Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/84f84f12-38ad-3ae0-a20a-27a22b71a069.roa
File:                     84f84f12-38ad-3ae0-a20a-27a22b71a069.roa (raw, json)
Hash identifier:          CIoAY0PAyhG0VTi3oGQqimOaKe6sPw9azWffK+RpB78=
Subject key identifier:   C1:E6:0F:EE:4C:A7:D4:DA:41:73:87:6D:76:BE:6D:D3:5A:57:BC:3B
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584EB2B1A141C88E0D9B42AA0480
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/84f84f12-38ad-3ae0-a20a-27a22b71a069.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     6922
IP address blocks:        198.215.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:a1:41:c8:8e:0d:9b:42:aa:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=2467a911-ca0b-46a5-b9c1-17eef56e36ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e8:f1:eb:bf:52:73:58:4a:c6:29:78:ee:cf:
                    12:76:8f:0e:66:ae:db:0d:4f:b3:bc:f9:a6:9c:ec:
                    05:85:56:0a:38:16:e7:e5:0c:37:68:63:62:f3:24:
                    d8:4b:a3:3a:7b:a4:12:52:7a:1b:52:fa:04:a2:9c:
                    42:bf:57:5f:56:4d:ca:3e:2b:91:3f:ac:6d:6d:3a:
                    b1:7f:67:dd:7a:9a:44:ec:47:d4:76:d4:12:c0:e3:
                    f6:7c:3c:a3:d6:12:67:dd:f7:75:48:28:eb:75:d2:
                    7e:46:a6:21:c4:13:0d:3e:b4:9c:20:36:a7:d8:88:
                    24:66:85:71:8f:bb:91:3b:dc:38:d0:c8:94:7c:11:
                    44:fb:1e:3e:a3:22:6a:bf:a6:da:33:9b:4e:4a:78:
                    73:58:fe:00:53:92:6d:d4:cf:95:32:02:18:5c:c3:
                    ec:32:3e:00:fa:73:6b:a0:24:3e:d8:8f:a8:5c:af:
                    6b:7d:41:64:9d:8f:34:fb:18:a4:09:ff:30:44:45:
                    c0:d8:00:33:f5:0e:f4:6a:bc:45:b0:ec:90:eb:9f:
                    d4:5f:c4:d0:8a:e0:f1:0f:b3:ca:88:6b:44:2c:06:
                    9a:fd:64:c7:88:a7:8b:0c:ed:5e:ee:47:f6:b9:76:
                    44:47:68:3f:54:b2:3c:39:1a:5b:7b:0a:41:82:29:
                    c9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E6:0F:EE:4C:A7:D4:DA:41:73:87:6D:76:BE:6D:D3:5A:57:BC:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/84f84f12-38ad-3ae0-a20a-27a22b71a069.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.215.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:76:43:20:63:0f:86:03:7f:1c:84:9c:f5:82:15:dc:de:96:
         64:3f:d4:22:9f:c2:c1:ee:6b:9b:bb:8f:a1:a2:b7:7b:26:bd:
         8f:17:03:70:a2:bb:18:e2:a9:17:96:da:88:a4:fd:d7:08:c2:
         af:a0:30:4e:3a:9a:1b:af:e5:39:a3:3f:00:cf:02:92:c1:a0:
         0f:be:9f:54:d2:c1:c9:28:ee:fb:72:9d:5f:04:17:a8:88:0e:
         c4:58:d2:3a:a8:42:94:34:bd:c2:85:f6:48:35:f3:9a:3a:0e:
         ff:f2:d9:96:b9:58:19:24:db:4d:5d:b7:a7:be:d7:75:a3:17:
         a7:93:22:e1:c0:82:a7:b0:75:14:73:16:20:0c:9b:e1:44:c7:
         be:74:21:14:b7:63:3b:b4:8e:9e:da:1a:75:11:37:06:f1:1c:
         53:ab:8b:df:82:ab:72:05:92:3b:91:68:c6:14:1b:e0:e2:89:
         95:34:9f:d3:99:c0:61:24:72:cd:29:39:46:44:1b:bb:48:53:
         33:33:d1:7c:04:d1:20:b9:16:04:d1:dc:56:4e:87:08:87:1c:
         a7:f5:91:8a:f1:5a:f1:a0:50:6b:d1:25:ab:9d:13:77:4b:7c:
         d0:bd:7c:26:9a:e3:60:9d:c5:04:b5:ec:a0:af:d1:98:87:f2:
         77:06:81:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysaFByI4Nm0KqBIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU4MWEyNTYtNDFmZi00ZjUxLTgwOTItYzdmZmZhNGQ5
MjIxMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk
MjQ2N2E5MTEtY2EwYi00NmE1LWI5YzEtMTdlZWY1NmUzNmNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+jx679Sc1hKxil47s8Sdo8OZq7bDU+zvPmm
nOwFhVYKOBbn5Qw3aGNi8yTYS6M6e6QSUnobUvoEopxCv1dfVk3KPiuRP6xtbTqx
f2fdeppE7EfUdtQSwOP2fDyj1hJn3fd1SCjrddJ+RqYhxBMNPrScIDan2IgkZoVx
j7uRO9w40MiUfBFE+x4+oyJqv6baM5tOSnhzWP4AU5Jt1M+VMgIYXMPsMj4A+nNr
oCQ+2I+oXK9rfUFknY80+xikCf8wREXA2AAz9Q70arxFsOyQ65/UX8TQiuDxD7PK
iGtELAaa/WTHiKeLDO1e7kf2uXZER2g/VLI8ORpbewpBginJWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMHmD+5Mp9TaQXOHbXa+bdNaV7w7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgx
YTI1Ni00MWZmLTRmNTEtODA5Mi1jN2ZmZmE0ZDkyMjEvODRmODRmMTItMzhhZC0z
YWUwLWEyMGEtMjdhMjJiNzFhMDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU4MWEyNTYtNDFmZi00ZjUxLTgw
OTItYzdmZmZhNGQ5MjIxLzRlODFhMjU2LTQxZmYtNGY1MS04MDkyLWM3ZmZmYTRk
OTIyMS5jcmwwHwYDVR0jBBgwFoAUwitnYdEerOUTJk8QRtL6zHxFiyowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgxYTI1Ni00MWZmLTRmNTEtODA5Mi1jN2Zm
ZmE0ZDkyMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxtcOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALd2QyBjD4YDfxyEnPWCFdzelmQ/1CKfwsHua5u7j6Git3smvY8XA3Ci
uxjiqReW2oik/dcIwq+gME46mhuv5TmjPwDPApLBoA++n1TSwcko7vtynV8EF6iI
DsRY0jqoQpQ0vcKF9kg185o6Dv/y2Za5WBkk201dt6e+13WjF6eTIuHAgqewdRRz
FiAMm+FEx750IRS3Yzu0jp7aGnURNwbxHFOri9+Cq3IFkjuRaMYUG+DiiZU0n9OZ
wGEkcs0pOUZEG7tIUzMz0XwE0SC5FgTR3FZOhwiHHKf1kYrxWvGgUGvRJaudE3dL
fNC9fCaa42CdxQS17KCv0ZiH8ncGgX8=
-----END CERTIFICATE-----
Generated at Fri Aug 21 23:29:38 2026 by rpki-client