Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/6cd2f3fb-e54b-3ae8-8c81-b7ad27098123.roa
File:                     6cd2f3fb-e54b-3ae8-8c81-b7ad27098123.roa (raw, json)
Hash identifier:          +OZU+yWlq4AgiXJUKqM0GxGZJ83wF37OG+YtMcdURGQ=
Subject key identifier:   BE:B0:C0:9C:79:BB:16:82:3F:BE:2C:15:D9:9B:5C:11:C5:40:AB:6A
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F4328584DD8F06D36CDDA288E264F5700
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/6cd2f3fb-e54b-3ae8-8c81-b7ad27098123.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     14618
IP address blocks:        104.218.200.0/24 maxlen: 24
                          104.218.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:6d:36:cd:da:28:8e:26:4f:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=894d458d-af3a-4ff6-aed2-c054b6f711ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a1:f9:78:26:34:9d:21:04:8d:e3:82:2b:1f:
                    29:4c:8e:99:06:20:e9:12:b8:a3:f9:b4:54:46:6a:
                    b8:1a:ce:2e:fe:fd:a6:60:07:b0:4b:62:b5:df:a7:
                    03:cc:30:54:dc:1c:58:e9:e0:50:4a:55:8e:79:84:
                    1d:44:e1:98:06:20:8a:d2:c6:56:eb:c6:c8:94:3a:
                    73:1b:a3:5d:de:10:a3:2a:45:6a:77:f4:f7:f4:16:
                    ec:d9:8c:fc:e2:07:10:5f:f0:da:e3:ea:e6:4b:01:
                    82:d6:ed:45:de:fa:ff:20:22:38:80:ec:a9:33:d9:
                    f5:4d:79:3d:da:cb:7a:3a:ec:7a:84:59:c7:0c:73:
                    aa:34:04:ba:33:9a:8d:ab:2d:3f:c8:5e:9c:30:f4:
                    80:6e:21:95:89:2d:d6:87:57:41:77:dc:97:d8:3f:
                    62:81:5e:25:28:aa:e6:fb:60:ce:24:20:88:7b:85:
                    13:d5:f0:56:ac:b4:08:e7:c3:d9:b1:17:51:2a:82:
                    ae:b0:8e:4b:ad:b8:bf:31:da:6d:8c:2e:30:7c:7f:
                    01:94:6d:26:b1:85:ec:d6:4e:90:b1:1d:f8:2c:d7:
                    18:22:82:b5:8d:68:c8:10:80:7b:8e:9f:a8:a1:61:
                    fd:b9:21:5e:54:6a:f9:7a:4a:9f:46:a5:f4:fb:88:
                    04:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B0:C0:9C:79:BB:16:82:3F:BE:2C:15:D9:9B:5C:11:C5:40:AB:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/6cd2f3fb-e54b-3ae8-8c81-b7ad27098123.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.200.0/24
                  104.218.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:b5:46:a2:3a:17:51:82:a2:b6:cb:c3:17:b7:e7:3d:9f:6f:
         50:8d:45:ae:2c:fb:b8:4f:78:12:87:b2:9e:7b:c8:52:33:b3:
         97:e2:48:d1:63:42:a3:4c:23:bb:a3:d6:a2:de:89:2c:51:47:
         3a:8f:04:0f:a6:bf:04:9a:63:1f:90:9e:da:81:0a:a9:2e:0d:
         e0:84:36:7c:45:d2:0b:64:4e:01:7d:dd:8f:3f:0c:06:57:89:
         16:79:de:c8:ad:55:bc:2d:bb:37:67:26:78:e3:34:ec:17:52:
         94:f5:4e:8c:91:35:c9:b0:42:53:bc:fd:4c:9c:8e:be:3e:67:
         ba:f1:34:ce:5d:94:33:ee:c8:c6:43:bc:8a:01:e1:55:29:f1:
         e6:93:b2:1c:5d:34:05:38:3f:19:63:fb:e6:c0:ae:f4:6e:5b:
         f8:f3:e6:7a:93:8f:a6:7c:e9:9b:39:c6:fd:90:6f:69:a4:aa:
         6a:0b:b2:ef:36:54:0b:95:5f:2a:38:86:46:2c:95:c0:cf:6b:
         12:64:ff:df:3d:7a:f2:ac:46:7d:f6:2f:bb:4b:f2:22:f4:8b:
         fb:84:5c:25:1a:a8:f4:10:8e:2a:3f:7b:32:f6:30:22:99:0b:
         d5:9a:da:2c:b5:f8:77:c2:68:cd:58:c4:fd:3f:c1:41:6d:9d:
         d4:8b:c8:c9
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE3Y8G02zdoojiZPVwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5
MGNmMB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk
ODk0ZDQ1OGQtYWYzYS00ZmY2LWFlZDItYzA1NGI2ZjcxMWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraH5eCY0nSEEjeOCKx8pTI6ZBiDpErij+bRU
Rmq4Gs4u/v2mYAewS2K136cDzDBU3BxY6eBQSlWOeYQdROGYBiCK0sZW68bIlDpz
G6Nd3hCjKkVqd/T39Bbs2Yz84gcQX/Da4+rmSwGC1u1F3vr/ICI4gOypM9n1TXk9
2st6Oux6hFnHDHOqNAS6M5qNqy0/yF6cMPSAbiGViS3Wh1dBd9yX2D9igV4lKKrm
+2DOJCCIe4UT1fBWrLQI58PZsRdRKoKusI5Lrbi/MdptjC4wfH8BlG0msYXs1k6Q
sR34LNcYIoK1jWjIEIB7jp+ooWH9uSFeVGr5ekqfRqX0+4gEIwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFL6wwJx5uxaCP74sFdmbXBHFQKtqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl
NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvNmNkMmYzZmItZTU0Yi0z
YWU4LThjODEtYjdhZDI3MDk4MTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi
MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0
OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4
NTU1NDkwY2YuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaNrIAwQA
aNrLMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBADi1RqI6F1GCorbLwxe35z2fb1CNRa4s+7hPeBKHsp57yFIz
s5fiSNFjQqNMI7uj1qLeiSxRRzqPBA+mvwSaYx+QntqBCqkuDeCENnxF0gtkTgF9
3Y8/DAZXiRZ53sitVbwtuzdnJnjjNOwXUpT1ToyRNcmwQlO8/Uycjr4+Z7rxNM5d
lDPuyMZDvIoB4VUp8eaTshxdNAU4Pxlj++bArvRuW/jz5nqTj6Z86Zs5xv2Qb2mk
qmoLsu82VAuVXyo4hkYslcDPaxJk/989evKsRn32L7tL8iL0i/uEXCUaqPQQjio/
ezL2MCKZC9Wa2iy1+HfCaM1YxP0/wUFtndSLyMk=
-----END CERTIFICATE-----
Generated at Fri May 22 14:20:14 2026 by rpki-client