Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/ed041596-6375-3f2b-bd7b-323afc0a0f85.roa
File:                     ed041596-6375-3f2b-bd7b-323afc0a0f85.roa (raw, json)
Hash identifier:          ecBiQNa4VA6q3wg/SD80YUhwVUmJ88WqGKAQUUMEPOY=
Subject key identifier:   D8:E9:F9:AE:BC:5F:1B:66:C7:E5:8F:50:AB:4E:66:11:29:32:95:6C
Certificate issuer:       /CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee
Certificate serial:       010D0C9F4328584DE15087A2B674BE61C9C3C380
Authority key identifier: EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/ed041596-6375-3f2b-bd7b-323afc0a0f85.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     399806
IP address blocks:        216.230.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:87:a2:b6:74:be:61:c9:c3:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd00198f-a530-490c-8ef5-5c31ac9b88ee
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=196700b5-5a29-4b4f-a68e-f589247cf9a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:65:8f:b5:50:da:15:c9:16:31:39:fd:91:83:
                    1b:e4:cf:c4:30:7e:4b:05:19:c5:9f:da:c7:f7:3f:
                    fb:d1:52:f1:74:da:61:fd:06:a7:88:4d:44:90:e1:
                    0f:6e:1b:12:33:93:62:11:93:b2:67:a0:a5:60:c0:
                    e2:c3:77:8b:47:f6:c3:79:f9:c8:18:e8:f8:50:4f:
                    64:45:42:af:7b:34:7a:19:39:9c:f2:b6:f6:78:7f:
                    e4:ff:2a:7b:d3:03:ed:75:c0:4a:1f:d4:36:c7:ee:
                    ad:4e:74:fe:25:4b:13:d9:03:6a:25:a6:37:fc:ee:
                    d8:36:c2:ee:8c:0d:8f:11:af:01:13:a3:67:d8:1c:
                    c3:75:8e:3b:9e:d7:0e:a4:e7:7e:6d:43:26:f7:df:
                    61:10:2e:eb:98:23:5e:fd:a1:c2:1c:17:c9:31:7a:
                    2a:78:63:a7:76:92:a0:95:a8:f8:0f:a8:c1:b1:3d:
                    42:de:46:c4:33:b8:4d:56:7b:f3:fa:9a:f6:7f:32:
                    ef:f2:ee:1a:ad:3f:35:6f:02:21:45:17:12:c5:36:
                    29:59:81:3d:cb:f3:b9:0c:54:a8:e2:81:c0:c4:f6:
                    fe:47:f3:92:a8:8a:8c:3c:6f:99:d2:5f:66:ed:0d:
                    24:8c:d4:69:39:14:a6:c3:5a:99:e6:80:df:9f:e1:
                    b1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E9:F9:AE:BC:5F:1B:66:C7:E5:8F:50:AB:4E:66:11:29:32:95:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/ed041596-6375-3f2b-bd7b-323afc0a0f85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee/cd00198f-a530-490c-8ef5-5c31ac9b88ee.crl

            X509v3 Authority Key Identifier:
                keyid:EE:B2:E7:54:17:4E:31:C9:7A:0D:15:E5:72:45:5D:67:1D:F3:92:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd00198f-a530-490c-8ef5-5c31ac9b88ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:ea:f8:cc:c3:61:f7:c5:cd:5b:c1:68:65:ee:bc:7e:4c:ac:
         1a:b2:b5:b9:ce:2f:ba:58:f2:11:18:16:97:21:e6:32:88:bc:
         00:48:76:20:ff:39:eb:4c:16:e4:19:af:0b:58:e2:fd:2f:9a:
         ce:36:72:5d:21:78:78:7a:da:9e:22:5e:c3:b5:c6:b0:1d:0c:
         55:c2:77:b6:c1:85:9c:a1:ed:0b:45:73:5d:2a:c2:fb:57:06:
         dc:6f:3a:86:57:5f:1d:1d:22:ed:82:6f:25:ef:29:e9:c0:5f:
         65:8e:10:9a:70:b3:9e:bf:86:8f:44:ad:b5:fd:46:ac:1e:22:
         8a:49:57:ab:0b:a7:94:39:ba:92:ed:fd:84:25:02:1d:2c:70:
         d4:22:eb:45:57:80:88:cb:91:d4:d9:53:e2:0c:5a:88:f9:a8:
         23:ad:5d:f7:61:46:6e:98:89:d2:b8:7f:bf:ce:e2:ee:c1:50:
         62:6f:73:90:3e:67:25:1b:ff:87:fb:5a:4b:78:a7:e7:ee:0c:
         fc:d3:84:2a:dd:1d:bb:2d:45:12:4d:9c:ba:ec:7d:bb:1b:96:
         41:71:21:11:f1:fe:11:5f:37:0f:35:9f:a8:15:ad:a8:c2:91:
         c4:5c:a3:24:b7:f8:8c:af:80:fe:82:ef:34:b0:f5:42:d4:2a:
         e7:27:b2:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUIeitnS+YcnDw4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2QwMDE5OGYtYTUzMC00OTBjLThlZjUtNWMzMWFjOWI4
OGVlMB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk
MTk2NzAwYjUtNWEyOS00YjRmLWE2OGUtZjU4OTI0N2NmOWE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGWPtVDaFckWMTn9kYMb5M/EMH5LBRnFn9rH
9z/70VLxdNph/QaniE1EkOEPbhsSM5NiEZOyZ6ClYMDiw3eLR/bDefnIGOj4UE9k
RUKvezR6GTmc8rb2eH/k/yp70wPtdcBKH9Q2x+6tTnT+JUsT2QNqJaY3/O7YNsLu
jA2PEa8BE6Nn2BzDdY47ntcOpOd+bUMm999hEC7rmCNe/aHCHBfJMXoqeGOndpKg
laj4D6jBsT1C3kbEM7hNVnvz+pr2fzLv8u4arT81bwIhRRcSxTYpWYE9y/O5DFSo
4oHAxPb+R/OSqIqMPG+Z0l9m7Q0kjNRpORSmw1qZ5oDfn+GxMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNjp+a68Xxtmx+WPUKtOZhEpMpVsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZDAw
MTk4Zi1hNTMwLTQ5MGMtOGVmNS01YzMxYWM5Yjg4ZWUvZWQwNDE1OTYtNjM3NS0z
ZjJiLWJkN2ItMzIzYWZjMGEwZjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2QwMDE5OGYtYTUzMC00OTBjLThl
ZjUtNWMzMWFjOWI4OGVlL2NkMDAxOThmLWE1MzAtNDkwYy04ZWY1LTVjMzFhYzli
ODhlZS5jcmwwHwYDVR0jBBgwFoAU7rLnVBdOMcl6DRXlckVdZx3zkr8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9jZDAwMTk4Zi1hNTMwLTQ5MGMtOGVmNS01YzMx
YWM5Yjg4ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2OYIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADrq+MzDYffFzVvBaGXuvH5MrBqytbnOL7pY8hEYFpch5jKIvABIdiD/
OetMFuQZrwtY4v0vms42cl0heHh62p4iXsO1xrAdDFXCd7bBhZyh7QtFc10qwvtX
BtxvOoZXXx0dIu2CbyXvKenAX2WOEJpws56/ho9ErbX9RqweIopJV6sLp5Q5upLt
/YQlAh0scNQi60VXgIjLkdTZU+IMWoj5qCOtXfdhRm6YidK4f7/O4u7BUGJvc5A+
ZyUb/4f7Wkt4p+fuDPzThCrdHbstRRJNnLrsfbsblkFxIRHx/hFfNw81n6gVrajC
kcRcoyS3+IyvgP6C7zSw9ULUKucnsgY=
-----END CERTIFICATE-----
Generated at Fri Jun 12 11:52:42 2026 by rpki-client