Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/12349ba3-a81e-343e-ad1b-3113628be398.roa
File:                     12349ba3-a81e-343e-ad1b-3113628be398.roa (raw, json)
Hash identifier:          +BLh0pK885iTPJC1fmo5bx9dFIUgCDM6IGKSmMxpJCU=
Subject key identifier:   9D:B4:DD:68:41:8A:24:EE:71:64:BA:2E:7D:61:BA:67:21:FE:B8:CE
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584DFBD5DA7711563A402D739E00
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/12349ba3-a81e-343e-ad1b-3113628be398.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     3561
IP address blocks:        206.98.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:da:77:11:56:3a:40:2d:73:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=e3c9710c-1ae6-4ba5-9ad8-069f1c7116d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:df:40:57:6c:ae:db:5e:15:93:ae:a9:35:bc:
                    0c:3c:69:dd:a5:69:ed:45:d7:e8:44:c7:96:82:3f:
                    45:1a:db:8a:44:ba:bd:8a:9f:3a:47:3c:ea:d0:04:
                    49:52:e2:1a:f1:39:f7:8b:f0:f5:69:59:ec:3a:47:
                    ce:b0:e6:cb:71:17:dc:98:13:31:08:7b:78:6d:f8:
                    9b:bc:46:d4:71:76:00:6e:4d:0f:c6:a6:2f:79:ed:
                    04:e7:69:58:51:d5:54:1b:8b:e7:6b:61:89:4a:6d:
                    b1:74:5b:d5:2f:f7:6c:b5:ee:15:88:3f:90:dd:0b:
                    67:65:05:75:3c:df:ac:fd:f9:7b:c0:23:43:bc:39:
                    d8:67:fe:b1:63:0b:09:d8:ca:c0:6c:34:10:fa:95:
                    8c:7c:30:3e:b3:78:1b:f8:bf:68:43:78:1e:22:ed:
                    ce:6b:01:ab:d4:7f:27:27:d7:57:e1:a2:ef:ad:a8:
                    ac:30:50:4b:cf:83:ea:d6:38:b0:e5:c7:74:05:28:
                    00:92:da:b7:8c:af:cc:0d:26:da:fa:52:c5:74:01:
                    79:7c:02:4f:56:c7:7c:e5:9b:68:1b:21:bc:3e:71:
                    49:35:76:2e:8c:05:09:3a:f0:50:1f:26:09:c9:39:
                    44:86:52:64:e4:3d:1b:9a:35:d1:d6:31:cd:76:3b:
                    25:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B4:DD:68:41:8A:24:EE:71:64:BA:2E:7D:61:BA:67:21:FE:B8:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/12349ba3-a81e-343e-ad1b-3113628be398.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.98.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:5d:d0:96:ad:e8:05:a4:cc:a2:1e:e8:0e:99:88:9f:60:fe:
         1d:ff:11:5b:3a:d0:66:47:b2:0b:06:23:74:51:bf:30:bc:42:
         42:bd:d7:1c:83:ae:3c:82:6c:40:ee:bb:b3:17:cc:47:5e:d7:
         04:76:61:c9:36:e8:71:d5:95:8b:11:ec:ca:33:e6:ba:56:11:
         46:fb:b8:2d:b3:40:19:37:a8:a0:9c:39:94:be:de:bf:c8:9b:
         40:c2:e7:a5:34:66:fe:5f:5f:d5:46:8c:65:85:d3:ee:77:71:
         ea:a7:d0:d5:ed:5c:6a:4f:c7:fc:a2:b9:cf:f2:e7:ef:1e:31:
         0e:83:96:98:fa:13:cb:d5:9b:6d:c7:0c:47:23:c6:48:d0:17:
         3f:dc:b9:c2:1a:cb:e6:b5:94:9c:0b:5c:e7:5a:95:94:0a:09:
         d8:c7:b2:3c:2d:a5:6a:0e:1c:3a:16:79:17:e2:76:1b:e1:2a:
         36:fc:a3:df:69:ec:9e:2e:24:0a:8f:8b:49:7c:43:07:4e:af:
         eb:da:28:73:66:16:ef:3b:8d:fc:34:fc:16:84:59:a9:6b:89:
         10:2b:42:8c:f1:8a:e8:bd:81:87:98:5d:4c:a3:e1:80:ec:25:
         53:20:22:a2:2e:c6:71:f9:4b:91:2c:57:32:12:6b:71:13:55:
         0d:98:aa:81
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE371dp3EVY6QC1zngAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm
M2VjMB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk
ZTNjOTcxMGMtMWFlNi00YmE1LTlhZDgtMDY5ZjFjNzExNmQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut9AV2yu214Vk66pNbwMPGndpWntRdfoRMeW
gj9FGtuKRLq9ip86Rzzq0ARJUuIa8Tn3i/D1aVnsOkfOsObLcRfcmBMxCHt4bfib
vEbUcXYAbk0PxqYvee0E52lYUdVUG4vna2GJSm2xdFvVL/dste4ViD+Q3QtnZQV1
PN+s/fl7wCNDvDnYZ/6xYwsJ2MrAbDQQ+pWMfDA+s3gb+L9oQ3geIu3OawGr1H8n
J9dX4aLvraisMFBLz4Pq1jiw5cd0BSgAktq3jK/MDSba+lLFdAF5fAJPVsd85Zto
GyG8PnFJNXYujAUJOvBQHyYJyTlEhlJk5D0bmjXR1jHNdjslDQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJ203WhBiiTucWS6Ln1humch/rjOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3
YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvMTIzNDliYTMtYTgxZS0z
NDNlLWFkMWItMzExMzYyOGJlMzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5
MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0
ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm
ODgyNGYzZWMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzmIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPl3Qlq3oBaTMoh7oDpmIn2D+Hf8RWzrQZkeyCwYjdFG/MLxCQr3XHIOu
PIJsQO67sxfMR17XBHZhyTbocdWVixHsyjPmulYRRvu4LbNAGTeooJw5lL7ev8ib
QMLnpTRm/l9f1UaMZYXT7ndx6qfQ1e1cak/H/KK5z/Ln7x4xDoOWmPoTy9WbbccM
RyPGSNAXP9y5whrL5rWUnAtc51qVlAoJ2MeyPC2lag4cOhZ5F+J2G+EqNvyj32ns
ni4kCo+LSXxDB06v69ooc2YW7zuN/DT8FoRZqWuJECtCjPGK6L2Bh5hdTKPhgOwl
UyAioi7GcflLkSxXMhJrcRNVDZiqgQ==
-----END CERTIFICATE-----
Generated at Sun May 31 07:32:33 2026 by rpki-client