Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/dfac5974-f75e-3282-b330-4ac930e4be2c.roa
File:                     dfac5974-f75e-3282-b330-4ac930e4be2c.roa (raw, json)
Hash identifier:          iel0wxvXOFDGMVzWDUuHqjd81UUmIKmEXsRWqSNTjYY=
Subject key identifier:   73:0F:9C:56:B3:CB:15:AA:C9:74:EF:6C:DF:F6:BB:EA:40:C6:EA:84
Certificate issuer:       /CN=e0222b33-d953-40bd-9e16-838d515a3e80
Certificate serial:       010D0C9F4328584E253EFF648BC5186E7B707400
Authority key identifier: 53:EB:13:69:3B:D7:1E:45:8A:7B:81:DF:7C:FB:F4:D4:63:23:1C:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/dfac5974-f75e-3282-b330-4ac930e4be2c.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     30708
IP address blocks:        208.86.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/e0222b33-d953-40bd-9e16-838d515a3e80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/e0222b33-d953-40bd-9e16-838d515a3e80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3e:ff:64:8b:c5:18:6e:7b:70:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0222b33-d953-40bd-9e16-838d515a3e80
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=e642a2f6-c2b6-4ea1-9a75-fcbc481cd836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:64:7b:77:d9:fd:39:57:40:88:c5:50:14:a5:
                    8d:99:5c:95:1d:96:1e:51:3b:92:34:af:1b:a8:9a:
                    c0:2f:b3:2d:f5:14:7c:d7:d2:74:4a:9f:a2:37:47:
                    ab:66:90:a7:80:ff:0b:36:d5:2f:d0:f7:44:ba:cd:
                    3e:87:d0:bc:96:c8:49:f4:22:82:11:4d:53:5d:86:
                    99:2d:8b:22:44:d7:c7:55:5e:74:5e:6c:8e:31:ed:
                    4d:64:4f:b6:d2:3f:de:1f:48:23:af:e8:79:48:cc:
                    f7:5f:cc:84:71:12:91:b5:9d:a2:8d:73:51:24:eb:
                    14:bc:7e:a1:77:73:8b:ae:6f:1a:40:d1:0d:ac:e3:
                    ea:af:b7:1f:cc:11:3e:88:44:23:32:4c:3e:86:27:
                    62:de:c1:0b:6a:5a:ab:8f:0e:fe:cb:95:49:83:cd:
                    28:e9:aa:99:c7:e4:87:91:80:35:b9:55:b4:11:4a:
                    7a:f8:99:b9:8d:2d:dd:34:12:95:ce:76:41:55:24:
                    ba:58:8f:76:43:d9:82:0b:0b:75:00:ee:65:8c:90:
                    cc:66:f8:e5:2e:ac:34:dd:80:1b:4a:bc:97:58:b2:
                    af:3b:00:96:f1:e2:3f:23:6a:cb:f8:a8:70:60:14:
                    ac:98:e9:81:d7:93:05:34:b3:4c:c2:1f:8b:91:d6:
                    cd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0F:9C:56:B3:CB:15:AA:C9:74:EF:6C:DF:F6:BB:EA:40:C6:EA:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/dfac5974-f75e-3282-b330-4ac930e4be2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/e0222b33-d953-40bd-9e16-838d515a3e80.crl

            X509v3 Authority Key Identifier:
