Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58f33d9-1d10-4d07-ae57-7b91ec651785/8539e9b4-3185-3698-92b5-64f6331db01c.roa
File:                     8539e9b4-3185-3698-92b5-64f6331db01c.roa (raw, json)
Hash identifier:          L8bwbEihjRylVVNo5JAlKDh9nLYj5nsYjUZL6tGU2wE=
Subject key identifier:   82:12:56:08:53:24:94:08:C4:1F:31:55:5C:22:F7:5F:D2:A8:A1:D2
Certificate issuer:       /CN=b58f33d9-1d10-4d07-ae57-7b91ec651785
Certificate serial:       010D0C9F4328584D5E1A4C13147B10C739890E30
Authority key identifier: D6:7A:07:6B:47:B5:C4:7A:39:47:A7:AE:35:1D:AD:67:9D:7A:F3:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58f33d9-1d10-4d07-ae57-7b91ec651785.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58f33d9-1d10-4d07-ae57-7b91ec651785/8539e9b4-3185-3698-92b5-64f6331db01c.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     14618
IP address blocks:        199.184.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58f33d9-1d10-4d07-ae57-7b91ec651785/b58f33d9-1d10-4d07-ae57-7b91ec651785.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58f33d9-1d10-4d07-ae57-7b91ec651785/b58f33d9-1d10-4d07-ae57-7b91ec651785.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58f33d9-1d10-4d07-ae57-7b91ec651785.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:4c:13:14:7b:10:c7:39:89:0e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b58f33d9-1d10-4d07-ae57-7b91ec651785
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=c9575dc4-76e2-4188-b4cf-700d1291a35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:de:16:c4:ff:df:32:83:ca:85:3f:f4:2f:e2:
                    86:be:9a:1d:d0:8a:52:4f:3c:d7:d7:46:51:be:e9:
                    ce:ce:59:ed:0e:99:63:16:47:bc:2e:9d:0a:69:e4:
                    6c:83:08:0b:79:5b:c8:79:39:57:00:ba:3d:aa:09:
                    6d:12:e1:f5:43:12:88:29:97:27:8a:e7:a5:c6:65:
                    75:b0:26:83:c0:62:d5:4b:2d:ae:af:80:fc:83:09:
                    f9:8f:51:53:9a:78:e9:da:d8:36:69:05:14:d8:50:
                    eb:00:3e:b0:4b:a2:f4:fd:f5:a5:69:83:f6:f3:37:
                    fa:a8:59:b6:c1:8c:a5:89:15:cd:6b:b4:c5:db:64:
                    9c:26:45:89:e5:df:02:80:17:30:80:cd:2e:d6:95:
                    47:e3:16:b8:20:a3:d3:87:f5:0d:a0:35:37:04:7e:
                    83:88:e1:14:a4:90:ed:77:ef:1c:d2:72:fc:57:ac:
                    38:22:aa:62:d8:f0:7c:9f:91:b2:e2:a1:79:c0:c6:
                    aa:b3:31:9e:b4:6f:6f:50:ba:32:19:f6:25:40:f4:
                    19:8a:63:41:b8:5a:df:30:40:1d:ea:fd:11:32:49:
                    64:6e:4c:6b:bb:91:fb:03:87:ac:45:40:5d:f4:65:
                    1c:41:bf:ef:1d:f5:0b:b0:1f:3d:8b:c5:4f:c3:ce:
                    2b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:12:56:08:53:24:94:08:C4:1F:31:55:5C:22:F7:5F:D2:A8:A1:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58f33d9-1d10-4d07-ae57-7b91ec651785/8539e9b4-3185-3698-92b5-64f6331db01c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58f33d9-1d10-4d07-ae57-7b91ec651785/b58f33d9-1d10-4d07-ae57-7b91ec651785.crl

