Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/cd337d2d-26cc-35ed-b565-266953cef062.roa
File:                     cd337d2d-26cc-35ed-b565-266953cef062.roa (raw, json)
Hash identifier:          44GYhNL8PwUBtJ14gC+fEzmJxKc0Gai0pTqzLwl08gU=
Subject key identifier:   13:30:67:BB:7E:5C:D8:C8:73:C5:FC:6E:F2:4A:88:36:38:0E:5D:56
Certificate issuer:       /CN=27e2d7ee-d239-4928-9107-ceb95cacd0b8
Certificate serial:       010D0C9F4328584E2D9F0603DE6247D06E5F5A80
Authority key identifier: F6:CD:25:DF:15:39:74:43:10:7B:B9:CB:3F:43:71:1C:D0:3A:AF:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/cd337d2d-26cc-35ed-b565-266953cef062.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     54825
IP address blocks:        192.80.8.0/24 maxlen: 24
                          198.16.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:06:03:de:62:47:d0:6e:5f:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27e2d7ee-d239-4928-9107-ceb95cacd0b8
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=97fda327-e7da-458f-b40b-c99ccec548d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:70:db:fc:db:6e:de:b1:9a:3d:f0:79:16:9e:
                    10:6a:87:26:40:30:8d:74:3a:be:9d:e5:41:66:28:
                    9d:b0:3d:40:ab:f1:6d:c2:c7:bc:fb:f7:fe:6a:41:
                    2f:61:b9:58:26:a5:e3:b9:e3:fc:f9:76:7d:d9:05:
                    be:a1:18:a7:84:d1:df:70:88:cd:7f:6f:96:6d:eb:
                    a5:81:39:65:7c:72:d6:cc:01:67:27:e8:14:2b:b1:
                    f4:28:fe:49:2c:64:68:58:5a:77:5d:0f:56:5c:86:
                    df:bb:f1:d6:fc:dd:9e:7f:74:28:39:91:8c:ee:c9:
                    d4:25:e1:d9:8d:f4:f9:f7:96:e5:20:a3:7a:d1:3e:
                    60:a2:a3:0d:fe:b8:83:f2:ff:3b:77:34:91:00:bb:
                    9c:17:10:3f:2b:e7:3f:03:6a:a6:10:bb:00:90:61:
                    7d:53:88:c9:e0:41:cd:7d:d3:e3:49:12:6b:f6:6e:
                    a4:61:1d:7c:4f:5e:8a:36:79:be:1c:c1:00:1e:7d:
                    e9:22:5f:cb:61:84:6b:5e:e2:be:bd:af:dc:d6:a2:
                    5a:60:e5:7b:5e:eb:3f:85:3f:38:7e:e9:22:b0:15:
                    b9:8f:0f:cc:29:8d:29:32:f0:20:c6:cf:32:67:8d:
                    a2:71:b3:dd:e3:eb:9f:f7:5c:8a:f9:0a:61:d9:bd:
                    3d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:30:67:BB:7E:5C:D8:C8:73:C5:FC:6E:F2:4A:88:36:38:0E:5D:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/cd337d2d-26cc-35ed-b565-266953cef062.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.crl

            X509v3 Authority Key Identifier:
                keyid:F6:CD:25:DF:15:39:74:43:10:7B:B9:CB:3F:43:71:1C:D0:3A:AF:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/27e2d7ee-d239-4928-9107-ceb95cacd0b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.8.0/24
