Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a/e331092c-40d6-3d9f-b461-e6d085e36eaf.roa
File:                     e331092c-40d6-3d9f-b461-e6d085e36eaf.roa (raw, json)
Hash identifier:          OJn1LZhGHDNtjO+kElHlhCKB02anvc5WWgHX9TLuTb8=
Subject key identifier:   21:D2:EA:17:DA:78:31:8E:C7:BE:52:63:54:7E:B9:E5:A7:AF:F0:68
Certificate issuer:       /CN=becbd46f-127a-435b-9440-3a213828408a
Certificate serial:       010D0C9F4328584DF7A5C7B36DA28AE140799200
Authority key identifier: 64:AC:1A:1A:E5:AB:C5:FB:C0:B6:62:E4:95:5E:BD:75:0D:83:F0:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a/e331092c-40d6-3d9f-b461-e6d085e36eaf.roa
Signing time:             Wed 27 May 2026 01:00:14 +0000
ROA not before:           Wed 27 May 2026 01:00:14 +0000
ROA not after:            Tue 25 Aug 2026 01:00:14 +0000
asID:                     30166
IP address blocks:        199.68.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a/becbd46f-127a-435b-9440-3a213828408a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a/becbd46f-127a-435b-9440-3a213828408a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:a5:c7:b3:6d:a2:8a:e1:40:79:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=becbd46f-127a-435b-9440-3a213828408a
        Validity
            Not Before: May 27 01:00:14 2026 GMT
            Not After : Aug 25 01:00:14 2026 GMT
        Subject: CN=c15ddbd9-8914-4fc0-844a-205c879604e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:65:37:e5:36:7e:f2:ad:2b:72:9b:27:d9:0c:
                    e5:59:2a:da:65:93:80:71:c4:4f:22:30:73:cd:e5:
                    6d:fa:dd:f5:e1:1e:fb:d1:26:2d:b6:43:68:4d:7b:
                    7e:99:2f:f6:67:d1:50:24:c2:ca:0c:32:68:ac:af:
                    c5:00:58:61:b6:75:dc:73:6e:8f:53:2a:9e:2a:da:
                    bd:32:68:a7:49:2e:a9:d1:7b:6e:9d:f3:47:0a:3e:
                    47:05:b4:46:f8:e3:46:10:b1:ca:8e:48:6f:7b:8a:
                    1d:5d:02:4b:b3:8e:39:98:30:9d:d4:d0:b0:e6:41:
                    ac:8d:40:ad:d4:3b:e9:ac:1d:a4:e8:f9:05:f5:05:
                    98:d9:a3:67:45:09:ab:60:f5:48:bc:06:56:88:f0:
                    15:65:24:81:8a:63:51:32:85:6c:50:4a:66:bf:5b:
                    c7:da:3a:7f:9e:e6:ab:08:f3:34:4b:7c:64:ff:0e:
                    b9:ec:0a:31:6b:37:31:50:b9:0a:23:08:21:79:7b:
                    cd:5d:37:43:ee:08:25:ae:20:f3:4b:a3:bc:97:3f:
                    ab:c9:e4:4b:dd:7f:a2:3f:83:d2:81:07:3a:80:e3:
                    f5:9f:7b:2c:02:45:5e:8a:c3:90:8a:74:0d:43:0b:
                    9b:0d:1e:a5:25:18:a6:c1:3b:c5:cb:f7:b2:88:72:
                    cd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D2:EA:17:DA:78:31:8E:C7:BE:52:63:54:7E:B9:E5:A7:AF:F0:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a/e331092c-40d6-3d9f-b461-e6d085e36eaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a/becbd46f-127a-435b-9440-3a213828408a.crl

