Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e409c956-5324-3cb4-aff2-b345c843cc78.roa
File:                     e409c956-5324-3cb4-aff2-b345c843cc78.roa (raw, json)
Hash identifier:          p1PvIWS115Z4H8D7Ukxdq9MOFvfhXVEOemtAZWxadIQ=
Subject key identifier:   CA:8E:36:8B:7A:9F:F3:53:1A:1E:3B:99:08:4F:DF:62:DA:A5:FC:9E
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584DEC7B464F899B5D2EDA868E00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e409c956-5324-3cb4-aff2-b345c843cc78.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     3257
IP address blocks:        198.144.105.0/24 maxlen: 24
                          198.144.106.0/24 maxlen: 24
                          198.144.107.0/24 maxlen: 24
                          216.133.146.0/24 maxlen: 24
                          216.133.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:46:4f:89:9b:5d:2e:da:86:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=7d873fe3-159f-4b6d-84ac-8d6f14ac618d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d7:e6:2b:4e:9d:66:87:81:58:00:70:84:81:
                    5d:29:d8:12:a9:01:54:de:48:72:c7:5a:09:4d:8d:
                    cb:25:43:b1:47:ac:44:71:8b:a9:25:42:c7:4b:69:
                    84:42:3c:d1:69:bc:3a:83:e2:a0:b2:39:73:72:d6:
                    26:9e:26:1d:08:08:0d:a8:ee:d6:c9:00:75:de:44:
                    0a:15:9c:67:b7:50:1c:61:1e:fe:32:81:29:fc:46:
                    55:93:4f:ae:b1:6f:b9:17:df:1e:b5:55:d6:8e:e2:
                    41:1f:cb:63:fd:41:ea:6d:c7:b7:cd:01:13:d9:a9:
                    29:76:50:3b:de:1f:60:ac:3b:99:3e:44:3e:c7:ba:
                    35:a9:bc:fd:fa:95:8d:a3:f8:65:27:d0:2b:cb:38:
                    04:71:45:d6:47:fb:9e:10:89:05:a2:a3:46:64:98:
                    51:4e:2e:f1:e2:af:27:bf:9d:1d:80:c9:b2:4e:c6:
                    70:44:64:06:ed:ef:48:79:8e:ba:bd:9b:53:86:87:
                    fd:ab:b7:73:f9:01:80:32:e5:65:f3:55:dd:cd:50:
                    4e:df:a9:ce:07:84:40:10:87:81:10:41:e8:36:23:
                    ab:c9:84:4e:b7:b9:c8:73:28:5b:25:e8:31:e3:69:
                    06:50:54:ea:2b:e6:7d:d4:51:f7:ba:cb:48:b2:44:
                    41:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8E:36:8B:7A:9F:F3:53:1A:1E:3B:99:08:4F:DF:62:DA:A5:FC:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e409c956-5324-3cb4-aff2-b345c843cc78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.144.105.0-198.144.107.255
                  216.133.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:62:58:03:b9:f9:8e:d6:eb:18:98:e4:e2:8d:13:61:75:09:
         8f:13:95:68:03:f1:25:64:78:f1:67:25:11:5d:9c:bb:71:4d:
         18:c6:71:47:37:cb:1b:f8:76:87:4c:e1:6f:3c:61:b0:bf:93:
         b8:0e:4c:6e:56:0e:92:a7:33:1d:00:6f:9d:49:db:3b:58:f3:
         56:af:12:5e:07:3a:9b:43:ea:c0:8c:35:64:6f:9c:19:23:fe:
         83:0e:27:32:4a:02:86:22:ff:19:ae:4a:64:b6:8f:0b:23:34:
         9a:16:b3:d9:cc:24:57:cb:0c:ce:eb:19:61:78:d1:50:c0:fe:
         f7:de:02:87:31:cd:11:31:35:95:90:ad:4c:10:d6:a9:f5:dc:
         da:2e:63:cf:a8:30:b3:b6:5e:79:61:32:5d:7e:af:6b:33:0d:
         7c:77:92:c2:f3:c5:a3:35:9d:6c:5d:4f:32:4b:19:9d:67:85:
         29:2f:2f:b6:d2:1a:33:89:e4:9a:a5:d9:03:ce:f7:34:a1:22:
         c1:e4:ae:a9:20:a6:36:3a:e3:3d:6e:b5:05:00:fd:52:9c:5d:
         2b:a7:e1:9a:dd:b4:40:76:66:ee:37:c4:f0:08:da:1a:93:17:
         b2:56:5b:2a:5b:10:19:38:1b:cc:7f:85:73:03:d9:bc:33:f7:
         a6:61:f3:df
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE3se0ZPiZtdLtqGjgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDUyMzAxMDAyNVoXDTI2MDgyMTAxMDAyNVowLzEtMCsGA1UEAxMk
N2Q4NzNmZTMtMTU5Zi00YjZkLTg0YWMtOGQ2ZjE0YWM2MThkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktfmK06dZoeBWABwhIFdKdgSqQFU3khyx1oJ
TY3LJUOxR6xEcYupJULHS2mEQjzRabw6g+KgsjlzctYmniYdCAgNqO7WyQB13kQK
FZxnt1AcYR7+MoEp/EZVk0+usW+5F98etVXWjuJBH8tj/UHqbce3zQET2akpdlA7
3h9grDuZPkQ+x7o1qbz9+pWNo/hlJ9AryzgEcUXWR/ueEIkFoqNGZJhRTi7x4q8n
v50dgMmyTsZwRGQG7e9IeY66vZtThof9q7dz+QGAMuVl81XdzVBO36nOB4RAEIeB
EEHoNiOryYROt7nIcyhbJegx42kGUFTqK+Z91FH3ustIskRBowIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFMqONot6n/NTGh47mQhP32LapfyeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZTQwOWM5NTYtNTMyNC0z
Y2I0LWFmZjItYjM0NWM4NDNjYzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBADGkGkD
BALGkGgDBAHYhZIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAM2JYA7n5jtbrGJjk4o0TYXUJjxOVaAPxJWR4
8WclEV2cu3FNGMZxRzfLG/h2h0zhbzxhsL+TuA5MblYOkqczHQBvnUnbO1jzVq8S
Xgc6m0PqwIw1ZG+cGSP+gw4nMkoChiL/Ga5KZLaPCyM0mhaz2cwkV8sMzusZYXjR
UMD+994ChzHNETE1lZCtTBDWqfXc2i5jz6gws7ZeeWEyXX6vazMNfHeSwvPFozWd
bF1PMksZnWeFKS8vttIaM4nkmqXZA873NKEiweSuqSCmNjrjPW61BQD9UpxdK6fh
mt20QHZm7jfE8AjaGpMXslZbKlsQGTgbzH+FcwPZvDP3pmHz3w==
-----END CERTIFICATE-----
Generated at Tue May 26 02:32:57 2026 by rpki-client