Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/9543e3ba-a6cb-35dd-bdea-ec9e3e3d1b9a.roa
File:                     9543e3ba-a6cb-35dd-bdea-ec9e3e3d1b9a.roa (raw, json)
Hash identifier:          tc5s9KBIVPV1k39VuSgvXNNcFHUU7JQ/mwvkq9AD//Q=
Subject key identifier:   B5:A2:40:28:AB:93:5C:20:7D:98:EF:01:8B:14:EB:01:82:C6:BE:5D
Certificate issuer:       /CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
Certificate serial:       010D0C9F4328584DE84B3035037E40976E4080C0
Authority key identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/9543e3ba-a6cb-35dd-bdea-ec9e3e3d1b9a.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     394284
IP address blocks:        216.185.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:30:35:03:7e:40:97:6e:40:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=3ac4918a-af5f-4191-bdc7-08e7ca330e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ac:78:dd:0c:00:34:b5:db:9d:ea:0c:5b:69:
                    9b:9b:24:a5:9e:ab:fd:33:24:cb:62:74:ce:62:b1:
                    0c:fc:7f:61:04:75:9c:52:68:0c:65:24:60:f8:95:
                    56:07:0d:8d:11:bf:5c:47:a7:7e:9d:61:b9:95:b8:
                    ca:0f:af:7b:34:e8:ff:48:4f:80:c5:8d:1b:9c:51:
                    1c:e6:c1:75:60:92:24:4f:96:eb:a4:78:ea:79:5b:
                    f6:e0:e8:9a:be:81:0d:db:bd:9d:36:d8:6a:6f:b0:
                    42:94:33:74:e9:e2:f1:78:b9:f9:0f:52:e0:2a:ad:
                    fa:88:3a:95:86:59:35:0e:cf:9f:bd:d7:e9:d2:60:
                    35:dc:06:42:f8:f6:8c:a8:9d:d8:d8:57:9a:32:90:
                    7e:ba:eb:68:80:1a:d1:40:9b:c8:e6:5b:83:1b:70:
                    7b:c8:24:84:36:64:d9:92:c3:53:05:b4:c0:e8:6c:
                    db:9c:4a:fd:0f:dc:72:23:5c:e8:a5:48:19:ee:93:
                    88:85:08:9d:42:36:10:97:14:4c:3b:5c:91:e1:18:
                    15:91:59:37:e9:f3:c1:81:56:19:a5:d8:4e:80:ef:
                    e4:98:f8:44:c8:89:b6:b3:f9:16:6b:1c:97:a7:8b:
                    e3:16:f0:19:52:91:d4:e2:39:0d:5c:4e:cb:d9:4a:
                    4f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A2:40:28:AB:93:5C:20:7D:98:EF:01:8B:14:EB:01:82:C6:BE:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/9543e3ba-a6cb-35dd-bdea-ec9e3e3d1b9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl

            X509v3 Authority Key Identifier:
                keyid:B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:58:b7:57:ca:43:70:ee:8c:6b:ab:60:f0:d1:5f:17:05:90:
         cd:5a:39:3f:76:eb:3f:06:7e:1c:fc:98:d9:03:42:1a:03:26:
         2a:60:b2:a8:02:f8:4f:4e:2c:93:d8:39:73:56:0b:97:58:a2:
         77:ce:bb:93:77:3e:ab:07:ee:96:27:48:4c:b4:ae:75:73:68:
         f5:95:4a:28:5b:f2:70:a1:64:59:b9:84:68:0e:dd:a6:8e:b6:
         7d:cc:39:71:7a:67:2d:c9:0d:e7:9b:05:29:53:82:21:d7:03:
         b4:64:4f:14:87:43:f8:cd:32:53:19:97:5d:b0:50:7c:3c:28:
         17:9a:e1:1c:fd:ed:01:ca:14:18:38:ae:da:ab:3a:20:65:68:
         f9:51:10:17:80:a4:c3:59:e5:9f:5d:5c:6d:9b:8f:3f:b3:20:
         f2:0f:22:25:29:aa:d0:6f:44:56:2a:5b:c0:26:32:7f:fd:e2:
         77:40:71:02:55:07:5d:13:77:72:a6:7e:d6:35:83:81:59:9d:
         1b:ad:25:96:c4:b2:51:19:b0:f8:77:4b:44:ca:73:bd:d8:c5:
         5e:7f:0f:4b:33:23:b7:6d:44:5b:6a:42:6f:a1:b7:bb:d0:7a:
         cf:02:6d:f5:d4:a8:05:a2:2a:5d:73:03:66:01:9c:e0:43:65:
         b8:80:1d:c0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3oSzA1A35Al25AgMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWY3YzkxYWUtMDI2Yy00NzlkLTljYjUtZDM4MzdlM2Q0
NzUxMB4XDTI2MDUyMTEzMDAzMloXDTI2MDgxOTEzMDAzMlowLzEtMCsGA1UEAxMk
M2FjNDkxOGEtYWY1Zi00MTkxLWJkYzctMDhlN2NhMzMwZTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ax43QwANLXbneoMW2mbmySlnqv9MyTLYnTO
YrEM/H9hBHWcUmgMZSRg+JVWBw2NEb9cR6d+nWG5lbjKD697NOj/SE+AxY0bnFEc
5sF1YJIkT5brpHjqeVv24OiavoEN272dNthqb7BClDN06eLxeLn5D1LgKq36iDqV
hlk1Ds+fvdfp0mA13AZC+PaMqJ3Y2FeaMpB+uutogBrRQJvI5luDG3B7yCSENmTZ
ksNTBbTA6GzbnEr9D9xyI1zopUgZ7pOIhQidQjYQlxRMO1yR4RgVkVk36fPBgVYZ
pdhOgO/kmPhEyIm2s/kWaxyXp4vjFvAZUpHU4jkNXE7L2UpPjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLWiQCirk1wgfZjvAYsU6wGCxr5dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZjdj
OTFhZS0wMjZjLTQ3OWQtOWNiNS1kMzgzN2UzZDQ3NTEvOTU0M2UzYmEtYTZjYi0z
NWRkLWJkZWEtZWM5ZTNlM2QxYjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWY3YzkxYWUtMDI2Yy00NzlkLTlj
YjUtZDM4MzdlM2Q0NzUxLzFmN2M5MWFlLTAyNmMtNDc5ZC05Y2I1LWQzODM3ZTNk
NDc1MS5jcmwwHwYDVR0jBBgwFoAUtjEg3DBLGyb0H+RbK5J9YlJ+E8swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZjdjOTFhZS0wMjZjLTQ3OWQtOWNiNS1kMzgz
N2UzZDQ3NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2LlYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEJYt1fKQ3DujGurYPDRXxcFkM1aOT926z8Gfhz8mNkDQhoDJipgsqgC
+E9OLJPYOXNWC5dYonfOu5N3PqsH7pYnSEy0rnVzaPWVSihb8nChZFm5hGgO3aaO
tn3MOXF6Zy3JDeebBSlTgiHXA7RkTxSHQ/jNMlMZl12wUHw8KBea4Rz97QHKFBg4
rtqrOiBlaPlREBeApMNZ5Z9dXG2bjz+zIPIPIiUpqtBvRFYqW8AmMn/94ndAcQJV
B10Td3KmftY1g4FZnRutJZbEslEZsPh3S0TKc73YxV5/D0szI7dtRFtqQm+ht7vQ
es8CbfXUqAWiKl1zA2YBnOBDZbiAHcA=
-----END CERTIFICATE-----
Generated at Thu Jun 4 19:13:16 2026 by rpki-client