            X509v3 Authority Key Identifier:
                keyid:D6:7A:07:6B:47:B5:C4:7A:39:47:A7:AE:35:1D:AD:67:9D:7A:F3:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b58f33d9-1d10-4d07-ae57-7b91ec651785.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.184.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:49:ad:98:29:38:2f:66:16:a4:29:d5:c3:0f:fd:cc:d2:17:
         30:73:9b:78:76:da:29:9f:29:8b:29:e1:6b:ed:ba:f7:e8:8a:
         dd:69:d5:a1:d1:21:fd:84:a8:0a:12:7c:e6:45:51:49:21:be:
         4e:fe:82:08:f6:c7:c1:03:02:a2:d1:7c:38:91:d9:a4:6a:ff:
         20:f6:d4:4b:81:76:70:b1:25:b1:89:3f:cd:22:a9:39:3b:c3:
         a8:3e:cb:19:5f:a9:69:90:6b:16:f8:c6:84:db:5c:86:cd:93:
         1e:d3:2c:6b:10:a5:4d:0a:4a:1a:5c:33:e7:cc:ca:25:6e:c2:
         05:a6:e7:04:72:a6:fe:b9:15:57:5b:f4:38:af:2e:ab:42:18:
         4f:fb:84:1f:f2:86:70:18:42:6d:eb:a3:2b:2e:19:67:49:63:
         c4:da:28:cf:2a:b9:0b:a1:4d:44:7c:53:68:93:c5:78:e7:94:
         4e:77:84:42:d5:52:97:2d:64:41:6d:f2:0e:bb:92:7f:17:a4:
         61:4e:b7:da:ec:1e:45:46:f6:fd:46:cf:11:91:43:e4:36:29:
         fc:49:04:6d:8f:ce:b9:1d:1b:fb:2f:5e:a4:4c:b9:81:88:c9:
         0d:02:05:bc:a7:3b:d3:fe:19:13:83:d2:eb:0b:a4:41:35:3d:
         bb:ae:5f:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGkwTFHsQxzmJDjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU4ZjMzZDktMWQxMC00ZDA3LWFlNTctN2I5MWVjNjUx
Nzg1MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk
Yzk1NzVkYzQtNzZlMi00MTg4LWI0Y2YtNzAwZDEyOTFhMzVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvt4WxP/fMoPKhT/0L+KGvpod0IpSTzzX10ZR
vunOzlntDpljFke8Lp0KaeRsgwgLeVvIeTlXALo9qgltEuH1QxKIKZcniuelxmV1
sCaDwGLVSy2ur4D8gwn5j1FTmnjp2tg2aQUU2FDrAD6wS6L0/fWlaYP28zf6qFm2
wYyliRXNa7TF22ScJkWJ5d8CgBcwgM0u1pVH4xa4IKPTh/UNoDU3BH6DiOEUpJDt
d+8c0nL8V6w4Iqpi2PB8n5Gy4qF5wMaqszGetG9vULoyGfYlQPQZimNBuFrfMEAd
6v0RMklkbkxru5H7A4esRUBd9GUcQb/vHfULsB89i8VPw84rrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIISVghTJJQIxB8xVVwi91/SqKHSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNThm
MzNkOS0xZDEwLTRkMDctYWU1Ny03YjkxZWM2NTE3ODUvODUzOWU5YjQtMzE4NS0z
Njk4LTkyYjUtNjRmNjMzMWRiMDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjU4ZjMzZDktMWQxMC00ZDA3LWFl
NTctN2I5MWVjNjUxNzg1L2I1OGYzM2Q5LTFkMTAtNGQwNy1hZTU3LTdiOTFlYzY1
MTc4NS5jcmwwHwYDVR0jBBgwFoAU1noHa0e1xHo5R6euNR2tZ51687owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iNThmMzNkOS0xZDEwLTRkMDctYWU1Ny03Yjkx
ZWM2NTE3ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7jPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEpJrZgpOC9mFqQp1cMP/czSFzBzm3h22imfKYsp4Wvtuvfoit1p1aHR
If2EqAoSfOZFUUkhvk7+ggj2x8EDAqLRfDiR2aRq/yD21EuBdnCxJbGJP80iqTk7
w6g+yxlfqWmQaxb4xoTbXIbNkx7TLGsQpU0KShpcM+fMyiVuwgWm5wRypv65FVdb
9DivLqtCGE/7hB/yhnAYQm3roysuGWdJY8TaKM8quQuhTUR8U2iTxXjnlE53hELV
UpctZEFt8g67kn8XpGFOt9rsHkVG9v1GzxGRQ+Q2KfxJBG2PzrkdG/svXqRMuYGI
yQ0CBbynO9P+GROD0usLpEE1PbuuXwI=
-----END CERTIFICATE-----
Generated at Tue Apr 7 10:35:11 2026 by rpki-client