Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd/edff4cf3-1c4e-3ee7-95fb-afdeae5d2e69.roa
File:                     edff4cf3-1c4e-3ee7-95fb-afdeae5d2e69.roa (raw, json)
Hash identifier:          tBj+qjc++JwgngfMA2zV6CVymvnMMowA3ElAG6yfErc=
Subject key identifier:   3F:A2:D7:38:19:0F:D1:58:53:CE:1C:59:91:AB:50:0F:A6:7B:8F:2A
Certificate issuer:       /CN=87eb8683-245d-4fd0-909a-a8de70c5dadd
Certificate serial:       010D0C9F4328584DBA3AE9CD888CE4AD28182D80
Authority key identifier: 9C:92:D0:4D:B3:AD:78:C2:85:03:B9:E1:DC:A7:0A:98:6C:9A:B0:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd/edff4cf3-1c4e-3ee7-95fb-afdeae5d2e69.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     394522
IP address blocks:        198.163.221.0/24 maxlen: 24
                          198.163.222.0/23 maxlen: 23
                          198.163.222.0/24 maxlen: 24
                          198.163.223.0/24 maxlen: 24
                          2620:35:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd/87eb8683-245d-4fd0-909a-a8de70c5dadd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd/87eb8683-245d-4fd0-909a-a8de70c5dadd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:e9:cd:88:8c:e4:ad:28:18:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87eb8683-245d-4fd0-909a-a8de70c5dadd
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=c7bf710d-4012-47a9-889e-5487818fcadb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:04:45:a8:f3:19:df:bf:cc:84:fc:42:6e:06:
                    7a:18:d8:80:d2:b4:fd:e0:e8:3c:91:6e:d4:17:26:
                    8e:52:c8:87:7d:27:08:05:92:d5:7e:50:65:bc:59:
                    7c:6f:11:aa:ac:85:07:cd:05:19:51:79:fd:c2:3b:
                    1e:6d:33:31:56:b3:c3:a0:fc:97:e3:c1:a2:02:94:
                    cc:41:91:f5:d0:10:c0:44:19:79:6d:7c:f7:86:8b:
                    3f:4c:8d:3c:11:15:2d:31:39:f9:53:71:6c:b4:38:
                    01:cc:af:91:9b:85:e7:e2:a5:ce:bb:89:2f:17:35:
                    06:80:4b:c5:b8:8a:e3:32:bd:da:67:bf:02:a2:b1:
                    9d:46:41:d5:92:f1:25:ee:30:30:87:77:ee:13:2c:
                    66:6b:17:98:cf:0b:a7:dc:83:60:93:c8:c5:c6:e2:
                    b1:5e:37:50:e1:ec:31:df:21:fa:39:c4:7e:78:70:
                    65:21:a8:ed:5a:8e:f1:11:af:21:6b:de:5c:a5:86:
                    c4:9f:22:57:e9:7a:ab:0a:af:2b:85:d8:e7:35:b2:
                    f7:34:1a:49:0b:19:d5:75:ab:35:a6:01:2f:af:f8:
                    34:28:09:93:76:88:55:90:dd:b9:54:dd:56:c8:21:
                    f1:b0:bf:9f:00:f2:cd:3a:f5:e0:ee:9d:0f:c3:c2:
                    6a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A2:D7:38:19:0F:D1:58:53:CE:1C:59:91:AB:50:0F:A6:7B:8F:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd/edff4cf3-1c4e-3ee7-95fb-afdeae5d2e69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd/87eb8683-245d-4fd0-909a-a8de70c5dadd.crl

            X509v3 Authority Key Identifier:
