Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/df6f2c50-3a53-3df5-8439-8af92293615d.roa
File:                     df6f2c50-3a53-3df5-8439-8af92293615d.roa (raw, json)
Hash identifier:          8bnVVOSJBHP/eUzux8MXhBfL2fkb6jEf5r0dsS70Csg=
Subject key identifier:   5D:89:FA:2A:7E:89:A5:4B:7E:47:EE:15:67:BB:A2:14:AC:B1:8D:B1
Certificate issuer:       /CN=b741a525-1b5e-4308-93b6-815fed38e182
Certificate serial:       010D0C9F4328584DF4DB400CB8885CEC20F88980
Authority key identifier: B9:2F:F8:2F:D3:08:81:EE:3C:3A:BC:B0:88:BD:60:E2:F0:88:EE:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/df6f2c50-3a53-3df5-8439-8af92293615d.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     26253
IP address blocks:        205.209.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/b741a525-1b5e-4308-93b6-815fed38e182.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/b741a525-1b5e-4308-93b6-815fed38e182.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:40:0c:b8:88:5c:ec:20:f8:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b741a525-1b5e-4308-93b6-815fed38e182
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=45d0cb9f-204f-438a-ac23-67735a0300b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9a:35:5c:f7:8d:9f:ad:a9:e9:a4:07:e8:7a:
                    7b:f3:ee:b9:52:77:c2:56:df:d9:1b:15:2a:03:8b:
                    5a:78:b9:8c:97:2d:7b:76:91:a1:3e:6a:28:de:68:
                    d5:da:55:7d:55:19:8f:f2:ea:6c:b0:3b:10:91:15:
                    1e:6a:52:5b:c1:8f:db:70:76:12:e2:95:99:45:5b:
                    7d:e7:b9:d7:cf:a2:6f:b0:eb:7c:2e:e6:de:bd:a0:
                    fd:27:e4:e1:2f:6e:f8:33:6a:fb:43:e8:07:fb:33:
                    de:a4:63:12:78:e1:80:4e:8c:9e:84:c2:b0:fa:d3:
                    42:fd:81:55:3e:a3:09:82:2e:be:7c:1f:17:e1:f6:
                    c0:59:6c:29:c7:d1:be:47:24:3a:03:e8:b9:ca:6b:
                    47:43:7c:0a:22:76:98:c7:12:01:9f:53:05:17:35:
                    ca:ff:98:6b:1a:39:4f:99:cb:ac:5c:55:81:a1:48:
                    31:69:cb:f6:94:74:56:9b:c8:0a:a4:48:9e:46:17:
                    78:16:be:20:e2:77:82:9f:35:99:b6:95:78:4d:06:
                    9c:eb:fa:b9:92:ca:c1:d9:bd:c0:2f:6e:40:ab:de:
                    c2:e9:60:de:e8:ff:d1:ab:40:f4:ce:db:36:12:71:
                    bf:23:81:c9:ff:68:56:5a:cc:51:b0:11:5f:d3:e3:
                    3c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:89:FA:2A:7E:89:A5:4B:7E:47:EE:15:67:BB:A2:14:AC:B1:8D:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/df6f2c50-3a53-3df5-8439-8af92293615d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182/b741a525-1b5e-4308-93b6-815fed38e182.crl

            X509v3 Authority Key Identifier:
