Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/5d5c344a-e189-3864-9d26-6e969f78a1f1.roa
File:                     5d5c344a-e189-3864-9d26-6e969f78a1f1.roa (raw, json)
Hash identifier:          MHllLPa2idzi++jdT+e1Dslj9zSdzleJmfPloCUmqUg=
Subject key identifier:   2E:B1:EB:2C:2A:E1:E2:EF:40:B5:7F:E2:C5:F5:F7:4A:D4:47:33:1B
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F4328584D55BA4556029A03716502A100
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/5d5c344a-e189-3864-9d26-6e969f78a1f1.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     18914
IP address blocks:        204.8.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:45:56:02:9a:03:71:65:02:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=0d97328f-7af5-420e-8244-9215f08ac66f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a7:53:dc:f8:a5:bf:2e:78:0d:52:39:66:10:
                    10:f4:02:a2:f8:fe:6c:a1:e7:d6:37:d9:0c:e5:9b:
                    40:72:14:4d:1b:c9:75:e6:f7:60:24:f5:fb:0e:d9:
                    4e:8c:58:f4:e9:70:8a:cc:01:f1:f2:94:25:f3:5d:
                    1f:51:1b:aa:7e:f2:1a:c6:08:d8:a3:88:47:70:d7:
                    45:ea:32:ac:a8:a8:30:76:0d:16:d6:97:ae:1e:65:
                    61:f5:7c:f3:a5:bb:36:af:ab:72:c8:a2:a2:9b:cc:
                    11:84:e1:f8:00:57:d8:22:44:a7:1f:fc:69:b5:b5:
                    f9:6a:c8:35:12:d3:64:fa:19:9b:93:73:67:45:69:
                    29:eb:59:2a:00:77:5c:8c:08:fd:c8:48:a8:29:f6:
                    aa:37:d1:34:85:ce:00:92:58:ae:4b:c2:f7:87:14:
                    27:2f:d5:0a:1d:30:4f:4e:30:8a:17:e1:ba:ae:1a:
                    17:00:16:42:9b:95:06:5e:4b:49:d2:b6:7d:91:50:
                    f0:16:a7:d0:26:c6:0f:f8:f1:87:99:7b:d1:30:84:
                    08:ed:ca:f6:6e:ad:81:7c:78:7a:4b:0c:b3:1c:11:
                    d2:99:d6:c0:bc:23:e3:57:03:cf:5a:a5:b3:3e:fb:
                    0f:f1:75:7e:76:e2:f3:3b:e9:4c:bc:d0:87:e3:55:
                    72:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B1:EB:2C:2A:E1:E2:EF:40:B5:7F:E2:C5:F5:F7:4A:D4:47:33:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/5d5c344a-e189-3864-9d26-6e969f78a1f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f2:c7:56:eb:8e:d0:d1:30:f0:a4:5a:ac:95:f9:cd:91:ea:
         11:ab:7e:98:8b:82:cc:b8:25:56:30:dd:04:29:52:fc:76:bf:
         3e:50:df:be:45:b2:42:a3:3c:c2:7f:22:a5:a4:24:1e:fb:cf:
         7a:ce:8f:66:11:a6:2f:17:89:c3:b6:4f:ef:6e:20:bf:ec:67:
         cd:ec:c9:03:cc:b6:3c:a7:67:92:04:af:0e:e0:04:95:f8:8f:
         a2:29:5b:72:28:48:e7:76:9a:f8:73:1b:ff:ab:77:6a:cd:6c:
         2e:82:6f:79:00:d6:75:c5:14:5f:95:61:77:09:81:51:29:8e:
         20:83:d6:31:3c:82:10:96:b1:bd:91:c6:4d:68:9d:2f:03:18:
         54:17:3e:74:fb:63:b8:d2:88:1d:63:7e:6e:ed:ee:c6:f6:cc:
         18:d4:c5:50:18:b0:7c:41:f2:20:ab:33:c3:00:19:90:6c:06:
         86:b8:95:16:58:64:f9:a2:10:ca:b8:1e:45:f0:17:be:a1:42:
         eb:7c:f0:02:10:bc:61:12:b1:86:2c:f7:5a:e6:86:97:72:d4:
         b4:85:26:0f:b2:bb:35:c7:d5:07:fe:72:2c:3d:88:0f:a9:ba:
         4e:10:5e:5e:db:f7:fb:fc:9c:d6:f5:e4:2d:3e:f0:84:9d:8f:
         f8:a8:5a:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VukVWApoDcWUCoQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTM5Y2I5NjAtMjM5NC00YjIyLWI5ZjEtM2FjNTU2NmJj
NzJhMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
MGQ5NzMyOGYtN2FmNS00MjBlLTgyNDQtOTIxNWYwOGFjNjZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKdT3Pilvy54DVI5ZhAQ9AKi+P5soefWN9kM
5ZtAchRNG8l15vdgJPX7DtlOjFj06XCKzAHx8pQl810fURuqfvIaxgjYo4hHcNdF
6jKsqKgwdg0W1peuHmVh9Xzzpbs2r6tyyKKim8wRhOH4AFfYIkSnH/xptbX5asg1
EtNk+hmbk3NnRWkp61kqAHdcjAj9yEioKfaqN9E0hc4AkliuS8L3hxQnL9UKHTBP
TjCKF+G6rhoXABZCm5UGXktJ0rZ9kVDwFqfQJsYP+PGHmXvRMIQI7cr2bq2BfHh6
SwyzHBHSmdbAvCPjVwPPWqWzPvsP8XV+duLzO+lMvNCH41VyNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC6x6ywq4eLvQLV/4sX190rURzMbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzlj
Yjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1NTY2YmM3MmEvNWQ1YzM0NGEtZTE4OS0z
ODY0LTlkMjYtNmU5NjlmNzhhMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTM5Y2I5NjAtMjM5NC00YjIyLWI5
ZjEtM2FjNTU2NmJjNzJhL2UzOWNiOTYwLTIzOTQtNGIyMi1iOWYxLTNhYzU1NjZi
YzcyYS5jcmwwHwYDVR0jBBgwFoAUx5iuk+5ta+2iXZtwBvHdRTnXH4kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMzljYjk2MC0yMzk0LTRiMjItYjlmMS0zYWM1
NTY2YmM3MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAhkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHzyx1brjtDRMPCkWqyV+c2R6hGrfpiLgsy4JVYw3QQpUvx2vz5Q375F
skKjPMJ/IqWkJB77z3rOj2YRpi8XicO2T+9uIL/sZ83syQPMtjynZ5IErw7gBJX4
j6IpW3IoSOd2mvhzG/+rd2rNbC6Cb3kA1nXFFF+VYXcJgVEpjiCD1jE8ghCWsb2R
xk1onS8DGFQXPnT7Y7jSiB1jfm7t7sb2zBjUxVAYsHxB8iCrM8MAGZBsBoa4lRZY
ZPmiEMq4HkXwF76hQut88AIQvGESsYYs91rmhpdy1LSFJg+yuzXH1Qf+ciw9iA+p
uk4QXl7b9/v8nNb15C0+8ISdj/ioWrc=
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:21:07 2026 by rpki-client