                  198.16.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:5b:de:e3:01:59:60:71:25:a1:6e:89:12:ac:c6:fb:3b:77:
         28:f4:b8:2f:ad:28:31:d9:02:87:37:32:b3:e3:45:00:13:9a:
         a8:c4:9c:76:d4:08:9a:16:ae:dc:7e:45:f2:15:bf:ec:0d:39:
         9b:40:78:9d:1f:72:29:51:7c:d6:36:bd:2f:2d:2e:0b:47:76:
         49:82:06:d9:bd:f7:2a:a5:d0:83:3b:31:e2:51:9b:ea:5d:05:
         94:15:33:71:b7:87:17:7a:7c:2e:47:0e:fb:01:90:73:33:e2:
         3b:e0:29:20:98:08:d2:76:3d:26:82:43:a7:5b:06:bf:65:33:
         ff:b7:e7:76:56:48:bb:6e:60:c8:75:1e:26:76:57:6a:a6:13:
         e2:04:0c:90:15:24:05:5f:48:e4:6e:a6:62:a1:b5:ad:07:a7:
         8c:cc:c4:43:0c:9a:ad:b8:4e:ec:88:30:6f:ad:da:7b:66:0b:
         8d:c5:5e:a1:69:e3:f0:1f:35:fb:2f:b5:f5:84:54:2a:23:c5:
         ce:af:2b:2e:fc:50:bb:f1:e0:7e:8b:93:e3:d1:6f:6d:22:6b:
         95:ab:c2:3d:26:af:9b:bf:5d:f7:08:8e:53:a9:6e:fc:4b:a1:
         4e:11:21:35:06:8e:65:35:28:f4:d4:0d:ba:0a:70:41:70:b7:
         1d:c4:16:c9
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE4tnwYD3mJH0G5fWoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjdlMmQ3ZWUtZDIzOS00OTI4LTkxMDctY2ViOTVjYWNk
MGI4MB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk
OTdmZGEzMjctZTdkYS00NThmLWI0MGItYzk5Y2NlYzU0OGQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinDb/Ntu3rGaPfB5Fp4QaocmQDCNdDq+neVB
ZiidsD1Aq/Ftwse8+/f+akEvYblYJqXjueP8+XZ92QW+oRinhNHfcIjNf2+Wbeul
gTllfHLWzAFnJ+gUK7H0KP5JLGRoWFp3XQ9WXIbfu/HW/N2ef3QoOZGM7snUJeHZ
jfT595blIKN60T5goqMN/riD8v87dzSRALucFxA/K+c/A2qmELsAkGF9U4jJ4EHN
fdPjSRJr9m6kYR18T16KNnm+HMEAHn3pIl/LYYRrXuK+va/c1qJaYOV7Xus/hT84
fukisBW5jw/MKY0pMvAgxs8yZ42icbPd4+uf91yK+Qph2b090QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFBMwZ7t+XNjIc8X8bvJKiDY4Dl1WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yN2Uy
ZDdlZS1kMjM5LTQ5MjgtOTEwNy1jZWI5NWNhY2QwYjgvY2QzMzdkMmQtMjZjYy0z
NWVkLWI1NjUtMjY2OTUzY2VmMDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjdlMmQ3ZWUtZDIzOS00OTI4LTkx
MDctY2ViOTVjYWNkMGI4LzI3ZTJkN2VlLWQyMzktNDkyOC05MTA3LWNlYjk1Y2Fj
ZDBiOC5jcmwwHwYDVR0jBBgwFoAU9s0l3xU5dEMQe7nLP0NxHNA6r8cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yN2UyZDdlZS1kMjM5LTQ5MjgtOTEwNy1jZWI5
NWNhY2QwYjguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwFAIAwQC
xhAEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHBb3uMBWWBxJaFuiRKsxvs7dyj0uC+tKDHZAoc3MrPjRQAT
mqjEnHbUCJoWrtx+RfIVv+wNOZtAeJ0fcilRfNY2vS8tLgtHdkmCBtm99yql0IM7
MeJRm+pdBZQVM3G3hxd6fC5HDvsBkHMz4jvgKSCYCNJ2PSaCQ6dbBr9lM/+353ZW
SLtuYMh1HiZ2V2qmE+IEDJAVJAVfSORupmKhta0Hp4zMxEMMmq24TuyIMG+t2ntm
C43FXqFp4/AfNfsvtfWEVCojxc6vKy78ULvx4H6Lk+PRb20ia5Wrwj0mr5u/XfcI
jlOpbvxLoU4RITUGjmU1KPTUDboKcEFwtx3EFsk=
-----END CERTIFICATE-----
Generated at Mon Jun 22 22:54:58 2026 by rpki-client