Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/fe4308ae-d2fa-3f80-b0f4-7ea6ab7c98ff.roa
File:                     fe4308ae-d2fa-3f80-b0f4-7ea6ab7c98ff.roa (raw, json)
Hash identifier:          FZgxUPLeTkOQYe3wF5id32w1UQ/EvrO1rUpHzB0OHd0=
Subject key identifier:   83:3A:56:E7:BF:2E:37:AC:73:22:BF:E1:81:4D:FF:3A:BB:4F:7F:73
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584D24E043D0396C810EAC7DB740
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/fe4308ae-d2fa-3f80-b0f4-7ea6ab7c98ff.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     36040
IP address blocks:        208.117.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:43:d0:39:6c:81:0e:ac:7d:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=6b8ab6a1-7bdd-4ab8-8759-7a18639c8409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f6:6a:4d:b0:f5:79:ee:0f:f0:7f:57:d7:de:
                    d3:8d:ea:56:8c:3f:e3:e5:77:8d:77:2e:0f:88:c8:
                    c7:19:8f:89:3c:32:64:9e:5e:85:2c:b6:e6:6d:38:
                    ce:9d:92:d3:e2:fd:57:19:f9:5b:63:cc:3c:19:6b:
                    9d:ef:b1:28:95:c1:36:fd:c1:66:1c:0b:9f:67:5e:
                    be:b6:2e:31:86:4f:b3:85:e4:ee:fc:5d:b2:44:cd:
                    e7:a7:05:92:56:4b:d1:ae:6d:e3:ec:07:74:fa:70:
                    77:8a:4d:2d:c9:81:6f:17:d4:74:a1:32:a6:78:a2:
                    96:6c:35:91:af:34:b5:64:bb:63:76:09:b8:8d:8e:
                    fc:69:b1:48:5b:33:58:ed:a8:11:de:4f:b3:f1:c9:
                    41:0c:03:02:0d:37:09:84:28:b0:dc:a2:37:a8:e8:
                    38:53:48:71:32:96:9a:2c:43:ea:90:81:2b:83:8a:
                    63:31:d2:0a:58:e2:f1:34:87:db:81:7f:b6:3f:80:
                    cc:e0:d1:d7:a6:35:8e:68:cc:27:6e:dc:2a:e0:b8:
                    1f:e7:51:9c:61:77:35:61:6a:19:b8:dd:68:34:c9:
                    99:22:7b:31:8f:87:43:a1:bf:99:fd:d4:b0:84:62:
                    a0:73:ec:4c:8e:76:5e:4b:76:fc:31:6b:bd:16:a8:
                    b2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3A:56:E7:BF:2E:37:AC:73:22:BF:E1:81:4D:FF:3A:BB:4F:7F:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/fe4308ae-d2fa-3f80-b0f4-7ea6ab7c98ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:79:e8:cd:06:3e:b0:78:77:ff:0b:ba:c3:d6:2e:46:ea:08:
         ce:05:aa:fb:42:f6:08:54:4a:dd:d4:16:76:2f:3d:9e:16:ef:
         41:b9:2c:6c:96:7b:f5:81:b8:75:8a:e5:df:53:16:e6:19:d3:
         22:67:3c:5b:cb:15:1f:0b:c2:fe:36:c2:bb:1d:ec:50:62:a4:
         74:33:bf:f0:20:d5:ff:13:24:3f:8e:5d:0a:61:08:01:27:a1:
         ac:d5:e3:2e:b6:74:8a:35:b0:21:cd:7d:60:3b:5d:5f:a7:c4:
         b5:4f:80:67:73:02:8c:d4:18:a0:06:a4:83:5a:2e:8b:ce:d4:
         5b:53:65:f8:ab:2e:b8:bc:32:c9:cc:bd:13:cf:97:87:6d:04:
         ce:f9:0d:1a:35:6c:ec:56:c2:a5:65:c0:b4:cd:8c:5c:9f:05:
         69:5c:67:84:54:be:c3:0e:08:1d:35:6f:60:1e:aa:97:ba:79:
         86:f1:a3:60:84:33:08:4c:36:08:97:c7:9d:88:ac:c4:c0:e3:
         2a:29:6b:42:3a:53:68:b2:72:0a:e0:6e:9b:74:85:47:2a:da:
         1b:0c:b3:9c:6b:d3:29:6c:74:34:65:c5:07:e3:d4:70:cc:76:
         98:1a:ea:85:ae:8b:ac:9d:24:8c:a3:2e:f6:3a:36:ba:e4:13:
         6c:69:e0:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4EPQOWyBDqx9t0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
NmI4YWI2YTEtN2JkZC00YWI4LTg3NTktN2ExODYzOWM4NDA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPZqTbD1ee4P8H9X197TjepWjD/j5XeNdy4P
iMjHGY+JPDJknl6FLLbmbTjOnZLT4v1XGflbY8w8GWud77EolcE2/cFmHAufZ16+
ti4xhk+zheTu/F2yRM3npwWSVkvRrm3j7Ad0+nB3ik0tyYFvF9R0oTKmeKKWbDWR
rzS1ZLtjdgm4jY78abFIWzNY7agR3k+z8clBDAMCDTcJhCiw3KI3qOg4U0hxMpaa
LEPqkIErg4pjMdIKWOLxNIfbgX+2P4DM4NHXpjWOaMwnbtwq4Lgf51GcYXc1YWoZ
uN1oNMmZInsxj4dDob+Z/dSwhGKgc+xMjnZeS3b8MWu9FqiyKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIM6Vue/LjescyK/4YFN/zq7T39zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvZmU0MzA4YWUtZDJmYS0z
ZjgwLWIwZjQtN2VhNmFiN2M5OGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0HXgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEJ56M0GPrB4d/8LusPWLkbqCM4FqvtC9ghUSt3UFnYvPZ4W70G5LGyW
e/WBuHWK5d9TFuYZ0yJnPFvLFR8Lwv42wrsd7FBipHQzv/Ag1f8TJD+OXQphCAEn
oazV4y62dIo1sCHNfWA7XV+nxLVPgGdzAozUGKAGpINaLovO1FtTZfirLri8MsnM
vRPPl4dtBM75DRo1bOxWwqVlwLTNjFyfBWlcZ4RUvsMOCB01b2Aeqpe6eYbxo2CE
MwhMNgiXx52IrMTA4yopa0I6U2iycgrgbpt0hUcq2hsMs5xr0ylsdDRlxQfj1HDM
dpga6oWui6ydJIyjLvY6NrrkE2xp4Jg=
-----END CERTIFICATE-----
Generated at Thu Mar 19 01:54:32 2026 by rpki-client