Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/8e59df19-4b17-39e9-a2fd-5ff836dcaefa.roa
File:                     8e59df19-4b17-39e9-a2fd-5ff836dcaefa.roa (raw, json)
Hash identifier:          TLVtf9QthJb4PnU40WuviJ3KXEzOTEY8qEpGBuNcIOg=
Subject key identifier:   30:F5:B2:C9:49:6C:25:F0:1B:69:AB:81:D2:45:E4:81:51:20:68:7A
Certificate issuer:       /CN=c9bd201b-ca94-46d6-909a-8b5b404b5361
Certificate serial:       010D0C9F4328584CEFF23D49426DE1413D8EEF00
Authority key identifier: C1:37:E1:2C:4B:93:7F:A6:0B:9F:11:5A:AF:E9:9D:62:F4:85:22:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/8e59df19-4b17-39e9-a2fd-5ff836dcaefa.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        167.234.36.0/24 maxlen: 24
                          203.2.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/c9bd201b-ca94-46d6-909a-8b5b404b5361.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/c9bd201b-ca94-46d6-909a-8b5b404b5361.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:3d:49:42:6d:e1:41:3d:8e:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9bd201b-ca94-46d6-909a-8b5b404b5361
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=d7f842dd-8f1a-4f14-a820-1de0d75cb2fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2b:72:1c:c9:15:20:ee:1d:12:94:40:c2:46:
                    7d:c4:43:f7:d0:6f:09:a4:89:88:91:4c:79:92:92:
                    63:3f:f2:fd:a4:fb:3f:bf:05:1b:79:7d:4d:5c:61:
                    62:2e:d6:81:15:8d:32:21:40:16:8c:f6:d3:6a:3b:
                    b4:ba:7f:fe:cd:df:18:52:de:01:9e:f4:49:e6:40:
                    6d:f6:be:ae:62:52:0a:f1:16:31:82:54:e2:37:88:
                    50:c7:dd:8f:44:df:79:b8:b2:ef:b0:3b:8b:ae:ba:
                    f6:02:55:ef:92:f3:69:5f:b9:75:92:df:01:0b:3b:
                    ae:ca:a9:d0:9a:74:8f:e5:af:49:2b:92:21:f3:5e:
                    70:e8:3e:c3:96:ac:9a:a3:e9:10:49:f8:36:54:9b:
                    19:66:0e:29:f5:a7:f2:8c:f8:38:b9:7f:0f:f1:39:
                    e6:6d:36:7a:71:03:f0:a2:c2:85:bd:64:db:32:ee:
                    ce:68:46:a3:c7:f6:ef:ed:ab:51:11:a7:bc:39:9d:
                    0e:20:c8:e3:70:57:be:e6:66:de:01:47:4b:87:18:
                    31:5c:4a:73:fe:76:e2:87:be:a8:75:bc:92:69:8e:
                    b9:97:4f:5a:36:82:ef:ac:fd:48:ef:75:76:70:a4:
                    0d:c3:67:8a:e1:cf:98:e0:98:6f:bf:9b:08:8a:55:
                    46:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F5:B2:C9:49:6C:25:F0:1B:69:AB:81:D2:45:E4:81:51:20:68:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/8e59df19-4b17-39e9-a2fd-5ff836dcaefa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/c9bd201b-ca94-46d6-909a-8b5b404b5361.crl

            X509v3 Authority Key Identifier:
                keyid:C1:37:E1:2C:4B:93:7F:A6:0B:9F:11:5A:AF:E9:9D:62:F4:85:22:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.234.36.0/24
