Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fedbf02b-de87-4991-b290-2a4b996f676e/5c4f61f1-043b-3064-9934-b7267db0aae8.roa
File:                     5c4f61f1-043b-3064-9934-b7267db0aae8.roa (raw, json)
Hash identifier:          VotvZ3Kny8ErwalOlo6tsc5TpDvEw//OmuHYD20lQ5A=
Subject key identifier:   A2:C1:56:22:0D:4D:D8:45:FF:36:22:A5:D4:17:85:73:34:8D:F9:F7
Certificate issuer:       /CN=fedbf02b-de87-4991-b290-2a4b996f676e
Certificate serial:       010D0C9F4328584D4D5A581B8C90FEAEB2C24420
Authority key identifier: 04:2B:D7:75:B3:A8:34:C3:B8:84:AF:1C:04:9A:B2:51:53:F9:47:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fedbf02b-de87-4991-b290-2a4b996f676e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fedbf02b-de87-4991-b290-2a4b996f676e/5c4f61f1-043b-3064-9934-b7267db0aae8.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     394244
IP address blocks:        199.33.116.0/23 maxlen: 24
                          199.33.116.0/24 maxlen: 24
                          199.33.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fedbf02b-de87-4991-b290-2a4b996f676e/fedbf02b-de87-4991-b290-2a4b996f676e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fedbf02b-de87-4991-b290-2a4b996f676e/fedbf02b-de87-4991-b290-2a4b996f676e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fedbf02b-de87-4991-b290-2a4b996f676e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:58:1b:8c:90:fe:ae:b2:c2:44:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fedbf02b-de87-4991-b290-2a4b996f676e
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=de6733a3-3a97-4b74-8e65-23e9a6069b3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bd:ec:6a:45:96:13:b2:9b:4a:8b:4e:a3:62:
                    3a:82:72:9d:8e:42:4a:11:e0:4f:7b:e9:b2:98:0e:
                    3f:72:0c:3c:cd:65:74:c7:51:94:c6:25:85:e5:04:
                    00:99:d6:69:05:50:bb:95:76:bc:cf:08:9a:ee:78:
                    8c:75:7e:12:00:1f:f3:55:4f:16:3b:3d:c5:71:c0:
                    79:3a:11:8a:41:0a:c5:9d:0a:58:23:68:4c:55:1a:
                    f8:15:18:04:1e:3d:61:3d:d7:45:65:9b:50:d7:bb:
                    0c:f0:de:e2:07:d9:a2:8e:f8:37:53:69:74:bb:e8:
                    33:50:b1:e3:2f:72:90:16:35:fb:9d:ff:4a:53:44:
                    90:69:fb:a3:99:48:23:58:2d:d5:b3:1a:78:60:17:
                    e8:d0:c4:d0:04:d6:fc:b1:c5:3c:a1:40:5b:ca:d8:
                    e1:c8:40:83:fe:0c:5b:64:16:bb:c5:bf:a5:fd:70:
                    82:b8:89:79:13:32:e0:ce:00:57:f8:d7:c3:6d:2f:
                    7a:73:c5:8b:4c:de:81:05:97:26:6c:79:4a:66:6f:
                    cc:53:4f:c5:f4:73:c8:8b:f6:4b:47:0a:ad:e1:61:
                    62:01:49:8b:bc:ba:6e:2d:5c:2e:72:dc:7f:8d:b2:
                    53:45:36:6b:0b:5f:7a:cd:32:65:d9:59:7a:04:20:
                    7a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C1:56:22:0D:4D:D8:45:FF:36:22:A5:D4:17:85:73:34:8D:F9:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fedbf02b-de87-4991-b290-2a4b996f676e/5c4f61f1-043b-3064-9934-b7267db0aae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fedbf02b-de87-4991-b290-2a4b996f676e/fedbf02b-de87-4991-b290-2a4b996f676e.crl

