Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b91cefc2-5e14-330e-b561-e34c119b1bef.roa
File:                     b91cefc2-5e14-330e-b561-e34c119b1bef.roa (raw, json)
Hash identifier:          lbm8E4+Wwn/he2GQAq/rYNFF5bva2wQiB3+cGCibNB8=
Subject key identifier:   CC:EC:43:70:8F:A6:48:2F:08:22:45:EB:75:76:80:40:22:A6:0F:42
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F4328584E0A6FEE2E5EA449B2328BCA80
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b91cefc2-5e14-330e-b561-e34c119b1bef.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     16433
IP address blocks:        162.217.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:ee:2e:5e:a4:49:b2:32:8b:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=746350e0-6f14-448f-8a33-dfa5f0a64940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a6:1f:98:87:5b:a8:71:7a:af:bd:e0:60:d1:
                    a6:9d:7d:dd:55:5c:42:f3:e1:2c:3b:c9:22:05:5e:
                    1c:87:ba:c8:20:be:77:28:5d:05:71:ea:cb:2a:d8:
                    e9:b7:3c:25:3e:fc:65:9e:95:50:f2:50:14:8e:d6:
                    8b:4e:37:cd:f6:8f:d6:6c:f6:13:37:7a:1b:b5:c8:
                    ae:5b:15:31:69:5c:0b:1d:c8:14:9b:01:ed:ba:e1:
                    c4:03:2d:f3:66:60:27:7b:df:39:01:ae:76:21:5f:
                    52:1d:85:f6:e5:f6:35:f1:6f:79:fa:ee:f7:04:72:
                    20:fa:a8:b9:af:2f:7e:9a:7e:43:41:e4:09:78:f4:
                    0a:64:65:3a:2b:34:a8:cd:6b:5b:9f:10:f9:f5:28:
                    b6:ea:01:fb:b4:7c:b3:45:5a:a3:a1:3e:43:f4:1a:
                    e0:16:18:8a:72:3a:3c:03:6c:af:7c:fd:d8:58:d4:
                    f8:d1:f3:e0:f7:3c:71:17:31:2b:52:d4:25:fb:bc:
                    6d:89:9f:76:a9:b6:9e:c0:0b:31:8e:15:9e:dd:01:
                    79:de:de:96:4e:56:3f:7e:5d:5a:23:52:a8:82:07:
                    13:6d:ab:90:3c:d9:bc:a5:27:44:e7:70:14:23:33:
                    45:0f:5b:54:f0:df:12:13:a6:37:ce:9d:24:4c:17:
                    7b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EC:43:70:8F:A6:48:2F:08:22:45:EB:75:76:80:40:22:A6:0F:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b91cefc2-5e14-330e-b561-e34c119b1bef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:c3:fc:ee:23:06:7c:b6:32:89:bb:95:1e:30:19:2b:f7:12:
         e1:89:9a:08:16:08:46:7e:8a:89:da:f4:69:68:2f:45:25:d5:
         c6:5b:06:c1:66:20:87:34:58:fa:18:d1:65:07:5b:6d:29:ec:
         e5:ff:97:b4:fc:59:2a:9b:64:a0:8b:e6:5c:7a:8c:1f:e4:50:
         a1:2c:7a:1e:21:7d:31:a1:60:d1:a3:3d:8a:11:e0:3f:e2:41:
         8b:ca:b4:2b:54:e5:db:48:f4:76:fd:8e:1e:ab:86:9d:64:4c:
         19:8c:bb:dd:f8:17:ad:05:7a:af:96:c0:dc:ea:54:88:b8:d9:
         6c:40:aa:8d:fb:c0:23:10:14:6b:ee:62:24:4b:c9:d1:8d:d8:
         c4:cb:0c:e8:66:47:48:23:b9:34:5e:a3:da:e9:18:20:99:61:
         34:5d:53:00:b4:c3:2f:78:2f:a2:3d:1b:57:05:51:49:4a:a5:
         b5:e6:5f:87:3f:d0:ae:63:44:ed:a0:31:5c:76:40:0d:92:96:
         3d:88:f5:82:35:0e:30:8a:8c:c7:7b:e8:ab:4c:76:e5:a5:90:
         8d:e7:9b:42:99:7f:6e:7e:09:6b:67:4f:e7:d9:9f:0b:40:6c:
         7c:e0:93:3a:e7:be:38:0c:b4:c3:9c:48:4c:f9:c8:f7:dd:ee:
         b6:ee:8f:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Kb+4uXqRJsjKLyoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmRiZjYwNGYtMjRiMC00MjZlLTgwOWQtZTY1YjA4YmU1
ZDUwMB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk
NzQ2MzUwZTAtNmYxNC00NDhmLThhMzMtZGZhNWYwYTY0OTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaYfmIdbqHF6r73gYNGmnX3dVVxC8+EsO8ki
BV4ch7rIIL53KF0FcerLKtjptzwlPvxlnpVQ8lAUjtaLTjfN9o/WbPYTN3obtciu
WxUxaVwLHcgUmwHtuuHEAy3zZmAne985Aa52IV9SHYX25fY18W95+u73BHIg+qi5
ry9+mn5DQeQJePQKZGU6KzSozWtbnxD59Si26gH7tHyzRVqjoT5D9BrgFhiKcjo8
A2yvfP3YWNT40fPg9zxxFzErUtQl+7xtiZ92qbaewAsxjhWe3QF53t6WTlY/fl1a
I1KoggcTbauQPNm8pSdE53AUIzNFD1tU8N8SE6Y3zp0kTBd7YwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMzsQ3CPpkgvCCJF63V2gEAipg9CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZGJm
NjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjViMDhiZTVkNTAvYjkxY2VmYzItNWUxNC0z
MzBlLWI1NjEtZTM0YzExOWIxYmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmRiZjYwNGYtMjRiMC00MjZlLTgw
OWQtZTY1YjA4YmU1ZDUwLzJkYmY2MDRmLTI0YjAtNDI2ZS04MDlkLWU2NWIwOGJl
NWQ1MC5jcmwwHwYDVR0jBBgwFoAUnwuW5LWIWZ7uukF5kcCTydHD9UIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yZGJmNjA0Zi0yNGIwLTQyNmUtODA5ZC1lNjVi
MDhiZTVkNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotnUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA/D/O4jBny2Mom7lR4wGSv3EuGJmggWCEZ+iona9GloL0Ul1cZbBsFm
IIc0WPoY0WUHW20p7OX/l7T8WSqbZKCL5lx6jB/kUKEseh4hfTGhYNGjPYoR4D/i
QYvKtCtU5dtI9Hb9jh6rhp1kTBmMu934F60Feq+WwNzqVIi42WxAqo37wCMQFGvu
YiRLydGN2MTLDOhmR0gjuTReo9rpGCCZYTRdUwC0wy94L6I9G1cFUUlKpbXmX4c/
0K5jRO2gMVx2QA2Slj2I9YI1DjCKjMd76KtMduWlkI3nm0KZf25+CWtnT+fZnwtA
bHzgkzrnvjgMtMOcSEz5yPfd7rbujz8=
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:19:36 2026 by rpki-client