                keyid:53:EB:13:69:3B:D7:1E:45:8A:7B:81:DF:7C:FB:F4:D4:63:23:1C:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.86.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:4d:42:49:02:8d:49:77:bd:94:e9:39:62:7b:c0:57:6b:5d:
         46:93:a8:eb:ab:12:6d:7d:1a:4f:f7:92:9d:bb:7d:97:d8:e7:
         7e:83:1f:fd:0a:9f:26:8c:4e:ca:ef:9a:97:ed:94:96:56:24:
         54:3f:50:25:d3:87:b7:c7:c0:69:ec:16:69:79:43:e7:bf:92:
         99:2f:fd:80:9f:a2:6b:f1:ef:88:16:db:6c:99:27:ae:bd:96:
         63:7a:44:7e:48:c9:a2:4c:4a:ce:79:3c:8c:e8:2e:ae:15:ba:
         b5:ac:68:dc:c8:b1:9c:86:9a:7d:0d:15:12:bd:df:a4:12:b8:
         c7:17:f5:9e:40:da:08:1c:a8:ea:1c:ff:e6:36:42:36:7f:e4:
         3b:7d:46:c4:b7:ed:6b:07:1b:70:44:75:32:77:1a:fa:1d:ba:
         d4:8d:25:20:a2:3d:c2:a9:e2:33:61:7c:e8:b2:cf:cc:66:65:
         84:51:4f:53:37:8b:f2:17:57:a1:d0:91:d1:9c:f0:5d:7f:b1:
         08:4e:f9:07:8e:78:ef:70:cb:96:26:cd:36:98:bc:00:07:c4:
         c1:cf:52:92:48:37:7c:25:ba:5d:fb:56:7d:47:d0:37:38:49:
         90:96:de:c5:16:0f:db:75:db:de:57:34:48:72:0b:ae:aa:e2:
         50:62:0b:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4lPv9ki8UYbntwdAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTAyMjJiMzMtZDk1My00MGJkLTllMTYtODM4ZDUxNWEz
ZTgwMB4XDTI2MDYxMjA5MDAxMVoXDTI2MDkxMDA5MDAxMVowLzEtMCsGA1UEAxMk
ZTY0MmEyZjYtYzJiNi00ZWExLTlhNzUtZmNiYzQ4MWNkODM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGR7d9n9OVdAiMVQFKWNmVyVHZYeUTuSNK8b
qJrAL7Mt9RR819J0Sp+iN0erZpCngP8LNtUv0PdEus0+h9C8lshJ9CKCEU1TXYaZ
LYsiRNfHVV50XmyOMe1NZE+20j/eH0gjr+h5SMz3X8yEcRKRtZ2ijXNRJOsUvH6h
d3OLrm8aQNENrOPqr7cfzBE+iEQjMkw+hidi3sELalqrjw7+y5VJg80o6aqZx+SH
kYA1uVW0EUp6+Jm5jS3dNBKVznZBVSS6WI92Q9mCCwt1AO5ljJDMZvjlLqw03YAb
SryXWLKvOwCW8eI/I2rL+KhwYBSsmOmB15MFNLNMwh+LkdbNKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHMPnFazyxWqyXTvbN/2u+pAxuqEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMDIy
MmIzMy1kOTUzLTQwYmQtOWUxNi04MzhkNTE1YTNlODAvZGZhYzU5NzQtZjc1ZS0z
MjgyLWIzMzAtNGFjOTMwZTRiZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTAyMjJiMzMtZDk1My00MGJkLTll
MTYtODM4ZDUxNWEzZTgwL2UwMjIyYjMzLWQ5NTMtNDBiZC05ZTE2LTgzOGQ1MTVh
M2U4MC5jcmwwHwYDVR0jBBgwFoAUU+sTaTvXHkWKe4HffPv01GMjHOYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lMDIyMmIzMy1kOTUzLTQwYmQtOWUxNi04Mzhk
NTE1YTNlODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FZcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHlNQkkCjUl3vZTpOWJ7wFdrXUaTqOurEm19Gk/3kp27fZfY536DH/0K
nyaMTsrvmpftlJZWJFQ/UCXTh7fHwGnsFml5Q+e/kpkv/YCfomvx74gW22yZJ669
lmN6RH5IyaJMSs55PIzoLq4VurWsaNzIsZyGmn0NFRK936QSuMcX9Z5A2ggcqOoc
/+Y2QjZ/5Dt9RsS37WsHG3BEdTJ3GvodutSNJSCiPcKp4jNhfOiyz8xmZYRRT1M3
i/IXV6HQkdGc8F1/sQhO+QeOeO9wy5YmzTaYvAAHxMHPUpJIN3wlul37Vn1H0Dc4
SZCW3sUWD9t1295XNEhyC66q4lBiCxA=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:36:50 2026 by rpki-client