Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/8ed15df3-90b6-3bf7-bec5-d8f10561203e.roa
File:                     8ed15df3-90b6-3bf7-bec5-d8f10561203e.roa (raw, json)
Hash identifier:          CrKLXabEriRxTmAXcTHgG/71gtJr7yHlzYwK/EalLys=
Subject key identifier:   B3:39:6F:6D:1F:CD:3A:6D:78:E9:A3:3E:6F:96:01:C2:27:66:91:2E
Certificate issuer:       /CN=58eef8b8-39c9-495c-b889-44faff13a8aa
Certificate serial:       010D0C9F4328584D2644D4B1980116F536B5CEC0
Authority key identifier: DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/8ed15df3-90b6-3bf7-bec5-d8f10561203e.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     397016
IP address blocks:        198.73.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:d4:b1:98:01:16:f5:36:b5:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58eef8b8-39c9-495c-b889-44faff13a8aa
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=56ce280d-4d9e-450c-9e31-b970de019382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c6:78:0e:ba:18:1a:44:a1:b2:cc:66:ac:be:
                    59:48:94:33:df:6d:6a:21:23:ec:38:98:d5:aa:3f:
                    69:bc:f9:cf:69:b9:56:7c:b1:83:01:7a:a1:b5:3b:
                    cb:e7:d7:11:fe:91:ba:b3:ab:5e:8c:85:f7:13:3d:
                    2f:83:ba:2a:8b:3d:b9:1b:a7:be:d7:96:66:d8:c2:
                    2a:82:82:7e:61:41:6e:4b:cd:44:1f:27:82:56:8c:
                    92:72:0d:d1:90:68:3b:04:b1:d5:e7:61:7c:fb:cb:
                    63:25:34:e5:de:e7:e0:59:f6:aa:35:e6:e0:a1:af:
                    b4:35:45:02:cd:21:66:80:1c:2a:42:78:d0:d2:91:
                    1e:de:be:c9:bf:95:4c:87:45:7d:84:91:1c:49:dd:
                    ef:4c:7a:95:88:f5:35:47:be:ee:f3:c2:5d:dd:52:
                    49:4f:81:38:b7:2a:1c:f3:e8:43:8a:6c:4e:77:de:
                    95:58:23:80:44:34:b1:a3:a0:e2:77:bf:09:45:ec:
                    1d:70:ed:19:c4:e3:a4:0a:8c:a5:3d:c9:db:f3:46:
                    d2:02:be:e7:91:7e:9c:34:ca:07:7b:cc:2b:e5:dc:
                    7a:d6:b1:e3:91:ec:cd:5f:2b:c3:26:3b:36:96:14:
                    d9:ee:40:60:0c:cc:5b:8a:d3:94:5d:d9:18:f3:c7:
                    0c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:39:6F:6D:1F:CD:3A:6D:78:E9:A3:3E:6F:96:01:C2:27:66:91:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/8ed15df3-90b6-3bf7-bec5-d8f10561203e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa/58eef8b8-39c9-495c-b889-44faff13a8aa.crl

            X509v3 Authority Key Identifier:
                keyid:DE:BF:6C:F6:E8:31:1E:71:6D:D2:54:66:13:3B:78:89:15:E9:01:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/58eef8b8-39c9-495c-b889-44faff13a8aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:bd:ef:6b:2f:c5:8e:88:dc:52:c4:9c:03:99:0b:5a:36:4e:
         6b:e0:b0:c1:38:43:19:0d:3b:cc:31:19:f0:d6:b0:c5:99:bd:
         b8:b1:3d:17:e3:5a:a4:30:44:90:72:ec:18:94:aa:80:67:eb:
         b8:91:ca:a7:af:85:11:e8:9c:b2:41:74:0b:ac:d9:fb:fa:ed:
         6f:2d:42:c3:55:38:ea:8c:54:a1:ec:37:5e:13:dc:fc:0f:65:
         67:db:09:96:f5:5b:bf:ed:ba:b1:db:42:6c:11:95:a7:f3:40:
         60:d9:cf:dc:c7:2e:07:b9:74:b9:d1:b4:2d:c3:bd:c1:61:9e:
         7f:2b:5d:0e:dd:54:99:e4:50:fd:b4:08:71:04:77:f1:b7:e5:
         11:6b:bd:62:28:12:0f:db:b5:6a:ac:d9:1e:7a:56:3d:18:5b:
         ba:6f:a6:61:e8:0e:9b:07:64:09:ce:30:d5:7f:0c:39:fe:33:
         18:4a:ca:11:26:6b:95:1d:ab:3d:6a:f2:0a:d2:91:de:9e:71:
         17:e8:5a:db:80:7d:d0:07:19:d4:84:ee:27:03:d0:1c:ec:86:
         35:99:05:96:fd:4b:24:d2:60:59:ee:8d:9a:a9:b8:a7:f8:60:
         e1:f7:99:2a:1e:d9:78:06:49:12:21:bc:ce:54:8b:61:80:54:
         dd:87:59:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRNSxmAEW9Ta1zsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNThlZWY4YjgtMzljOS00OTVjLWI4ODktNDRmYWZmMTNh
OGFhMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk
NTZjZTI4MGQtNGQ5ZS00NTBjLTllMzEtYjk3MGRlMDE5MzgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8Z4DroYGkShssxmrL5ZSJQz321qISPsOJjV
qj9pvPnPablWfLGDAXqhtTvL59cR/pG6s6tejIX3Ez0vg7oqiz25G6e+15Zm2MIq
goJ+YUFuS81EHyeCVoyScg3RkGg7BLHV52F8+8tjJTTl3ufgWfaqNebgoa+0NUUC
zSFmgBwqQnjQ0pEe3r7Jv5VMh0V9hJEcSd3vTHqViPU1R77u88Jd3VJJT4E4tyoc
8+hDimxOd96VWCOARDSxo6Did78JRewdcO0ZxOOkCoylPcnb80bSAr7nkX6cNMoH
e8wr5dx61rHjkezNXyvDJjs2lhTZ7kBgDMxbitOUXdkY88cM+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLM5b20fzTpteOmjPm+WAcInZpEuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81OGVl
ZjhiOC0zOWM5LTQ5NWMtYjg4OS00NGZhZmYxM2E4YWEvOGVkMTVkZjMtOTBiNi0z
YmY3LWJlYzUtZDhmMTA1NjEyMDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNThlZWY4YjgtMzljOS00OTVjLWI4
ODktNDRmYWZmMTNhOGFhLzU4ZWVmOGI4LTM5YzktNDk1Yy1iODg5LTQ0ZmFmZjEz
YThhYS5jcmwwHwYDVR0jBBgwFoAU3r9s9ugxHnFt0lRmEzt4iRXpAS0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy81OGVlZjhiOC0zOWM5LTQ5NWMtYjg4OS00NGZh
ZmYxM2E4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxklMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEi972svxY6I3FLEnAOZC1o2TmvgsME4QxkNO8wxGfDWsMWZvbixPRfj
WqQwRJBy7BiUqoBn67iRyqevhRHonLJBdAus2fv67W8tQsNVOOqMVKHsN14T3PwP
ZWfbCZb1W7/turHbQmwRlafzQGDZz9zHLge5dLnRtC3DvcFhnn8rXQ7dVJnkUP20
CHEEd/G35RFrvWIoEg/btWqs2R56Vj0YW7pvpmHoDpsHZAnOMNV/DDn+MxhKyhEm
a5Udqz1q8grSkd6ecRfoWtuAfdAHGdSE7icD0BzshjWZBZb9SyTSYFnujZqpuKf4
YOH3mSoe2XgGSRIhvM5Ui2GAVN2HWTQ=
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:02:36 2026 by rpki-client