Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cd8b620c-7057-33d9-891f-0a721c134665.roa
File:                     cd8b620c-7057-33d9-891f-0a721c134665.roa (raw, json)
Hash identifier:          N7TIUE2TkJStUuqHPLDxc5aKVUAtXXw83YD2VBO8//Y=
Subject key identifier:   A0:32:0D:B6:0A:B9:41:82:F5:ED:1B:9A:92:D8:AA:35:B7:6E:79:30
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584F374D4D3EC31350A73DE6D380
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cd8b620c-7057-33d9-891f-0a721c134665.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     54113
IP address blocks:        151.101.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:4d:3e:c3:13:50:a7:3d:e6:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=b4c3e603-0d64-464a-b8d6-b6f9fc8a217a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2f:9c:4b:45:3c:a7:cc:26:ca:7e:35:13:26:
                    3e:3c:88:b2:af:9b:f2:08:33:27:75:ec:2f:6a:ad:
                    e0:8e:50:97:fd:2c:f2:23:25:b6:77:01:0a:54:13:
                    7b:53:fe:56:96:e7:0c:2a:8c:99:40:b7:c1:4a:b3:
                    71:2e:a7:1d:60:71:3d:41:97:dd:d9:65:34:96:d7:
                    40:e6:c1:fc:32:16:87:55:61:20:35:b7:c5:48:96:
                    fa:f6:37:ad:0f:b1:cc:79:9d:74:f2:a0:fd:fb:13:
                    40:90:2e:26:2e:09:04:6f:68:f7:50:46:62:40:fe:
                    a6:99:2f:e3:7f:7c:50:5e:7f:fb:d7:4d:b3:9b:36:
                    b5:08:ff:b7:de:91:3f:8c:9b:22:4d:a2:e7:c3:9c:
                    a1:36:1d:06:b3:d5:21:7d:73:ec:60:b1:9e:c8:02:
                    75:ac:68:ca:f6:c5:5a:fb:ee:d3:fb:1d:68:73:a7:
                    6d:e8:01:7e:da:23:f7:14:8c:36:ba:e4:48:de:61:
                    37:42:e8:81:dc:c4:79:e7:fe:9f:8f:03:1e:20:21:
                    44:dd:17:05:e0:ae:b3:5f:fb:8a:85:56:08:bd:12:
                    57:38:b7:16:70:66:fd:20:35:94:f6:51:c3:a8:a1:
                    91:fa:f1:2d:ab:fb:e2:bf:5a:09:19:c0:05:2f:80:
                    f9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:32:0D:B6:0A:B9:41:82:F5:ED:1B:9A:92:D8:AA:35:B7:6E:79:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cd8b620c-7057-33d9-891f-0a721c134665.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.101.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:0c:bc:91:12:b6:92:f3:84:23:51:1e:62:52:6e:1c:78:e7:
         ce:78:47:e0:ea:98:10:20:cb:18:f1:21:18:3a:60:79:b4:f1:
         74:ce:c0:24:5a:58:bd:e2:30:f9:b7:b4:3e:23:b2:da:90:3a:
         5a:2b:6d:ee:72:82:93:a4:4e:19:f4:81:02:cf:eb:59:0c:a5:
         38:d6:9c:1d:7e:47:b8:b5:ac:db:47:51:ff:ba:28:f6:d1:c8:
         af:4c:62:50:49:cd:1c:d2:17:48:66:f3:d2:50:e9:ec:ab:c5:
         9a:a9:c4:16:67:c1:d9:42:2c:e6:de:09:a1:2a:7d:d9:c2:1e:
         94:5f:0e:74:d5:e9:ce:c8:43:6d:29:49:c8:a4:ee:85:e5:8f:
         de:ef:1f:60:ac:52:4d:40:bf:99:7b:4b:ea:5a:c2:29:dc:a7:
         92:63:32:eb:9d:55:be:99:28:10:04:42:1f:14:a7:4f:e6:ce:
         e1:0b:2d:6e:53:98:5a:cb:69:af:5d:59:34:a0:ae:97:b1:4f:
         92:cf:77:0d:09:49:32:14:ef:11:c8:0b:72:78:7f:1c:04:d3:
         97:c3:97:d4:39:e8:00:78:ad:3b:1c:ce:5e:5c:16:7f:c5:30:
         d0:9b:ef:f5:dd:07:b7:f3:af:88:b0:e7:8b:70:84:36:b7:db:
         2a:4b:61:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TU0+wxNQpz3m04AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk
YjRjM2U2MDMtMGQ2NC00NjRhLWI4ZDYtYjZmOWZjOGEyMTdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS+cS0U8p8wmyn41EyY+PIiyr5vyCDMndewv
aq3gjlCX/SzyIyW2dwEKVBN7U/5WlucMKoyZQLfBSrNxLqcdYHE9QZfd2WU0ltdA
5sH8MhaHVWEgNbfFSJb69jetD7HMeZ108qD9+xNAkC4mLgkEb2j3UEZiQP6mmS/j
f3xQXn/7102zmza1CP+33pE/jJsiTaLnw5yhNh0Gs9UhfXPsYLGeyAJ1rGjK9sVa
++7T+x1oc6dt6AF+2iP3FIw2uuRI3mE3QuiB3MR55/6fjwMeICFE3RcF4K6zX/uK
hVYIvRJXOLcWcGb9IDWU9lHDqKGR+vEtq/viv1oJGcAFL4D5sQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKAyDbYKuUGC9e0bmpLYqjW3bnkwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvY2Q4YjYyMGMtNzA1Ny0z
M2Q5LTg5MWYtMGE3MjFjMTM0NjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl2XUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIgMvJEStpLzhCNRHmJSbhx45854R+DqmBAgyxjxIRg6YHm08XTOwCRa
WL3iMPm3tD4jstqQOlorbe5ygpOkThn0gQLP61kMpTjWnB1+R7i1rNtHUf+6KPbR
yK9MYlBJzRzSF0hm89JQ6eyrxZqpxBZnwdlCLObeCaEqfdnCHpRfDnTV6c7IQ20p
Scik7oXlj97vH2CsUk1Av5l7S+pawincp5JjMuudVb6ZKBAEQh8Up0/mzuELLW5T
mFrLaa9dWTSgrpexT5LPdw0JSTIU7xHIC3J4fxwE05fDl9Q56AB4rTsczl5cFn/F
MNCb7/XdB7fzr4iw54twhDa32ypLYaE=
-----END CERTIFICATE-----
Generated at Thu Oct 8 20:36:12 2026 by rpki-client