                keyid:B9:2F:F8:2F:D3:08:81:EE:3C:3A:BC:B0:88:BD:60:E2:F0:88:EE:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b741a525-1b5e-4308-93b6-815fed38e182.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.209.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:c7:8d:12:15:ed:f1:78:ef:35:cd:ae:44:52:7a:48:c6:eb:
         7a:4b:55:5b:a7:2f:e8:f4:37:7a:1a:ee:36:45:54:43:d5:8a:
         5e:99:04:02:31:17:aa:23:1b:b3:0a:c5:21:2d:71:c5:1a:67:
         7e:d0:d2:d3:5f:ec:38:f7:a3:1c:88:73:b8:7d:49:99:f2:96:
         e4:5a:d5:11:00:47:ba:53:1c:9b:5d:cf:cd:df:ad:79:75:e3:
         7d:18:af:ab:e9:fb:c7:73:63:99:4b:57:94:f8:7a:2f:34:fc:
         59:83:3e:a4:63:4a:f0:3a:8b:43:82:d3:4e:fe:7e:fc:e6:06:
         57:7a:6d:73:aa:29:ee:a9:f6:74:c5:15:3a:5b:44:8b:33:9d:
         65:55:cf:1e:31:f6:99:e9:04:1e:c1:85:1f:c6:ae:a0:14:95:
         73:c8:fb:32:e9:20:e2:dd:76:5b:25:27:f7:db:29:54:87:25:
         fd:94:d9:29:19:9c:ff:fa:c8:8f:da:da:1f:2b:cd:1e:8b:6f:
         23:ae:38:1e:8b:b1:d5:e7:5d:61:8b:99:e5:86:35:24:94:66:
         ce:54:5d:6d:7d:63:5b:34:10:50:8f:ad:ce:11:90:4a:05:ba:
         7f:f9:3b:a5:fa:c8:d3:ad:02:e6:eb:15:2f:2f:ee:ec:19:b1:
         13:1a:c2:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3020AMuIhc7CD4iYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc0MWE1MjUtMWI1ZS00MzA4LTkzYjYtODE1ZmVkMzhl
MTgyMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk
NDVkMGNiOWYtMjA0Zi00MzhhLWFjMjMtNjc3MzVhMDMwMGIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpo1XPeNn62p6aQH6Hp78+65UnfCVt/ZGxUq
A4taeLmMly17dpGhPmoo3mjV2lV9VRmP8upssDsQkRUealJbwY/bcHYS4pWZRVt9
57nXz6JvsOt8LubevaD9J+ThL274M2r7Q+gH+zPepGMSeOGAToyehMKw+tNC/YFV
PqMJgi6+fB8X4fbAWWwpx9G+RyQ6A+i5ymtHQ3wKInaYxxIBn1MFFzXK/5hrGjlP
mcusXFWBoUgxacv2lHRWm8gKpEieRhd4Fr4g4neCnzWZtpV4TQac6/q5ksrB2b3A
L25Aq97C6WDe6P/Rq0D0zts2EnG/I4HJ/2hWWsxRsBFf0+M8RwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF2J+ip+iaVLfkfuFWe7ohSssY2xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNzQx
YTUyNS0xYjVlLTQzMDgtOTNiNi04MTVmZWQzOGUxODIvZGY2ZjJjNTAtM2E1My0z
ZGY1LTg0MzktOGFmOTIyOTM2MTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjc0MWE1MjUtMWI1ZS00MzA4LTkz
YjYtODE1ZmVkMzhlMTgyL2I3NDFhNTI1LTFiNWUtNDMwOC05M2I2LTgxNWZlZDM4
ZTE4Mi5jcmwwHwYDVR0jBBgwFoAUuS/4L9MIge48OrywiL1g4vCI7ngwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNzQxYTUyNS0xYjVlLTQzMDgtOTNiNi04MTVm
ZWQzOGUxODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzdEMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD7HjRIV7fF47zXNrkRSekjG63pLVVunL+j0N3oa7jZFVEPVil6ZBAIx
F6ojG7MKxSEtccUaZ37Q0tNf7Dj3oxyIc7h9SZnyluRa1REAR7pTHJtdz83frXl1
430Yr6vp+8dzY5lLV5T4ei80/FmDPqRjSvA6i0OC007+fvzmBld6bXOqKe6p9nTF
FTpbRIsznWVVzx4x9pnpBB7BhR/GrqAUlXPI+zLpIOLddlslJ/fbKVSHJf2U2SkZ
nP/6yI/a2h8rzR6LbyOuOB6LsdXnXWGLmeWGNSSUZs5UXW19Y1s0EFCPrc4RkEoF
un/5O6X6yNOtAubrFS8v7uwZsRMawhc=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:59:38 2026 by rpki-client