Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4aa3d9ad-eaaa-324c-9b4b-9b06e800a692.roa
File:                     4aa3d9ad-eaaa-324c-9b4b-9b06e800a692.roa (raw, json)
Hash identifier:          u/4iHoBJXn+8Pg/0sKqmvDXy0AfEeKqpo3SCbH9K/cg=
Subject key identifier:   D6:F7:C4:87:99:17:30:23:73:78:FC:DD:5F:66:77:37:F1:DB:1C:71
Certificate issuer:       /CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c
Certificate serial:       010D0C9F4328584E3A2F2991EC8A50BFB2880BF4
Authority key identifier: 8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4aa3d9ad-eaaa-324c-9b4b-9b06e800a692.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     22438
IP address blocks:        208.90.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:29:91:ec:8a:50:bf:b2:88:0b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e1921cb-6b6c-406a-88c4-7f22ac12547c
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=db8b23d1-73eb-4f78-ba6d-a243d3986afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ac:8f:6e:f5:e2:c7:c9:cc:f7:b8:46:9e:dc:
                    d6:17:6e:3b:66:94:f5:d1:9d:49:d6:e8:90:a7:d5:
                    d7:ab:e9:5f:23:db:66:c3:96:d1:47:e2:7c:2c:53:
                    1c:04:b9:7e:2f:f9:4f:be:5c:8a:45:b8:b7:f8:f8:
                    ac:07:b8:10:ec:98:2c:cc:ab:e0:2c:4d:1b:7b:01:
                    1e:df:eb:34:3d:76:1d:d0:52:9a:63:fc:8f:f4:3c:
                    39:74:61:f6:6b:91:69:84:78:6c:7e:26:45:95:eb:
                    42:0e:5a:b5:c5:b3:40:ef:17:79:61:2b:c0:d6:2d:
                    8e:fa:49:46:56:90:98:d3:ed:8c:ed:9f:fd:82:d1:
                    05:54:6f:b4:82:20:a6:c2:99:98:43:88:2f:15:3c:
                    e5:ad:8c:01:ec:ac:5e:bc:60:17:f8:8e:17:dc:6e:
                    85:11:9c:74:8e:8f:ff:30:fb:fd:64:fa:94:02:20:
                    de:6f:a5:d6:16:e0:fa:93:7e:c7:87:30:a7:39:92:
                    74:15:68:48:be:a7:40:7a:bb:88:aa:11:cf:49:fd:
                    37:c3:24:97:3c:86:05:3c:4c:a4:f7:bf:e6:a6:6f:
                    6b:ad:75:c2:5e:0f:c1:29:51:0a:57:e8:99:a3:79:
                    ad:02:da:27:c1:de:48:2b:f7:c7:f0:dd:0c:60:1a:
                    01:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F7:C4:87:99:17:30:23:73:78:FC:DD:5F:66:77:37:F1:DB:1C:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4aa3d9ad-eaaa-324c-9b4b-9b06e800a692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c/4e1921cb-6b6c-406a-88c4-7f22ac12547c.crl

            X509v3 Authority Key Identifier:
                keyid:8D:D0:CF:1D:B3:9B:5E:5B:0C:E8:C1:27:62:47:6D:CE:0A:F2:2B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4e1921cb-6b6c-406a-88c4-7f22ac12547c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.90.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:20:65:02:a4:5a:aa:63:1c:aa:53:ca:d4:9d:ac:b3:9f:c5:
         5a:32:7d:3c:02:50:5a:ea:23:5b:1b:ff:eb:ba:53:3e:42:78:
         7f:aa:29:9b:8b:86:e7:78:39:0a:15:65:13:34:d8:8e:08:92:
         d6:8f:25:40:75:40:6c:7d:bd:8c:7e:c6:f0:d5:8d:54:da:4c:
         11:2b:f4:4c:18:9f:28:be:cd:45:1f:e1:d3:b4:96:41:02:89:
         78:2a:7b:19:ed:c5:c6:2e:ed:72:d0:7a:b7:1f:e5:ea:b6:0a:
         9a:32:06:e2:d6:f0:5c:00:64:57:50:bc:98:8c:fb:93:73:40:
         94:86:ad:28:25:76:e8:3d:91:5a:39:54:d6:db:86:8b:0e:5f:
         4f:95:b0:e4:6f:42:a2:41:00:e3:8b:31:8f:b4:99:64:95:03:
         77:aa:90:fa:9b:b9:40:9f:18:cc:06:fd:0e:f4:ec:36:17:ed:
         7f:b2:d0:1a:83:88:2c:83:16:65:13:79:49:a9:24:24:2e:5b:
         72:2f:df:86:b9:6d:f9:93:9c:5e:90:bf:9b:ae:b9:ff:81:1b:
         b4:4f:35:af:13:af:ed:85:05:f5:5c:a7:44:7c:a6:f4:cb:e1:
         d5:ee:4c:b0:36:16:2e:16:f0:f9:7b:fc:87:f6:ac:84:33:42:
         f9:f8:04:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46LymR7IpQv7KIC/QwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUxOTIxY2ItNmI2Yy00MDZhLTg4YzQtN2YyMmFjMTI1
NDdjMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk
ZGI4YjIzZDEtNzNlYi00Zjc4LWJhNmQtYTI0M2QzOTg2YWZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtayPbvXix8nM97hGntzWF247ZpT10Z1J1uiQ
p9XXq+lfI9tmw5bRR+J8LFMcBLl+L/lPvlyKRbi3+PisB7gQ7JgszKvgLE0bewEe
3+s0PXYd0FKaY/yP9Dw5dGH2a5FphHhsfiZFletCDlq1xbNA7xd5YSvA1i2O+klG
VpCY0+2M7Z/9gtEFVG+0giCmwpmYQ4gvFTzlrYwB7KxevGAX+I4X3G6FEZx0jo//
MPv9ZPqUAiDeb6XWFuD6k37HhzCnOZJ0FWhIvqdAeruIqhHPSf03wySXPIYFPEyk
97/mpm9rrXXCXg/BKVEKV+iZo3mtAtonwd5IK/fH8N0MYBoBRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNb3xIeZFzAjc3j83V9mdzfx2xxxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZTE5
MjFjYi02YjZjLTQwNmEtODhjNC03ZjIyYWMxMjU0N2MvNGFhM2Q5YWQtZWFhYS0z
MjRjLTliNGItOWIwNmU4MDBhNjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGUxOTIxY2ItNmI2Yy00MDZhLTg4
YzQtN2YyMmFjMTI1NDdjLzRlMTkyMWNiLTZiNmMtNDA2YS04OGM0LTdmMjJhYzEy
NTQ3Yy5jcmwwHwYDVR0jBBgwFoAUjdDPHbObXlsM6MEnYkdtzgryKxQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZTE5MjFjYi02YjZjLTQwNmEtODhjNC03ZjIy
YWMxMjU0N2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FrAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA4gZQKkWqpjHKpTytSdrLOfxVoyfTwCUFrqI1sb/+u6Uz5CeH+qKZuL
hud4OQoVZRM02I4IktaPJUB1QGx9vYx+xvDVjVTaTBEr9EwYnyi+zUUf4dO0lkEC
iXgqexntxcYu7XLQercf5eq2CpoyBuLW8FwAZFdQvJiM+5NzQJSGrSgldug9kVo5
VNbbhosOX0+VsORvQqJBAOOLMY+0mWSVA3eqkPqbuUCfGMwG/Q707DYX7X+y0BqD
iCyDFmUTeUmpJCQuW3Iv34a5bfmTnF6Qv5uuuf+BG7RPNa8Tr+2FBfVcp0R8pvTL
4dXuTLA2Fi4W8Pl7/If2rIQzQvn4BJ4=
-----END CERTIFICATE-----
Generated at Thu Jul 9 10:25:53 2026 by rpki-client