Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/efbf1b4a-1b31-39fd-bfd0-286df57229b2.roa
File:                     efbf1b4a-1b31-39fd-bfd0-286df57229b2.roa (raw, json)
Hash identifier:          ph91ahwLrnYYw9Ac6GYquhMrxM2v+IMx9H4OIBbNw10=
Subject key identifier:   AF:7A:85:39:71:3D:0D:5B:01:D0:28:21:DD:8D:63:CD:62:3A:7B:71
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584E0005D6CA0C5D2680E32F9C80
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/efbf1b4a-1b31-39fd-bfd0-286df57229b2.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     200017
IP address blocks:        138.84.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:d6:ca:0c:5d:26:80:e3:2f:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=7bb339fe-a387-4e2a-8298-c3f727d90ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e6:1c:ed:3a:f9:d3:cf:ad:2a:63:1b:f1:5d:
                    d2:83:0b:df:b2:50:e3:2e:3c:0e:11:0b:74:fa:7c:
                    a0:79:a3:4b:7c:dc:3e:a9:e9:e0:76:f3:5b:92:a4:
                    02:18:a2:e7:40:39:60:ca:d3:1e:61:6a:da:d0:1e:
                    3c:a8:51:dc:2d:0a:55:e3:48:69:e6:04:88:1c:c6:
                    5c:d8:dc:b2:0f:49:c3:72:dd:c1:22:ce:e0:3c:fc:
                    c3:69:23:7e:c7:ab:17:0f:d7:67:60:22:18:d9:5d:
                    49:59:ca:7d:c7:4a:87:0e:cc:58:e8:87:9e:0e:c0:
                    36:43:65:00:36:00:53:27:7f:71:73:72:ac:e1:6f:
                    ff:f5:50:d3:8c:95:cc:2a:d4:3f:a5:ef:9f:6c:82:
                    98:f6:db:c4:b0:cf:95:58:c4:fa:b0:41:25:4e:9c:
                    a6:5b:38:a7:76:db:d3:3b:1a:94:05:b7:7f:f7:59:
                    82:f9:70:a2:1e:5c:1a:8b:eb:e2:bc:60:9f:12:65:
                    12:03:0e:dd:c3:9c:9e:b4:a9:b5:b9:b6:75:7d:b3:
                    f8:3b:64:ca:d6:1a:08:30:5a:0c:3a:46:ec:ab:ed:
                    e5:b4:db:4e:db:d0:72:d1:06:f7:dd:48:c2:3b:b6:
                    9b:eb:18:f2:e3:61:d0:cb:13:40:cb:88:6d:83:06:
                    9f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:7A:85:39:71:3D:0D:5B:01:D0:28:21:DD:8D:63:CD:62:3A:7B:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/efbf1b4a-1b31-39fd-bfd0-286df57229b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.84.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:e2:eb:fb:db:32:6f:54:83:09:c6:f8:f4:dc:e0:bc:a8:4a:
         a2:88:03:a5:62:98:2b:91:5c:26:6b:62:dc:96:d7:a7:6e:a3:
         2d:7b:5a:95:a6:ee:4f:47:39:a3:9b:75:6a:99:cb:b4:f5:86:
         15:ec:9f:65:de:e8:a6:f0:26:ec:47:a4:08:37:b0:22:99:ee:
         06:ba:d5:b4:25:e4:50:8a:94:06:9d:62:56:b9:81:74:f6:40:
         fa:0b:c2:55:bc:e9:b3:37:2d:d9:1e:1f:84:9d:dc:26:28:45:
         e8:12:0c:33:e1:b5:4a:58:1a:fc:bd:23:53:fd:1f:d8:46:7b:
         28:83:ba:b3:5c:14:6d:a6:c4:db:36:36:96:e2:c1:b0:42:fd:
         e6:9a:5f:2e:a0:92:06:85:cf:84:53:e3:aa:c0:34:1a:f2:ba:
         17:ee:47:bd:2b:2e:25:2e:f5:70:f8:1d:de:0d:af:db:cc:46:
         f8:19:64:65:72:a9:a2:bc:60:86:3b:3b:43:bd:7c:58:74:cc:
         74:f7:b4:51:0f:c7:e8:8e:19:d2:fb:81:9d:ff:b4:b0:17:db:
         f4:e7:38:d2:3f:5e:81:a3:49:b7:04:ae:e0:51:1b:4d:8a:6b:
         24:82:fc:a2:28:05:b9:ce:4f:5f:70:8f:6e:66:42:97:89:b8:
         4d:ef:fd:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4ABdbKDF0mgOMvnIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI2MDUzMDAxMDAxMFoXDTI2MDgyODAxMDAxMFowLzEtMCsGA1UEAxMk
N2JiMzM5ZmUtYTM4Ny00ZTJhLTgyOTgtYzNmNzI3ZDkwYWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeYc7Tr508+tKmMb8V3SgwvfslDjLjwOEQt0
+nygeaNLfNw+qengdvNbkqQCGKLnQDlgytMeYWra0B48qFHcLQpV40hp5gSIHMZc
2NyyD0nDct3BIs7gPPzDaSN+x6sXD9dnYCIY2V1JWcp9x0qHDsxY6IeeDsA2Q2UA
NgBTJ39xc3Ks4W//9VDTjJXMKtQ/pe+fbIKY9tvEsM+VWMT6sEElTpymWzindtvT
OxqUBbd/91mC+XCiHlwai+vivGCfEmUSAw7dw5yetKm1ubZ1fbP4O2TK1hoIMFoM
Okbsq+3ltNtO29By0Qb33UjCO7ab6xjy42HQyxNAy4htgwafvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK96hTlxPQ1bAdAoId2NY81iOntxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvZWZiZjFiNGEtMWIzMS0z
OWZkLWJmZDAtMjg2ZGY1NzIyOWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAilTLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD/i6/vbMm9UgwnG+PTc4LyoSqKIA6VimCuRXCZrYtyW16duoy17WpWm
7k9HOaObdWqZy7T1hhXsn2Xe6KbwJuxHpAg3sCKZ7ga61bQl5FCKlAadYla5gXT2
QPoLwlW86bM3LdkeH4Sd3CYoRegSDDPhtUpYGvy9I1P9H9hGeyiDurNcFG2mxNs2
NpbiwbBC/eaaXy6gkgaFz4RT46rANBryuhfuR70rLiUu9XD4Hd4Nr9vMRvgZZGVy
qaK8YIY7O0O9fFh0zHT3tFEPx+iOGdL7gZ3/tLAX2/TnONI/XoGjSbcEruBRG02K
aySC/KIoBbnOT19wj25mQpeJuE3v/a4=
-----END CERTIFICATE-----
Generated at Thu Jun 4 10:07:41 2026 by rpki-client