                keyid:9C:92:D0:4D:B3:AD:78:C2:85:03:B9:E1:DC:A7:0A:98:6C:9A:B0:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/87eb8683-245d-4fd0-909a-a8de70c5dadd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.163.221.0-198.163.223.255
                IPv6:
                  2620:35:8000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:28:48:81:4d:c2:61:e1:1e:9a:2b:f6:06:8b:6d:ce:bc:ae:
         4e:eb:78:a7:40:ab:7f:2b:b8:b2:0c:64:38:e4:21:11:ba:dd:
         88:99:03:8b:13:07:1d:5f:84:66:d1:05:fd:28:83:50:81:65:
         d9:d7:e7:88:76:fa:37:4d:00:68:77:58:3c:48:77:9b:70:e6:
         76:1b:e2:da:1e:82:dc:48:d2:b4:37:0f:c1:16:de:ff:e4:22:
         51:89:f7:27:20:73:ef:5c:8b:7e:a9:63:5d:fe:69:36:ab:ff:
         b4:05:85:34:43:ed:63:37:ec:df:0d:71:3d:2f:f2:37:89:ac:
         58:d0:dd:b2:6a:3b:2f:7d:c8:8e:f2:c4:81:82:bb:15:88:2d:
         3d:13:8f:e2:7e:47:f9:3e:68:3b:af:6c:75:af:4b:4e:5d:84:
         d8:45:48:10:c6:df:b6:f4:d0:cb:f2:96:59:08:73:d6:80:b1:
         19:e0:ee:a1:00:01:a2:35:22:42:9f:7b:00:dc:eb:0d:ba:3e:
         1b:09:95:da:e6:89:11:e2:6e:21:fa:61:0f:80:fd:7b:3d:f5:
         50:44:1e:0f:cc:14:61:67:ec:2c:94:4c:10:78:7d:88:71:d9:
         e8:76:3e:42:f7:3d:ad:18:91:6f:2c:46:c9:0b:cb:51:6d:c3:
         3c:be:92:30
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE26OunNiIzkrSgYLYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODdlYjg2ODMtMjQ1ZC00ZmQwLTkwOWEtYThkZTcwYzVk
YWRkMB4XDTI2MDUwNTAxMDAyM1oXDTI2MDgwMzAxMDAyM1owLzEtMCsGA1UEAxMk
YzdiZjcxMGQtNDAxMi00N2E5LTg4OWUtNTQ4NzgxOGZjYWRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiARFqPMZ37/MhPxCbgZ6GNiA0rT94Og8kW7U
FyaOUsiHfScIBZLVflBlvFl8bxGqrIUHzQUZUXn9wjsebTMxVrPDoPyX48GiApTM
QZH10BDARBl5bXz3hos/TI08ERUtMTn5U3FstDgBzK+Rm4Xn4qXOu4kvFzUGgEvF
uIrjMr3aZ78CorGdRkHVkvEl7jAwh3fuEyxmaxeYzwun3INgk8jFxuKxXjdQ4ewx
3yH6OcR+eHBlIajtWo7xEa8ha95cpYbEnyJX6XqrCq8rhdjnNbL3NBpJCxnVdas1
pgEvr/g0KAmTdohVkN25VN1WyCHxsL+fAPLNOvXg7p0Pw8JqrwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFD+i1zgZD9FYU84cWZGrUA+me48qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84N2Vi
ODY4My0yNDVkLTRmZDAtOTA5YS1hOGRlNzBjNWRhZGQvZWRmZjRjZjMtMWM0ZS0z
ZWU3LTk1ZmItYWZkZWFlNWQyZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODdlYjg2ODMtMjQ1ZC00ZmQwLTkw
OWEtYThkZTcwYzVkYWRkLzg3ZWI4NjgzLTI0NWQtNGZkMC05MDlhLWE4ZGU3MGM1
ZGFkZC5jcmwwHwYDVR0jBBgwFoAUnJLQTbOteMKFA7nh3KcKmGyasPgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy84N2ViODY4My0yNDVkLTRmZDAtOTA5YS1hOGRl
NzBjNWRhZGQuY2VyMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBADGo90D
BAXGo8AwDwQCAAIwCQMHACYgADWAADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCaKEiBTcJh4R6aK/YGi23O
vK5O63inQKt/K7iyDGQ45CERut2ImQOLEwcdX4Rm0QX9KINQgWXZ1+eIdvo3TQBo
d1g8SHebcOZ2G+LaHoLcSNK0Nw/BFt7/5CJRifcnIHPvXIt+qWNd/mk2q/+0BYU0
Q+1jN+zfDXE9L/I3iaxY0N2yajsvfciO8sSBgrsViC09E4/ifkf5Pmg7r2x1r0tO
XYTYRUgQxt+29NDL8pZZCHPWgLEZ4O6hAAGiNSJCn3sA3OsNuj4bCZXa5okR4m4h
+mEPgP17PfVQRB4PzBRhZ+wslEwQeH2Icdnodj5C9z2tGJFvLEbJC8tRbcM8vpIw
-----END CERTIFICATE-----
Generated at Wed May 13 16:12:49 2026 by rpki-client