Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/dd279b91-42b6-31bc-bf39-617e9a2d3e71.roa
File:                     dd279b91-42b6-31bc-bf39-617e9a2d3e71.roa (raw, json)
Hash identifier:          SnGjlSdNec/PUXDfqfHywzfMSgIyCVJpsRdga8K9cJk=
Subject key identifier:   8F:E0:74:69:C5:C9:5E:69:6F:56:4E:71:57:26:4F:54:F6:4E:3D:83
Certificate issuer:       /CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0
Certificate serial:       010D0C9F4328584D6C0FAEC27918377A1EBE2B80
Authority key identifier: 57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/dd279b91-42b6-31bc-bf39-617e9a2d3e71.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     11904
IP address blocks:        198.167.240.0/21 maxlen: 21
                          198.167.240.0/22 maxlen: 22
                          198.167.240.0/23 maxlen: 23
                          198.167.242.0/23 maxlen: 23
                          198.167.244.0/22 maxlen: 22
                          198.167.244.0/23 maxlen: 23
                          198.167.245.0/24 maxlen: 24
                          198.167.246.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:ae:c2:79:18:37:7a:1e:be:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=95969b79-30cc-43d7-b3cd-8dc6e4ecc11b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4d:0f:db:cf:a3:fb:8a:1c:df:45:ca:6d:f2:
                    d2:ef:00:eb:c6:fa:68:8f:84:82:5b:8e:4e:b5:44:
                    bf:57:b5:44:fb:53:0e:ad:8e:53:54:75:f7:d8:8c:
                    e5:4a:ee:d4:5a:6f:8d:55:d1:f8:c9:ec:80:c6:a3:
                    df:31:79:e0:37:95:8d:69:d8:a1:aa:e8:0d:c5:47:
                    bc:6f:71:86:5e:cd:9a:c6:26:a0:93:b5:44:30:06:
                    68:84:59:71:92:99:ce:75:ac:1a:d8:f2:52:ef:69:
                    15:3c:83:be:c1:6e:34:22:6c:12:3b:19:70:a1:48:
                    9f:6b:bd:a1:3e:a1:e6:40:ce:10:cb:59:dd:3e:b9:
                    8f:fc:5f:eb:f8:3e:32:1c:f2:f7:8f:20:ef:3a:8f:
                    c6:fa:a9:b1:1c:01:43:00:fa:4e:37:d5:e2:e2:38:
                    40:10:6f:fd:cb:5f:c0:cb:d3:c8:1c:b0:65:40:d5:
                    33:9a:8c:14:a5:67:26:90:0f:32:9a:01:e2:83:94:
                    d5:f9:99:85:31:f5:0e:8b:4d:ce:55:c2:e8:46:14:
                    8a:ac:2e:3a:65:dc:cb:ae:10:56:f9:c5:16:19:d5:
                    35:be:01:4d:86:7b:5d:b7:2f:01:51:51:ec:47:43:
                    d4:bf:6b:ca:80:6c:a4:3f:01:d0:36:64:87:09:11:
                    66:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E0:74:69:C5:C9:5E:69:6F:56:4E:71:57:26:4F:54:F6:4E:3D:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/dd279b91-42b6-31bc-bf39-617e9a2d3e71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.crl

            X509v3 Authority Key Identifier:
                keyid:57:89:14:A0:C0:11:E3:2A:7E:29:CE:9C:07:57:65:FE:5C:AC:89:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6133e47d-7c96-4a1f-9a5e-c2072f5e7fd0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.167.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:d4:b4:36:67:23:e3:96:34:8c:45:d2:db:2e:df:70:3a:61:
         ff:32:0f:37:78:9a:18:d3:56:a3:4d:f2:40:a6:bb:27:22:32:
         a3:46:61:0d:25:cb:88:3a:de:2e:b5:92:18:29:b5:54:e7:8e:
         94:19:ee:01:25:4c:78:b1:ba:7a:de:54:59:d8:ee:ca:62:3f:
         2f:da:d8:c4:3a:a8:e0:17:6b:9c:27:cf:81:66:26:32:7d:96:
         d0:29:fe:51:1b:dc:9b:a1:34:f9:02:a7:19:e7:ec:5a:e3:bf:
         dc:04:20:29:b2:d8:7c:ec:51:69:06:31:a9:ae:b8:18:84:bb:
         8c:d7:45:56:18:e8:c2:de:6e:4b:9d:f9:3f:bf:5b:f0:8c:5a:
         26:db:46:2f:5d:53:8b:bc:6b:8c:a2:1c:61:19:25:46:91:22:
         a7:24:98:bc:59:7a:7e:1e:da:05:7c:a6:68:98:94:20:39:89:
         81:16:40:dc:ce:98:05:25:7e:35:5f:8a:c8:53:90:a6:53:b8:
         b4:03:2c:cd:a8:22:05:46:7a:c6:c9:40:db:02:f6:c0:44:09:
         05:bc:96:51:63:12:6c:b5:ed:27:19:d9:43:f9:09:cb:40:19:
         39:70:31:68:54:97:d4:23:3b:c2:e3:b7:c8:73:ef:ab:12:4c:
         83:10:a4:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD67CeRg3eh6+K4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjEzM2U0N2QtN2M5Ni00YTFmLTlhNWUtYzIwNzJmNWU3
ZmQwMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk
OTU5NjliNzktMzBjYy00M2Q3LWIzY2QtOGRjNmU0ZWNjMTFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk0P28+j+4oc30XKbfLS7wDrxvpoj4SCW45O
tUS/V7VE+1MOrY5TVHX32IzlSu7UWm+NVdH4yeyAxqPfMXngN5WNadihqugNxUe8
b3GGXs2axiagk7VEMAZohFlxkpnOdawa2PJS72kVPIO+wW40ImwSOxlwoUifa72h
PqHmQM4Qy1ndPrmP/F/r+D4yHPL3jyDvOo/G+qmxHAFDAPpON9Xi4jhAEG/9y1/A
y9PIHLBlQNUzmowUpWcmkA8ymgHig5TV+ZmFMfUOi03OVcLoRhSKrC46ZdzLrhBW
+cUWGdU1vgFNhntdty8BUVHsR0PUv2vKgGykPwHQNmSHCRFmDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI/gdGnFyV5pb1ZOcVcmT1T2Tj2DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82MTMz
ZTQ3ZC03Yzk2LTRhMWYtOWE1ZS1jMjA3MmY1ZTdmZDAvZGQyNzliOTEtNDJiNi0z
MWJjLWJmMzktNjE3ZTlhMmQzZTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjEzM2U0N2QtN2M5Ni00YTFmLTlh
NWUtYzIwNzJmNWU3ZmQwLzYxMzNlNDdkLTdjOTYtNGExZi05YTVlLWMyMDcyZjVl
N2ZkMC5jcmwwHwYDVR0jBBgwFoAUV4kUoMAR4yp+Kc6cB1dl/lysiR8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82MTMzZTQ3ZC03Yzk2LTRhMWYtOWE1ZS1jMjA3
MmY1ZTdmZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxqfwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADrUtDZnI+OWNIxF0tsu33A6Yf8yDzd4mhjTVqNN8kCmuyciMqNGYQ0l
y4g63i61khgptVTnjpQZ7gElTHixunreVFnY7spiPy/a2MQ6qOAXa5wnz4FmJjJ9
ltAp/lEb3JuhNPkCpxnn7Frjv9wEICmy2HzsUWkGMamuuBiEu4zXRVYY6MLebkud
+T+/W/CMWibbRi9dU4u8a4yiHGEZJUaRIqckmLxZen4e2gV8pmiYlCA5iYEWQNzO
mAUlfjVfishTkKZTuLQDLM2oIgVGesbJQNsC9sBECQW8llFjEmy17ScZ2UP5CctA
GTlwMWhUl9QjO8Ljt8hz76sSTIMQpMU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:28:54 2026 by rpki-client