Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66/ef00fbf4-d006-3623-97d4-7a5ca8c5c8e1.roa
File:                     ef00fbf4-d006-3623-97d4-7a5ca8c5c8e1.roa (raw, json)
Hash identifier:          yEfqouLX3Y5xrusZNuPfNx/oEqXmbWbZnW/O2xexD/I=
Subject key identifier:   7E:F9:7F:7A:53:4F:39:E9:8A:BC:25:A0:67:DE:36:C3:34:AC:32:B7
Certificate issuer:       /CN=db3852ba-10a2-4ef3-a92e-5bb8970f2b66
Certificate serial:       010D0C9F4328584E22744259D7CE19933971BF00
Authority key identifier: 0A:B9:F7:D3:A2:3D:3B:A8:BE:E8:1B:71:20:B4:E2:D1:F8:D0:EB:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66/ef00fbf4-d006-3623-97d4-7a5ca8c5c8e1.roa
Signing time:             Thu 11 Jun 2026 09:00:12 +0000
ROA not before:           Thu 11 Jun 2026 09:00:12 +0000
ROA not after:            Wed 09 Sep 2026 09:00:12 +0000
asID:                     46582
IP address blocks:        198.175.172.0/24 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:22:74:42:59:d7:ce:19:93:39:71:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db3852ba-10a2-4ef3-a92e-5bb8970f2b66
        Validity
            Not Before: Jun 11 09:00:12 2026 GMT
            Not After : Sep  9 09:00:12 2026 GMT
        Subject: CN=2f0ae5b2-54c9-405a-9f86-c6fbaf3aaa2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a1:25:4b:a9:87:ac:68:15:41:19:b3:5d:ab:
                    94:4c:c0:06:36:56:b0:03:56:13:41:cb:e5:c5:97:
                    49:25:1f:cf:cb:4c:6c:8f:25:2d:03:eb:40:35:1e:
                    53:98:35:0f:ac:5d:ec:9b:28:1b:03:dd:b3:d0:4d:
                    84:2d:ec:76:c8:c4:c5:b5:82:3b:07:36:42:af:5c:
                    b0:b6:41:df:60:1b:8d:2b:c4:0d:9c:8b:c5:a6:c4:
                    d2:2f:64:fe:d4:ea:72:c9:63:42:97:51:61:ba:ef:
                    c5:e1:69:0a:c0:a8:1d:74:4d:83:4b:f4:30:d7:f0:
                    af:9f:9b:3b:cc:b5:e1:42:da:75:52:6f:f1:0a:00:
                    8f:41:46:25:cc:90:03:ff:b0:cb:df:61:de:08:81:
                    44:5b:2c:0e:13:23:a9:86:97:0f:66:00:d3:98:51:
                    3b:4a:a3:6d:ba:11:17:53:3b:9c:9e:11:a8:5c:30:
                    fc:d3:5e:68:b9:37:5a:d5:fd:4a:3f:3e:e3:ed:23:
                    ff:99:39:0d:79:54:18:9a:0d:fa:f5:38:13:3f:09:
                    f0:2a:71:9c:7e:3e:74:d0:85:e7:87:6e:d2:82:f3:
                    a8:6b:2c:f9:6d:f9:70:60:3c:4a:aa:08:75:a3:78:
                    a5:3b:cc:6b:c4:fa:a3:2b:ee:e6:ef:5e:f4:7b:20:
                    9b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F9:7F:7A:53:4F:39:E9:8A:BC:25:A0:67:DE:36:C3:34:AC:32:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66/ef00fbf4-d006-3623-97d4-7a5ca8c5c8e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B9:F7:D3:A2:3D:3B:A8:BE:E8:1B:71:20:B4:E2:D1:F8:D0:EB:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db3852ba-10a2-4ef3-a92e-5bb8970f2b66.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.175.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:d0:72:4f:01:d4:08:73:cb:a9:30:a2:a0:c3:ff:59:b1:1b:
         82:88:62:62:d4:c0:1e:c3:c2:8c:cd:0c:28:4c:55:2a:d4:d4:
         f9:b8:f3:04:c4:b0:4b:30:44:76:9f:e2:48:50:0c:71:56:52:
         1a:a7:96:70:cf:78:2e:cb:5f:07:9e:af:ff:75:32:b6:c2:24:
         29:45:6a:e4:d1:6c:29:53:b0:dc:99:44:03:db:3e:6a:02:03:
         47:ed:86:c3:c8:95:90:a1:22:12:fd:8a:ec:4d:12:29:45:90:
         35:de:d0:6d:57:7d:d6:f0:ae:80:3f:41:41:c2:5e:96:14:fc:
         dd:3e:b1:5b:82:74:27:5a:7d:31:86:cc:6d:5d:ad:12:24:d0:
         f7:50:c2:61:79:1b:09:ec:ca:9f:c4:cf:01:7e:8a:f2:bf:6a:
         9f:b8:6b:bd:f3:bb:6f:22:7f:b8:ff:6d:b4:11:e0:31:5c:dc:
         6d:47:23:42:ea:75:54:f4:dc:06:40:16:65:69:74:4f:ef:1c:
         63:ea:aa:6d:f4:2b:a7:d8:20:8c:b6:32:57:88:6f:10:0f:82:
         af:7f:6d:24:39:a0:d5:a7:27:83:9c:2b:61:95:49:f7:5a:22:
         1d:45:ea:6b:21:04:a7:f3:1d:c9:99:2b:e8:fd:8c:17:62:58:
         cf:b4:57:4f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4idEJZ184ZkzlxvwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGIzODUyYmEtMTBhMi00ZWYzLWE5MmUtNWJiODk3MGYy
YjY2MB4XDTI2MDYxMTA5MDAxMloXDTI2MDkwOTA5MDAxMlowLzEtMCsGA1UEAxMk
MmYwYWU1YjItNTRjOS00MDVhLTlmODYtYzZmYmFmM2FhYTJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKElS6mHrGgVQRmzXauUTMAGNlawA1YTQcvl
xZdJJR/Py0xsjyUtA+tANR5TmDUPrF3smygbA92z0E2ELex2yMTFtYI7BzZCr1yw
tkHfYBuNK8QNnIvFpsTSL2T+1OpyyWNCl1Fhuu/F4WkKwKgddE2DS/Qw1/Cvn5s7
zLXhQtp1Um/xCgCPQUYlzJAD/7DL32HeCIFEWywOEyOphpcPZgDTmFE7SqNtuhEX
UzucnhGoXDD8015ouTda1f1KPz7j7SP/mTkNeVQYmg369TgTPwnwKnGcfj500IXn
h27SgvOoayz5bflwYDxKqgh1o3ilO8xrxPqjK+7m7170eyCbZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH75f3pTTznpirwloGfeNsM0rDK3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kYjM4
NTJiYS0xMGEyLTRlZjMtYTkyZS01YmI4OTcwZjJiNjYvZWYwMGZiZjQtZDAwNi0z
NjIzLTk3ZDQtN2E1Y2E4YzVjOGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGIzODUyYmEtMTBhMi00ZWYzLWE5
MmUtNWJiODk3MGYyYjY2L2RiMzg1MmJhLTEwYTItNGVmMy1hOTJlLTViYjg5NzBm
MmI2Ni5jcmwwHwYDVR0jBBgwFoAUCrn306I9O6i+6BtxILTi0fjQ68kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9kYjM4NTJiYS0xMGEyLTRlZjMtYTkyZS01YmI4
OTcwZjJiNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxq+sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHjQck8B1Ahzy6kwoqDD/1mxG4KIYmLUwB7DwozNDChMVSrU1Pm48wTE
sEswRHaf4khQDHFWUhqnlnDPeC7LXweer/91MrbCJClFauTRbClTsNyZRAPbPmoC
A0fthsPIlZChIhL9iuxNEilFkDXe0G1XfdbwroA/QUHCXpYU/N0+sVuCdCdafTGG
zG1drRIk0PdQwmF5Gwnsyp/EzwF+ivK/ap+4a73zu28if7j/bbQR4DFc3G1HI0Lq
dVT03AZAFmVpdE/vHGPqqm30K6fYIIy2MleIbxAPgq9/bSQ5oNWnJ4OcK2GVSfda
Ih1F6mshBKfzHcmZK+j9jBdiWM+0V08=
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:07:38 2026 by rpki-client