Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/585ca79e-ea47-30c0-8c71-3e388273bb4f.roa
File:                     585ca79e-ea47-30c0-8c71-3e388273bb4f.roa (raw, json)
Hash identifier:          LOtgyJwWf8bWRG3qMM1m6Bv/f3hu3AlPYk2SYmf2/yc=
Subject key identifier:   FA:E5:91:AD:C4:A7:21:44:CE:7E:84:01:11:3A:63:CA:4E:DE:9C:94
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F4328584DF0AB394F2114C2FD71720600
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/585ca79e-ea47-30c0-8c71-3e388273bb4f.roa
Signing time:             Sun 24 May 2026 13:00:30 +0000
ROA not before:           Sun 24 May 2026 13:00:30 +0000
ROA not after:            Sat 22 Aug 2026 13:00:30 +0000
asID:                     15164
IP address blocks:        208.82.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f0:ab:39:4f:21:14:c2:fd:71:72:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: May 24 13:00:30 2026 GMT
            Not After : Aug 22 13:00:30 2026 GMT
        Subject: CN=8279d939-1227-4bc9-b0e5-6395c3adb853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:80:04:38:04:89:20:fe:f7:f1:7c:5e:d7:7b:
                    23:ba:3f:41:f6:3d:79:0c:af:8f:17:90:b5:65:8d:
                    79:b9:6e:5f:ee:db:09:07:3b:a7:89:56:72:b7:6d:
                    55:c3:e7:54:9e:11:ed:53:63:0e:49:27:bd:17:90:
                    e1:6a:02:1b:82:c7:01:84:7c:3e:6f:9f:39:a9:11:
                    e6:5e:74:f5:54:4b:1e:20:af:ca:30:7d:0f:57:6e:
                    6c:4b:17:ea:a3:e6:f3:da:53:bc:2b:b8:5b:d2:dd:
                    2b:a1:18:70:c8:0d:d3:2e:67:fc:75:a1:e0:72:a5:
                    de:e1:31:5e:57:b9:aa:13:69:02:b9:d1:9a:3a:0a:
                    f4:71:62:cf:88:3a:d2:67:ae:85:d8:b3:f3:f1:74:
                    61:21:f8:00:ec:ff:6f:9c:52:98:39:e3:94:01:d0:
                    6b:0a:b2:b8:40:3a:bb:e6:27:7e:e0:d7:06:a2:59:
                    ad:92:ec:9b:1d:eb:09:5c:58:5d:4e:06:8f:f3:35:
                    05:b8:a2:f7:c1:7c:ff:fc:fc:8e:a8:59:da:63:ff:
                    3a:23:bc:63:4f:2a:89:a8:46:8a:98:1f:5b:6c:ce:
                    e8:94:c9:2b:fa:b3:90:4c:58:66:74:fa:06:1d:05:
                    69:60:ac:c7:26:99:26:51:5c:d9:68:65:e0:ab:af:
                    f8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E5:91:AD:C4:A7:21:44:CE:7E:84:01:11:3A:63:CA:4E:DE:9C:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/585ca79e-ea47-30c0-8c71-3e388273bb4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.82.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:e2:d5:38:6f:fd:7b:07:49:28:dd:7d:1f:1b:e2:54:b3:e8:
         bc:90:9e:aa:c2:08:e2:af:0c:24:c5:b7:7b:25:04:22:0f:21:
         20:01:5a:18:fd:8f:8a:16:82:a9:02:0b:e2:48:9c:b0:e5:86:
         8f:f1:40:8e:cb:ac:d6:a7:6d:aa:ff:81:5c:9e:4b:cc:13:25:
         b7:fd:fa:83:40:0f:8e:0a:47:c8:a4:8b:41:64:90:3d:8e:8b:
         6a:31:41:64:19:d9:a7:67:45:da:b0:4c:24:dc:96:e2:0b:59:
         52:db:fc:a0:0c:cd:34:bb:cb:57:b0:11:ed:52:c7:97:8c:c2:
         8e:79:ab:a1:8d:17:56:7a:cd:52:c5:e5:d3:c1:6a:a8:d3:53:
         fc:a6:65:e4:b3:37:5e:c1:7e:88:09:1a:25:e5:d3:62:c6:fb:
         0a:96:a1:d4:1d:d7:be:f2:61:20:e2:43:ba:61:64:9f:50:43:
         74:25:77:ec:38:e8:43:61:fc:42:cc:94:f2:85:4e:d5:5f:de:
         56:8e:d7:7a:78:24:b1:74:ac:60:0e:d0:cf:09:44:80:c3:64:
         37:85:0f:87:50:4b:2f:c2:ff:3f:8e:7b:9a:cc:16:48:17:f7:
         86:f0:db:f4:5d:0a:3a:9f:03:25:af:af:4a:02:ed:33:00:27:
         0d:0e:74:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3wqzlPIRTC/XFyBgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1
OTg4MB4XDTI2MDUyNDEzMDAzMFoXDTI2MDgyMjEzMDAzMFowLzEtMCsGA1UEAxMk
ODI3OWQ5MzktMTIyNy00YmM5LWIwZTUtNjM5NWMzYWRiODUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4AEOASJIP738Xxe13sjuj9B9j15DK+PF5C1
ZY15uW5f7tsJBzuniVZyt21Vw+dUnhHtU2MOSSe9F5DhagIbgscBhHw+b585qRHm
XnT1VEseIK/KMH0PV25sSxfqo+bz2lO8K7hb0t0roRhwyA3TLmf8daHgcqXe4TFe
V7mqE2kCudGaOgr0cWLPiDrSZ66F2LPz8XRhIfgA7P9vnFKYOeOUAdBrCrK4QDq7
5id+4NcGolmtkuybHesJXFhdTgaP8zUFuKL3wXz//PyOqFnaY/86I7xjTyqJqEaK
mB9bbM7olMkr+rOQTFhmdPoGHQVpYKzHJpkmUVzZaGXgq6/4dQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPrlka3EpyFEzn6EARE6Y8pO3pyUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0
NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvNTg1Y2E3OWUtZWE0Ny0z
MGMwLThjNzEtM2UzODgyNzNiYjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi
MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl
NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3
ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FJqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKji1Thv/XsHSSjdfR8b4lSz6LyQnqrCCOKvDCTFt3slBCIPISABWhj9
j4oWgqkCC+JInLDlho/xQI7LrNanbar/gVyeS8wTJbf9+oNAD44KR8iki0FkkD2O
i2oxQWQZ2adnRdqwTCTcluILWVLb/KAMzTS7y1ewEe1Sx5eMwo55q6GNF1Z6zVLF
5dPBaqjTU/ymZeSzN17BfogJGiXl02LG+wqWodQd177yYSDiQ7phZJ9QQ3Qld+w4
6ENh/ELMlPKFTtVf3laO13p4JLF0rGAO0M8JRIDDZDeFD4dQSy/C/z+Oe5rMFkgX
94bw2/RdCjqfAyWvr0oC7TMAJw0OdHo=
-----END CERTIFICATE-----
Generated at Sat Jun 13 01:46:59 2026 by rpki-client