Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c7423b4-93b4-3e27-9226-4ac78da1c0d7.roa
File:                     4c7423b4-93b4-3e27-9226-4ac78da1c0d7.roa (raw, json)
Hash identifier:          2z7n2GmNWdzEUr9TkFOlU+uPpLCtt00Z7dR7QFdZm0k=
Subject key identifier:   BC:A6:2E:9E:B0:C8:5F:FC:75:32:51:17:BF:A1:B7:98:AF:B0:4D:6E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E296EFFE974AF67EDD48FB800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c7423b4-93b4-3e27-9226-4ac78da1c0d7.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     36626
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6e:ff:e9:74:af:67:ed:d4:8f:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=078d0cd3-48d9-487e-a78b-2b76772f1849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fc:40:e5:fd:c9:f8:23:ae:21:9c:a2:73:05:
                    f4:48:c5:9f:3a:9c:17:54:76:f4:96:3a:d7:19:a6:
                    88:bb:5f:3f:34:3e:68:d5:99:62:6d:9a:1f:1a:36:
                    17:d7:d3:9a:8e:d2:f9:36:44:57:45:6b:c3:e3:ae:
                    d9:68:61:19:79:58:ec:09:db:85:9e:38:53:38:08:
                    99:d7:7a:8c:18:42:c9:1d:93:b4:5d:86:a7:19:1b:
                    ff:dd:77:72:bc:f8:12:ac:a5:3e:b2:f0:1e:85:11:
                    17:fc:49:fc:e3:47:10:c4:a0:a3:b1:fd:9d:23:fc:
                    82:a3:84:d4:6f:a9:7b:bd:82:04:85:02:00:a6:5f:
                    6a:2d:bc:32:17:e1:27:57:4c:2b:bc:4f:01:26:60:
                    d0:84:56:fa:13:c2:d3:6e:8c:73:18:ed:f7:5a:36:
                    90:23:e2:42:da:c8:db:0a:6e:a1:8a:81:26:b2:00:
                    c8:79:57:fe:94:e2:63:1d:e4:9f:ea:95:f2:a6:11:
                    63:06:27:b8:4e:9c:ac:d9:f5:72:90:b5:f0:a8:c8:
                    8f:57:96:dc:c4:e1:80:f7:ef:47:a5:86:43:11:1b:
                    8f:ee:21:a9:60:49:48:1f:48:2c:b7:d5:c8:b4:e3:
                    2b:f1:2f:26:9c:03:58:95:38:af:ec:95:0e:2b:a9:
                    95:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A6:2E:9E:B0:C8:5F:FC:75:32:51:17:BF:A1:B7:98:AF:B0:4D:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c7423b4-93b4-3e27-9226-4ac78da1c0d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:82:66:c8:d9:62:73:4c:72:83:c5:0f:85:05:9a:ca:15:ee:
         c1:b4:a2:99:8e:fc:85:b5:e6:57:84:fe:56:05:ee:b0:bd:73:
         1b:bb:e1:71:9b:20:ba:67:76:c8:c1:73:04:09:0a:66:04:10:
         d4:5e:03:85:fe:70:50:f9:0a:01:a7:2c:88:3a:ed:19:04:a9:
         ff:6f:19:b3:e0:50:59:2e:4d:5d:ac:99:45:c1:28:16:72:08:
         64:1e:f5:7a:08:dd:d6:79:af:0f:60:d8:f8:52:4c:ac:ac:7a:
         60:b4:2a:45:14:e4:0a:be:92:c2:47:bc:ab:9d:21:f9:82:22:
         1f:e5:f3:8b:6a:f0:4d:65:78:c2:fb:92:e4:f2:cc:12:36:3a:
         ae:3b:63:c0:5c:3e:f6:dd:d4:35:6e:bf:b4:29:d6:4c:5f:ba:
         ef:a3:b9:64:a8:27:e6:af:1f:35:31:27:61:5d:11:75:09:1d:
         07:44:38:7d:29:b3:54:14:68:f7:70:9d:a8:88:24:aa:98:fd:
         00:07:0f:a4:83:bc:d4:b6:dd:56:6a:4f:49:48:44:ec:7f:d0:
         08:7e:c3:65:3a:e9:08:3b:14:db:9b:3c:8e:10:e2:86:63:3d:
         5d:28:6a:fa:93:20:44:2e:2f:23:bb:b9:ed:d0:52:65:43:dc:
         c6:be:a4:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4pbv/pdK9n7dSPuAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYxMzIxMDAxMloXDTI2MDkxMTIxMDAxMlowLzEtMCsGA1UEAxMk
MDc4ZDBjZDMtNDhkOS00ODdlLWE3OGItMmI3Njc3MmYxODQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/xA5f3J+COuIZyicwX0SMWfOpwXVHb0ljrX
GaaIu18/ND5o1ZlibZofGjYX19OajtL5NkRXRWvD467ZaGEZeVjsCduFnjhTOAiZ
13qMGELJHZO0XYanGRv/3XdyvPgSrKU+svAehREX/En840cQxKCjsf2dI/yCo4TU
b6l7vYIEhQIApl9qLbwyF+EnV0wrvE8BJmDQhFb6E8LTboxzGO33WjaQI+JC2sjb
Cm6hioEmsgDIeVf+lOJjHeSf6pXyphFjBie4Tpys2fVykLXwqMiPV5bcxOGA9+9H
pYZDERuP7iGpYElIH0gst9XItOMr8S8mnANYlTiv7JUOK6mVbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLymLp6wyF/8dTJRF7+ht5ivsE1uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGM3NDIzYjQtOTNiNC0z
ZTI3LTkyMjYtNGFjNzhkYTFjMGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFCCZsjZYnNMcoPFD4UFmsoV7sG0opmO/IW15leE/lYF7rC9cxu74XGb
ILpndsjBcwQJCmYEENReA4X+cFD5CgGnLIg67RkEqf9vGbPgUFkuTV2smUXBKBZy
CGQe9XoI3dZ5rw9g2PhSTKysemC0KkUU5Aq+ksJHvKudIfmCIh/l84tq8E1leML7
kuTyzBI2Oq47Y8BcPvbd1DVuv7Qp1kxfuu+juWSoJ+avHzUxJ2FdEXUJHQdEOH0p
s1QUaPdwnaiIJKqY/QAHD6SDvNS23VZqT0lIROx/0Ah+w2U66Qg7FNubPI4Q4oZj
PV0oavqTIEQuLyO7ue3QUmVD3Ma+pMI=
-----END CERTIFICATE-----
Generated at Sun Jun 28 23:07:38 2026 by rpki-client