Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/efd48fea-fbb1-3268-a9a1-4f9caa081aa8.roa
File:                     efd48fea-fbb1-3268-a9a1-4f9caa081aa8.roa (raw, json)
Hash identifier:          6nZvnHdJldkC1YJKI8QwPxYE5pphWLd/2IKu5dVFLLc=
Subject key identifier:   80:A3:70:B7:A4:B9:D4:58:C1:24:0A:C8:B1:27:0C:CD:EA:DE:26:6D
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F4328584DEDE098404D8B50C2444FC880
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/efd48fea-fbb1-3268-a9a1-4f9caa081aa8.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     40836
IP address blocks:        209.114.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:98:40:4d:8b:50:c2:44:4f:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=4c58d06d-ff5b-4580-9b22-19fa7defafc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a7:ae:c4:87:99:bf:cc:20:bc:7e:a2:0f:1e:
                    e2:a6:88:a7:9e:70:14:be:a1:3a:95:53:6b:b6:95:
                    93:d6:5a:34:ee:5d:02:2e:f3:ae:98:fc:73:57:a0:
                    36:4e:c9:70:26:25:ea:aa:a8:6a:5e:34:9c:eb:94:
                    cd:2f:0f:f3:fd:3f:67:22:1f:8f:ef:4f:28:ec:4b:
                    b7:d7:96:5b:28:17:09:f4:2c:a9:25:aa:dc:03:ee:
                    3c:6a:d5:39:c0:93:e8:7c:3f:25:bc:9f:3b:2a:b6:
                    fc:1f:2b:78:82:5f:82:7e:f1:8d:fc:19:d0:84:1d:
                    b8:b2:90:43:8c:70:4f:64:f4:76:db:f0:bb:1d:45:
                    c1:72:9b:90:9b:9f:61:34:00:57:50:d2:08:36:4e:
                    d4:80:cf:43:0e:0e:7e:4b:d6:e2:28:a7:d8:54:6f:
                    57:fc:03:45:dd:9d:fb:2f:63:da:1d:27:01:35:b5:
                    92:87:42:c1:f9:f0:25:89:59:57:29:c1:74:57:60:
                    f0:3b:c3:00:c3:a7:94:7c:d6:89:55:7b:4c:0a:8b:
                    60:32:26:eb:1d:89:e7:78:3c:08:5b:8f:1b:0b:3a:
                    b3:bc:20:c3:1e:c5:fc:96:24:a1:58:1e:cc:36:13:
                    1b:46:7f:b9:25:7c:95:f3:c3:9c:61:54:b9:a2:b7:
                    d4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A3:70:B7:A4:B9:D4:58:C1:24:0A:C8:B1:27:0C:CD:EA:DE:26:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/efd48fea-fbb1-3268-a9a1-4f9caa081aa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.114.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:8f:c8:5f:9f:39:72:cf:c8:f7:5b:b2:bf:9a:41:1a:d4:1d:
         71:7b:a7:aa:73:28:44:4c:e4:0b:78:79:4e:71:b4:8d:28:80:
         fe:40:d6:a5:99:1d:15:97:af:c1:a7:06:cb:3b:d7:45:65:42:
         52:a4:90:d8:43:96:96:93:de:ea:42:7e:04:b0:8b:eb:b4:a3:
         5e:fd:f9:12:ca:c6:ac:b1:c3:99:19:56:d0:03:35:eb:25:04:
         27:41:6e:9e:7c:ea:65:d5:98:99:1f:13:2a:79:53:7f:91:d0:
         f7:6c:b6:e8:1f:8c:43:8e:d8:6f:5f:37:73:ca:92:2a:63:56:
         e6:23:76:c6:27:60:d3:db:6f:c5:be:44:06:4d:3c:fc:a6:63:
         d4:c6:89:c9:49:e3:ea:3a:78:33:19:9a:16:0e:9d:cc:02:a5:
         1e:00:85:3a:d7:b7:b7:c9:ac:48:12:2d:05:38:27:bc:d0:cd:
         c3:93:f4:6e:63:47:df:e0:ea:de:85:49:37:71:1a:c8:38:52:
         d8:ec:9b:47:bb:37:08:8e:1e:a5:50:a3:c0:6a:d8:99:b9:cb:
         09:38:b1:24:c2:c5:c0:03:56:04:14:57:db:42:23:9d:60:b8:
         13:12:3c:f4:c3:61:0e:c6:aa:b5:11:7c:1e:26:65:d7:d0:ac:
         eb:a3:ac:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3t4JhATYtQwkRPyIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy
NTE2MB4XDTI2MDUyMzEzMDAzMVoXDTI2MDgyMTEzMDAzMVowLzEtMCsGA1UEAxMk
NGM1OGQwNmQtZmY1Yi00NTgwLTliMjItMTlmYTdkZWZhZmM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKeuxIeZv8wgvH6iDx7ipoinnnAUvqE6lVNr
tpWT1lo07l0CLvOumPxzV6A2TslwJiXqqqhqXjSc65TNLw/z/T9nIh+P708o7Eu3
15ZbKBcJ9CypJarcA+48atU5wJPofD8lvJ87Krb8Hyt4gl+CfvGN/BnQhB24spBD
jHBPZPR22/C7HUXBcpuQm59hNABXUNIINk7UgM9DDg5+S9biKKfYVG9X/ANF3Z37
L2PaHScBNbWSh0LB+fAliVlXKcF0V2DwO8MAw6eUfNaJVXtMCotgMibrHYnneDwI
W48bCzqzvCDDHsX8liShWB7MNhMbRn+5JXyV88OcYVS5orfU0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFICjcLekudRYwSQKyLEnDM3q3iZtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk
M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvZWZkNDhmZWEtZmJiMS0z
MjY4LWE5YTEtNGY5Y2FhMDgxYWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl
MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1
MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1
MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0XK6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADOPyF+fOXLPyPdbsr+aQRrUHXF7p6pzKERM5At4eU5xtI0ogP5A1qWZ
HRWXr8GnBss710VlQlKkkNhDlpaT3upCfgSwi+u0o179+RLKxqyxw5kZVtADNesl
BCdBbp586mXVmJkfEyp5U3+R0PdstugfjEOO2G9fN3PKkipjVuYjdsYnYNPbb8W+
RAZNPPymY9TGiclJ4+o6eDMZmhYOncwCpR4AhTrXt7fJrEgSLQU4J7zQzcOT9G5j
R9/g6t6FSTdxGsg4Utjsm0e7NwiOHqVQo8Bq2Jm5ywk4sSTCxcADVgQUV9tCI51g
uBMSPPTDYQ7GqrURfB4mZdfQrOujrJA=
-----END CERTIFICATE-----
Generated at Fri Jun 12 12:41:44 2026 by rpki-client