            X509v3 Authority Key Identifier:
                keyid:04:2B:D7:75:B3:A8:34:C3:B8:84:AF:1C:04:9A:B2:51:53:F9:47:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fedbf02b-de87-4991-b290-2a4b996f676e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.33.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:96:1e:29:6d:aa:69:85:a4:53:fa:d6:8e:06:8f:c2:52:34:
         09:d8:93:0e:0c:b2:17:33:5c:b0:d3:b3:b4:d2:85:06:44:be:
         2c:71:02:5e:07:40:46:f5:d9:9f:b4:5e:7e:4b:df:51:1a:24:
         c0:02:b4:f3:03:c6:e9:0d:42:4a:bd:a4:90:d6:c7:d1:43:2e:
         90:57:86:4b:47:8f:7c:db:9a:f9:88:8f:7f:48:82:e7:40:6f:
         33:e7:f7:a7:26:af:eb:a3:c2:58:bc:23:0e:d1:cc:a3:65:26:
         b5:e9:2a:0f:24:83:83:13:a7:5e:22:84:a5:75:df:71:32:96:
         73:74:f0:f7:17:d3:0f:16:ce:af:41:17:90:28:15:e3:c8:a7:
         d0:03:40:a4:84:2e:68:ee:62:3b:b9:1b:d4:c1:d1:58:b9:06:
         6e:57:a4:8c:c4:dd:bd:d2:5e:d8:a0:90:d5:e8:a8:c8:f8:04:
         49:88:14:14:5e:f0:20:1f:8e:9b:56:a9:01:92:b3:59:c0:c5:
         ef:a1:03:e4:ef:d4:57:55:d8:8a:1e:37:ea:df:53:ad:84:f1:
         ca:37:4e:ad:11:c4:2e:da:d7:d1:84:d1:5c:9c:29:02:f6:c7:
         4a:7f:fa:71:93:08:32:ca:31:70:e4:ed:6c:4e:3f:3a:48:f0:
         3d:ec:61:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWlgbjJD+rrLCRCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmVkYmYwMmItZGU4Ny00OTkxLWIyOTAtMmE0Yjk5NmY2
NzZlMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk
ZGU2NzMzYTMtM2E5Ny00Yjc0LThlNjUtMjNlOWE2MDY5YjNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg73sakWWE7KbSotOo2I6gnKdjkJKEeBPe+my
mA4/cgw8zWV0x1GUxiWF5QQAmdZpBVC7lXa8zwia7niMdX4SAB/zVU8WOz3FccB5
OhGKQQrFnQpYI2hMVRr4FRgEHj1hPddFZZtQ17sM8N7iB9mijvg3U2l0u+gzULHj
L3KQFjX7nf9KU0SQafujmUgjWC3Vsxp4YBfo0MTQBNb8scU8oUBbytjhyECD/gxb
ZBa7xb+l/XCCuIl5EzLgzgBX+NfDbS96c8WLTN6BBZcmbHlKZm/MU0/F9HPIi/ZL
Rwqt4WFiAUmLvLpuLVwuctx/jbJTRTZrC196zTJl2Vl6BCB6ZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKLBViINTdhF/zYipdQXhXM0jfn3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZWRi
ZjAyYi1kZTg3LTQ5OTEtYjI5MC0yYTRiOTk2ZjY3NmUvNWM0ZjYxZjEtMDQzYi0z
MDY0LTk5MzQtYjcyNjdkYjBhYWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmVkYmYwMmItZGU4Ny00OTkxLWIy
OTAtMmE0Yjk5NmY2NzZlL2ZlZGJmMDJiLWRlODctNDk5MS1iMjkwLTJhNGI5OTZm
Njc2ZS5jcmwwHwYDVR0jBBgwFoAUBCvXdbOoNMO4hK8cBJqyUVP5RwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZWRiZjAyYi1kZTg3LTQ5OTEtYjI5MC0yYTRi
OTk2ZjY3NmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxyF0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAGWHiltqmmFpFP61o4Gj8JSNAnYkw4MshczXLDTs7TShQZEvixxAl4H
QEb12Z+0Xn5L31EaJMACtPMDxukNQkq9pJDWx9FDLpBXhktHj3zbmvmIj39IgudA
bzPn96cmr+ujwli8Iw7RzKNlJrXpKg8kg4MTp14ihKV133EylnN08PcX0w8Wzq9B
F5AoFePIp9ADQKSELmjuYju5G9TB0Vi5Bm5XpIzE3b3SXtigkNXoqMj4BEmIFBRe
8CAfjptWqQGSs1nAxe+hA+Tv1FdV2IoeN+rfU62E8co3Tq0RxC7a19GE0VycKQL2
x0p/+nGTCDLKMXDk7WxOPzpI8D3sYTo=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:24:29 2026 by rpki-client