Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/b55f435e-f346-3b11-9a23-d5be88d34197.roa
File:                     b55f435e-f346-3b11-9a23-d5be88d34197.roa (raw, json)
Hash identifier:          aI1qY41Yu8m5nQAkzF6Es7QVTBk8vrI7tljV/t6GT6g=
Subject key identifier:   C6:FF:F9:75:6E:A2:02:E4:97:E7:07:F8:DA:83:7F:09:D3:1D:52:A4
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F4328584D2A74C6E2A2744E542A38B540
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/b55f435e-f346-3b11-9a23-d5be88d34197.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     2559
IP address blocks:        198.241.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:c6:e2:a2:74:4e:54:2a:38:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=9c2139a5-9b78-4927-b343-19efc401b06a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1d:b4:46:63:b8:28:88:c0:23:3d:11:8a:0f:
                    42:ce:70:26:17:ce:82:e0:43:1e:52:77:b8:d5:bf:
                    ed:1c:37:d5:c1:fa:66:7b:9e:ab:04:15:1b:bd:ba:
                    d1:a2:0a:86:5a:1d:b8:60:74:d7:cd:f2:13:4d:ce:
                    dc:fd:f4:6d:b0:95:d7:81:d6:fe:33:61:0e:1b:c9:
                    06:8d:1f:ce:bb:15:5c:b7:cd:a5:63:cb:ef:b1:6e:
                    b5:b3:b8:ad:24:41:ac:f4:8c:95:01:f7:9d:f9:97:
                    02:af:7c:49:0d:bf:e3:46:49:a0:18:92:58:d0:28:
                    15:8e:bc:dd:46:48:09:26:d2:e8:11:64:3c:8c:87:
                    5b:d0:95:dc:51:6f:5f:96:82:35:dc:7d:12:e8:ca:
                    ca:a7:20:37:6e:91:90:05:27:00:45:e8:73:9d:59:
                    d6:4c:cc:17:40:31:90:46:c4:8b:a0:c5:50:bd:51:
                    0a:34:3f:9c:a3:f5:69:c8:5d:a4:b9:93:58:aa:4a:
                    7f:b6:08:24:35:78:71:12:bd:ac:e2:ca:59:78:18:
                    ac:b7:75:b1:9c:86:82:67:49:44:a6:1c:f4:39:16:
                    8e:65:53:f2:2a:b6:c6:65:ed:0b:06:ae:ee:db:d4:
                    b7:5e:07:85:d4:58:79:58:9e:c2:c2:3b:df:fc:2c:
                    46:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FF:F9:75:6E:A2:02:E4:97:E7:07:F8:DA:83:7F:09:D3:1D:52:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/b55f435e-f346-3b11-9a23-d5be88d34197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:5e:15:3b:4f:62:e2:78:83:d2:f3:fa:11:fc:06:c1:47:3e:
         c6:d2:93:06:12:da:1e:82:31:f5:99:0a:fe:b8:5e:5a:f5:5a:
         02:92:84:e2:bf:0c:97:81:ba:0e:78:58:1b:ba:89:d1:af:49:
         76:b6:8c:6c:f2:93:5d:9a:6d:72:0c:4b:11:38:d3:7d:b0:51:
         fc:c6:ce:04:b9:62:3d:79:3e:2c:58:e9:46:3c:b9:41:c7:6e:
         78:ae:23:fe:ac:e5:88:53:03:d2:c3:e0:f4:08:db:9a:5a:bc:
         c3:b0:f1:4b:6b:c1:e9:b5:ba:0f:5c:d5:2d:00:32:e0:73:9a:
         4a:45:9c:88:14:a4:2e:a7:07:ac:95:59:5e:0e:65:8c:f0:21:
         77:f0:a6:2f:df:88:01:95:f3:d6:32:0c:03:2c:f6:d5:09:39:
         7c:c6:7e:78:86:b5:df:fd:90:77:d0:03:1e:8e:cd:a4:57:fa:
         82:47:c8:c8:01:b3:0d:61:47:9e:6b:1e:c2:af:1a:7c:ce:e6:
         2b:ba:36:e4:41:82:93:5a:af:1c:2f:d4:18:35:5a:cc:36:d7:
         52:c3:3e:3b:b1:81:88:08:d1:71:15:db:31:61:fb:04:93:81:
         b1:bc:18:e5:d1:2b:16:fa:a4:60:59:14:e4:f9:e5:d2:61:87:
         d4:c1:3a:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdMbionROVCo4tUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx
ODQyMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk
OWMyMTM5YTUtOWI3OC00OTI3LWIzNDMtMTllZmM0MDFiMDZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgR20RmO4KIjAIz0Rig9CznAmF86C4EMeUne4
1b/tHDfVwfpme56rBBUbvbrRogqGWh24YHTXzfITTc7c/fRtsJXXgdb+M2EOG8kG
jR/OuxVct82lY8vvsW61s7itJEGs9IyVAfed+ZcCr3xJDb/jRkmgGJJY0CgVjrzd
RkgJJtLoEWQ8jIdb0JXcUW9floI13H0S6MrKpyA3bpGQBScARehznVnWTMwXQDGQ
RsSLoMVQvVEKND+co/VpyF2kuZNYqkp/tggkNXhxEr2s4spZeBist3WxnIaCZ0lE
phz0ORaOZVPyKrbGZe0LBq7u29S3XgeF1Fh5WJ7Cwjvf/CxGlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMb/+XVuogLkl+cH+NqDfwnTHVKkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2
NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvYjU1ZjQzNWUtZjM0Ni0z
YjExLTlhMjMtZDViZTg4ZDM0MTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1
ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1
MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl
NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxvHTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGBeFTtPYuJ4g9Lz+hH8BsFHPsbSkwYS2h6CMfWZCv64Xlr1WgKShOK/
DJeBug54WBu6idGvSXa2jGzyk12abXIMSxE4032wUfzGzgS5Yj15PixY6UY8uUHH
bniuI/6s5YhTA9LD4PQI25pavMOw8Utrwem1ug9c1S0AMuBzmkpFnIgUpC6nB6yV
WV4OZYzwIXfwpi/fiAGV89YyDAMs9tUJOXzGfniGtd/9kHfQAx6OzaRX+oJHyMgB
sw1hR55rHsKvGnzO5iu6NuRBgpNarxwv1Bg1Wsw211LDPjuxgYgI0XEV2zFh+wST
gbG8GOXRKxb6pGBZFOT55dJhh9TBOik=
-----END CERTIFICATE-----
Generated at Tue Mar 17 00:36:21 2026 by rpki-client