            X509v3 Authority Key Identifier:
                keyid:64:AC:1A:1A:E5:AB:C5:FB:C0:B6:62:E4:95:5E:BD:75:0D:83:F0:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/becbd46f-127a-435b-9440-3a213828408a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:8f:34:28:72:82:1b:3c:c8:8e:95:7e:ca:50:51:95:15:81:
         40:b5:af:c0:dc:69:b9:2d:03:35:08:70:e0:90:99:81:42:fb:
         54:b4:37:ef:80:85:f3:71:37:1d:62:44:b0:f4:72:09:f6:08:
         18:ba:54:49:c3:b6:5d:e6:48:cc:95:6c:85:1c:f5:61:ed:56:
         1e:f2:a9:68:d8:2d:9f:c6:14:d3:8b:ef:da:c5:fb:c9:50:5c:
         4d:0b:98:04:d2:4c:b9:fa:34:63:30:19:2b:97:c5:d8:7d:80:
         fa:5a:c6:cc:c1:df:2c:28:9e:56:03:3f:62:8a:22:b8:e1:54:
         f6:b1:33:c4:cf:31:73:52:9e:5f:68:ec:11:9d:78:93:fc:8f:
         8c:47:73:b9:b8:86:da:8e:8e:eb:31:b5:6b:f4:ee:f9:49:cc:
         84:22:a9:69:0d:4b:2b:6c:d0:92:d6:fc:f2:ba:71:d4:fe:db:
         c1:7a:ec:3b:23:1f:83:39:0e:13:e8:c7:37:b8:a9:66:0b:f0:
         57:0b:78:93:67:22:9f:88:22:8d:01:43:18:f0:9e:1f:a6:29:
         56:a6:64:27:70:33:db:a9:06:00:fa:c7:73:30:da:04:96:79:
         bc:b7:a1:93:52:fb:69:b7:90:5b:bf:69:f1:81:b4:70:61:e8:
         1b:d7:0b:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE33pcezbaKK4UB5kgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmVjYmQ0NmYtMTI3YS00MzViLTk0NDAtM2EyMTM4Mjg0
MDhhMB4XDTI2MDUyNzAxMDAxNFoXDTI2MDgyNTAxMDAxNFowLzEtMCsGA1UEAxMk
YzE1ZGRiZDktODkxNC00ZmMwLTg0NGEtMjA1Yzg3OTYwNGU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWU35TZ+8q0rcpsn2QzlWSraZZOAccRPIjBz
zeVt+t314R770SYttkNoTXt+mS/2Z9FQJMLKDDJorK/FAFhhtnXcc26PUyqeKtq9
MminSS6p0XtunfNHCj5HBbRG+ONGELHKjkhve4odXQJLs445mDCd1NCw5kGsjUCt
1DvprB2k6PkF9QWY2aNnRQmrYPVIvAZWiPAVZSSBimNRMoVsUEpmv1vH2jp/nuar
CPM0S3xk/w657AoxazcxULkKIwgheXvNXTdD7gglriDzS6O8lz+ryeRL3X+iP4PS
gQc6gOP1n3ssAkVeisOQinQNQwubDR6lJRimwTvFy/eyiHLNTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCHS6hfaeDGOx75SY1R+ueWnr/BoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZWNi
ZDQ2Zi0xMjdhLTQzNWItOTQ0MC0zYTIxMzgyODQwOGEvZTMzMTA5MmMtNDBkNi0z
ZDlmLWI0NjEtZTZkMDg1ZTM2ZWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmVjYmQ0NmYtMTI3YS00MzViLTk0
NDAtM2EyMTM4Mjg0MDhhL2JlY2JkNDZmLTEyN2EtNDM1Yi05NDQwLTNhMjEzODI4
NDA4YS5jcmwwHwYDVR0jBBgwFoAUZKwaGuWrxfvAtmLklV69dQ2D8JAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZWNiZDQ2Zi0xMjdhLTQzNWItOTQ0MC0zYTIx
MzgyODQwOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx0QcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHePNChyghs8yI6VfspQUZUVgUC1r8DcabktAzUIcOCQmYFC+1S0N++A
hfNxNx1iRLD0cgn2CBi6VEnDtl3mSMyVbIUc9WHtVh7yqWjYLZ/GFNOL79rF+8lQ
XE0LmATSTLn6NGMwGSuXxdh9gPpaxszB3ywonlYDP2KKIrjhVPaxM8TPMXNSnl9o
7BGdeJP8j4xHc7m4htqOjusxtWv07vlJzIQiqWkNSyts0JLW/PK6cdT+28F67Dsj
H4M5DhPoxze4qWYL8FcLeJNnIp+IIo0BQxjwnh+mKVamZCdwM9upBgD6x3Mw2gSW
eby3oZNS+2m3kFu/afGBtHBh6BvXC8s=
-----END CERTIFICATE-----
Generated at Thu May 28 13:40:18 2026 by rpki-client