1a:e8:ab:86:63:11:0d:b4:b5:21:e5:10:d2:d5:0b:c7:2c:
         8c:dd:dc:46:20:9c:66:f1:e0:8e:5f:49:21:71:83:e5:10:ab:
         cd:b5:5a:0c:99:c6:fe:37:68:fc:55:a2:38:44:74:88:83:4d:
         38:fe:87:88:77:cb:5c:60:4a:7f:7f:65:e0:be:96:a2:e5:49:
         03:ec:6f:09:70:81:88:f0:a4:42:23:fc:09:49:eb:f4:38:19:
         af:7b:59:69:26:91:e9:f4:9b:e1:8a:e9:67:66:73:ba:55:38:
         10:eb:6e:cf:4c:12:ec:86:0a:db:db:42:69:55:29:98:8e:da:
         83:90:69:06:f8:2b:b4:93:08:bf:33:37:02:23:64:a1:2e:e5:
         80:7b:6e:81:e3:13:7f:9d:32:32:f7:58:38:91:52:cc:9a:83:
         52:8e:c8:a1:fd:48:df:2a:46:99:41:67:28:8d:7c:b1:31:3d:
         20:da:34:30:ad:f3:8d:5a:86:11:dc:ec:e1:e1:2e:b1:5c:82:
         54:58:53:79:c0:22:31:e0:18:1f:6b:34:7d:4f:92:d7:ea:bd:
         b4:80:9b:1e:34:2c:dd:bd:16:fd:34:04:7f:75:a1:53:ee:c0:
         eb:6c:44:52
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE1NWkPWmWBLQPNVaYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjdlMmQ3ZWUtZDIzOS00OTI4LTkxMDctY2ViOTVjYWNk
MGI4MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk
Njk4ZjcwMDgtOTZjZS00OGVlLTgyZWUtZDU0ZjhlOWIzNjBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/QdlLa478wC5XTq3W+9vfB0lYWUEQ558AG1
O779X2V36DhXoQVuQwafJHsGMGsN2ckjNB0QAf2Zkcm79ttWEQJtef3R8QBkYGxs
z/T9W76mh7/8Vnd9rz0KKE5wt/GdVVxyOTi2iYz538M0WNxua0Ggk0iOGbzkSQmi
bNH/7kXCIfV2mauvxxk9X88TYY3GAKewuog+t4/16k4hIPhj22eiRSpu/I9mxfjM
cVO+9vg2mTtuLPsqCUNTUrGCMaJ20slKXEsx9cU8Nv8J2jjhzThqzPOcRhy1OimT
pBl4A53g2pKg5mtH2Kpi6IKftR5mdeeAmuLZJPTYCh0N7M0DIwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFDGFC21OxMW97tZorSQ4Xxa6PH9eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yN2Uy
ZDdlZS1kMjM5LTQ5MjgtOTEwNy1jZWI5NWNhY2QwYjgvY2QzMzdkMmQtMjZjYy0z
NWVkLWI1NjUtMjY2OTUzY2VmMDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjdlMmQ3ZWUtZDIzOS00OTI4LTkx
MDctY2ViOTVjYWNkMGI4LzI3ZTJkN2VlLWQyMzktNDkyOC05MTA3LWNlYjk1Y2Fj
ZDBiOC5jcmwwHwYDVR0jBBgwFoAU9s0l3xU5dEMQe7nLP0NxHNA6r8cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yN2UyZDdlZS1kMjM5LTQ5MjgtOTEwNy1jZWI5
NWNhY2QwYjguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwFAIAwQC
xhAEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAGtySHjsZA5WefE6y3eqA/oFpOsa6KuGYxENtLUh5RDS1QvH
LIzd3EYgnGbx4I5fSSFxg+UQq821WgyZxv43aPxVojhEdIiDTTj+h4h3y1xgSn9/
ZeC+lqLlSQPsbwlwgYjwpEIj/AlJ6/Q4Ga97WWkmken0m+GK6Wdmc7pVOBDrbs9M
EuyGCtvbQmlVKZiO2oOQaQb4K7STCL8zNwIjZKEu5YB7boHjE3+dMjL3WDiRUsya
g1KOyKH9SN8qRplBZyiNfLExPSDaNDCt841ahhHc7OHhLrFcglRYU3nAIjHgGB9r
NH1PktfqvbSAmx40LN29Fv00BH91oVPuwOtsRFI=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:49:39 2026 by rpki-client