Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5142e43f-b63e-3a97-b1d4-a9d6e02f3813.roa
File:                     5142e43f-b63e-3a97-b1d4-a9d6e02f3813.roa (raw, json)
Hash identifier:          xeWl9Rk7+bxBUbUTH6ERWwceLfLsUpd7YW3HMBYDJp4=
Subject key identifier:   A5:2A:57:C8:8C:76:F6:A5:C0:0D:44:7B:93:74:C6:83:78:6A:65:2E
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584E02D07BD86501B09B25699E80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5142e43f-b63e-3a97-b1d4-a9d6e02f3813.roa
Signing time:             Sun 31 May 2026 01:00:10 +0000
ROA not before:           Sun 31 May 2026 01:00:10 +0000
ROA not after:            Sat 29 Aug 2026 01:00:10 +0000
asID:                     834
IP address blocks:        209.236.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:02:d0:7b:d8:65:01:b0:9b:25:69:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 31 01:00:10 2026 GMT
            Not After : Aug 29 01:00:10 2026 GMT
        Subject: CN=014cd39b-5e58-4ae0-b9f0-faed02efc070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bb:25:13:a9:eb:0b:17:6a:f9:03:64:2f:f0:
                    e2:cd:d1:54:f7:ba:32:4b:15:77:36:6d:53:d1:18:
                    a3:9e:64:e5:83:0a:c6:2d:b0:b7:60:f6:01:90:58:
                    d9:4a:63:cd:2e:70:83:80:c5:1a:fb:9f:8b:8f:51:
                    ab:74:15:ae:25:cb:c2:c1:ff:ff:9a:c0:86:3c:df:
                    a8:ca:72:09:c8:42:4c:a3:86:97:1b:cf:8c:66:18:
                    dd:07:97:c0:fc:fa:f2:03:63:bb:e8:c4:8b:63:e3:
                    69:09:45:c3:3e:05:6c:fd:d9:8f:40:43:f4:38:02:
                    bd:9b:a0:85:2f:10:a4:27:31:c9:21:29:1a:f7:bb:
                    f6:e4:37:20:50:15:0e:a1:99:fd:87:29:98:20:f8:
                    bc:3b:9a:8a:54:cb:fc:05:45:d9:43:1a:55:2a:28:
                    0f:05:99:f3:1a:51:ab:ae:a1:cf:1d:04:17:c0:23:
                    33:55:a1:4b:27:6e:dd:33:0e:19:4a:76:28:be:38:
                    18:cf:86:4c:a1:04:7a:23:97:50:e7:0b:4a:68:52:
                    1e:16:87:3b:11:99:06:72:97:b6:cb:b2:b6:61:85:
                    65:af:b4:19:8c:94:48:c8:5c:90:28:15:ba:6f:19:
                    63:0f:8a:1f:5f:4f:77:16:46:9b:7a:0b:d3:90:50:
                    3c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:2A:57:C8:8C:76:F6:A5:C0:0D:44:7B:93:74:C6:83:78:6A:65:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5142e43f-b63e-3a97-b1d4-a9d6e02f3813.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.236.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e5:24:cb:27:fa:86:9e:72:58:11:37:64:cd:43:f5:c7:cd:e0:
         1e:89:4c:c5:04:a9:02:68:6e:2a:09:03:d5:f7:8f:cd:0f:f3:
         8d:17:59:65:b7:ba:ee:cf:92:cb:e3:63:94:a1:b2:da:48:c8:
         37:3c:c2:db:72:14:f0:d1:cc:18:43:1d:de:e0:1d:0f:35:e5:
         5d:e8:e3:ab:7b:d7:7e:06:62:27:4a:3c:af:2c:94:47:b1:2b:
         c7:8c:37:63:ab:ab:cd:85:5b:60:63:58:eb:03:bb:6b:ab:2a:
         ee:c8:15:a7:48:56:18:2a:7c:f4:ce:b5:14:08:e0:4a:68:fb:
         29:45:02:35:34:c5:49:91:58:b1:c6:0c:88:40:dc:99:60:f4:
         86:f8:ba:e3:47:6a:bb:b0:1a:4e:80:be:78:3f:e1:5f:1a:2f:
         4b:4a:73:ff:f2:b3:f4:d9:93:df:19:2f:e0:33:c8:24:2d:c8:
         e3:6f:fc:0d:18:25:f0:e6:83:08:51:2f:70:f8:ac:25:6a:35:
         5b:5e:4c:1d:96:f4:a6:a4:d8:db:35:ad:17:1e:74:bf:5c:f7:
         dd:bd:fb:c8:86:b6:32:19:e8:69:2f:8c:63:3c:01:29:9e:2a:
         08:49:4b:fa:42:6c:56:fe:92:e6:5b:c0:a3:1a:95:53:1f:bc:
         45:7a:9c:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4C0HvYZQGwmyVpnoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDUzMTAxMDAxMFoXDTI2MDgyOTAxMDAxMFowLzEtMCsGA1UEAxMk
MDE0Y2QzOWItNWU1OC00YWUwLWI5ZjAtZmFlZDAyZWZjMDcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrslE6nrCxdq+QNkL/DizdFU97oySxV3Nm1T
0RijnmTlgwrGLbC3YPYBkFjZSmPNLnCDgMUa+5+Lj1GrdBWuJcvCwf//msCGPN+o
ynIJyEJMo4aXG8+MZhjdB5fA/PryA2O76MSLY+NpCUXDPgVs/dmPQEP0OAK9m6CF
LxCkJzHJISka97v25DcgUBUOoZn9hymYIPi8O5qKVMv8BUXZQxpVKigPBZnzGlGr
rqHPHQQXwCMzVaFLJ27dMw4ZSnYovjgYz4ZMoQR6I5dQ5wtKaFIeFoc7EZkGcpe2
y7K2YYVlr7QZjJRIyFyQKBW6bxljD4ofX093FkabegvTkFA8lwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKUqV8iMdvalwA1Ee5N0xoN4amUuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNTE0MmU0M2YtYjYzZS0z
YTk3LWIxZDQtYTlkNmUwMmYzODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ezfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAOUkyyf6hp5yWBE3ZM1D9cfN4B6JTMUEqQJobioJA9X3j80P840XWWW3
uu7PksvjY5ShstpIyDc8wttyFPDRzBhDHd7gHQ815V3o46t7134GYidKPK8slEex
K8eMN2Orq82FW2BjWOsDu2urKu7IFadIVhgqfPTOtRQI4Epo+ylFAjU0xUmRWLHG
DIhA3Jlg9Ib4uuNHaruwGk6Avng/4V8aL0tKc//ys/TZk98ZL+AzyCQtyONv/A0Y
JfDmgwhRL3D4rCVqNVteTB2W9Kak2Ns1rRcedL9c9929+8iGtjIZ6GkvjGM8ASme
KghJS/pCbFb+kuZbwKMalVMfvEV6nGw=
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:05:55 2026 by rpki-client