                  203.2.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:a3:48:0b:e8:ee:74:6e:d5:e2:72:0f:a9:65:db:f4:30:ee:
         84:7f:5c:0e:74:3e:27:bd:92:ca:1a:5e:3d:6b:95:b5:81:27:
         64:71:bc:2f:e5:1a:5e:91:d5:8a:a5:a0:ea:de:9b:f8:cc:1f:
         35:bf:1d:cb:93:21:8e:6f:61:cb:2e:f2:db:98:f0:a2:e6:0f:
         d6:35:d7:de:42:b0:ac:05:20:cf:c4:f4:6f:fc:9b:be:04:3c:
         15:48:ca:02:95:3c:1a:74:86:f0:cf:69:69:a9:c1:a1:d1:cf:
         4a:67:3c:fa:e4:97:37:80:1e:9e:ff:f0:b6:79:55:94:2c:e7:
         e2:72:13:79:a8:90:c7:e0:96:9d:63:2f:9b:79:02:91:64:17:
         6f:1d:12:3d:09:06:6c:c3:54:f9:3c:06:c7:90:1e:e1:61:a0:
         cd:71:b0:2c:05:7b:06:da:10:0d:35:6c:cd:25:9c:ca:44:0b:
         61:08:e8:e9:4e:64:d3:58:91:f5:d0:20:b1:58:22:74:56:ac:
         53:06:00:c7:4b:86:14:56:0e:ac:63:64:de:c2:ec:eb:56:89:
         a5:f4:30:6a:03:4f:86:9b:02:8b:e5:7b:65:ce:9a:a6:f1:e9:
         3b:68:0d:58:07:db:ed:7f:fb:86:b1:d2:30:b3:5e:d7:f1:a6:
         5a:e2:68:b3
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEzv8j1JQm3hQT2O7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzliZDIwMWItY2E5NC00NmQ2LTkwOWEtOGI1YjQwNGI1
MzYxMB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk
ZDdmODQyZGQtOGYxYS00ZjE0LWE4MjAtMWRlMGQ3NWNiMmZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCtyHMkVIO4dEpRAwkZ9xEP30G8JpImIkUx5
kpJjP/L9pPs/vwUbeX1NXGFiLtaBFY0yIUAWjPbTaju0un/+zd8YUt4BnvRJ5kBt
9r6uYlIK8RYxglTiN4hQx92PRN95uLLvsDuLrrr2AlXvkvNpX7l1kt8BCzuuyqnQ
mnSP5a9JK5Ih815w6D7Dlqyao+kQSfg2VJsZZg4p9afyjPg4uX8P8TnmbTZ6cQPw
osKFvWTbMu7OaEajx/bv7atREae8OZ0OIMjjcFe+5mbeAUdLhxgxXEpz/nbih76o
dbySaY65l09aNoLvrP1I73V2cKQNw2eK4c+Y4Jhvv5sIilVGpQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFDD1sslJbCXwG2mrgdJF5IFRIGh6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOWJk
MjAxYi1jYTk0LTQ2ZDYtOTA5YS04YjViNDA0YjUzNjEvOGU1OWRmMTktNGIxNy0z
OWU5LWEyZmQtNWZmODM2ZGNhZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzliZDIwMWItY2E5NC00NmQ2LTkw
OWEtOGI1YjQwNGI1MzYxL2M5YmQyMDFiLWNhOTQtNDZkNi05MDlhLThiNWI0MDRi
NTM2MS5jcmwwHwYDVR0jBBgwFoAUwTfhLEuTf6YLnxFar+mdYvSFIgMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jOWJkMjAxYi1jYTk0LTQ2ZDYtOTA5YS04YjVi
NDA0YjUzNjEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAp+okAwQA
ywLGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAAWjSAvo7nRu1eJyD6ll2/Qw7oR/XA50Pie9ksoaXj1rlbWB
J2RxvC/lGl6R1YqloOrem/jMHzW/HcuTIY5vYcsu8tuY8KLmD9Y1195CsKwFIM/E
9G/8m74EPBVIygKVPBp0hvDPaWmpwaHRz0pnPPrklzeAHp7/8LZ5VZQs5+JyE3mo
kMfglp1jL5t5ApFkF28dEj0JBmzDVPk8BseQHuFhoM1xsCwFewbaEA01bM0lnMpE
C2EI6OlOZNNYkfXQILFYInRWrFMGAMdLhhRWDqxjZN7C7OtWiaX0MGoDT4abAovl
e2XOmqbx6TtoDVgH2+1/+4ax0jCzXtfxplriaLM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:25:17 2026 by rpki-client