Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e8ea81b3-7fe5-36d6-9e55-cd61d49e91cb.roa
File:                     e8ea81b3-7fe5-36d6-9e55-cd61d49e91cb.roa (raw, json)
Hash identifier:          StRGb/1RFlJSCIfd54QqGkyLNYFy/VPDQ7G6qnio0FY=
Subject key identifier:   5D:9A:B6:17:38:37:CE:B3:0C:96:B0:BE:0E:31:23:F2:B9:18:BC:4B
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584D905AA38D1E1C4DDFF0D0D980
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e8ea81b3-7fe5-36d6-9e55-cd61d49e91cb.roa
Signing time:             Mon 20 Apr 2026 01:00:24 +0000
ROA not before:           Mon 20 Apr 2026 01:00:24 +0000
ROA not after:            Sun 19 Jul 2026 01:00:24 +0000
asID:                     3561
IP address blocks:        206.154.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:90:5a:a3:8d:1e:1c:4d:df:f0:d0:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Apr 20 01:00:24 2026 GMT
            Not After : Jul 19 01:00:24 2026 GMT
        Subject: CN=a4018d79-1778-46fe-9b6f-5c4896f46322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:11:d8:3d:d4:7d:f2:fd:99:2f:40:89:ed:37:
                    2c:7a:ec:69:25:86:44:0d:e8:7b:c4:03:82:1f:35:
                    f6:d2:c1:48:c5:0d:b6:fe:f4:3e:06:0f:65:b7:ba:
                    a1:aa:8c:44:73:02:81:5e:70:a4:90:25:3e:90:c7:
                    7e:63:d4:db:63:60:0d:9b:e1:58:0f:ba:96:e5:78:
                    2f:df:c4:c1:96:2f:b4:33:d5:ca:0f:6b:ca:86:43:
                    bd:b1:dc:4b:64:92:2a:57:22:35:76:cc:51:91:51:
                    62:98:3a:fa:19:f1:bc:28:1c:2d:c6:7f:cb:39:dd:
                    e0:4d:a6:79:53:75:0f:b8:de:a9:cb:22:18:3a:d9:
                    1f:a9:65:a1:10:3d:ac:7a:ab:f8:7a:d4:e4:fe:a4:
                    0a:bf:c6:8d:16:d5:8c:d3:d8:00:7a:10:4b:6b:73:
                    6f:81:d5:17:e0:83:47:46:0d:e9:24:d4:db:e6:0c:
                    0a:4f:c8:4a:90:e3:71:3f:3d:b3:86:6d:58:54:de:
                    57:19:9c:6a:55:04:34:9d:14:a8:dc:7f:12:73:dc:
                    10:5e:e2:e8:64:da:2e:be:ae:f0:5a:39:53:0b:a8:
                    73:11:d7:58:d4:fe:ac:a4:ea:b8:77:10:3c:59:0c:
                    c8:53:f4:d6:fb:db:ac:1f:3e:54:6f:86:b8:ba:06:
                    e3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9A:B6:17:38:37:CE:B3:0C:96:B0:BE:0E:31:23:F2:B9:18:BC:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e8ea81b3-7fe5-36d6-9e55-cd61d49e91cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.154.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:44:c9:c1:7c:dc:7c:a3:8d:d5:72:55:75:1c:9a:49:79:83:
         dc:bc:ae:58:51:31:54:74:d6:e6:06:58:25:52:08:5d:79:fd:
         00:33:45:1b:cc:5b:ca:4b:1a:45:be:e3:fa:fe:5c:65:45:4e:
         53:8d:5c:35:75:8f:bd:3c:f5:68:36:88:43:aa:65:ee:23:7a:
         0f:7c:96:f5:b6:54:9d:c9:ea:f5:e2:c4:4a:07:f6:11:06:63:
         c9:5e:14:db:90:21:c2:88:2e:ed:54:21:d8:ea:a8:49:59:2a:
         bf:3a:71:6c:d1:84:dd:6e:db:61:72:1f:c7:a1:81:c2:92:70:
         99:68:31:d4:29:95:98:ff:76:23:05:07:63:27:de:a6:16:13:
         15:d8:78:4e:3a:da:aa:29:3f:a7:04:87:0e:ad:6c:dd:31:02:
         75:8a:92:53:e6:3e:0f:d5:a7:07:75:34:a9:26:75:cd:42:55:
         57:31:4f:ef:64:10:fd:ca:33:00:c1:27:f4:2d:9f:a8:e6:33:
         5f:36:2a:ad:c2:b9:87:1f:f0:b3:63:bc:9d:36:71:f2:b3:1a:
         7d:ae:cb:94:ec:52:d0:28:4d:63:05:31:5f:cb:c2:c2:db:2d:
         d5:6c:7a:9c:5b:cb:94:f9:c0:2c:9f:6c:78:e7:8e:3c:26:6e:
         d0:58:41:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWqONHhxN3/DQ2YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm
M2VjMB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk
YTQwMThkNzktMTc3OC00NmZlLTliNmYtNWM0ODk2ZjQ2MzIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBHYPdR98v2ZL0CJ7TcseuxpJYZEDeh7xAOC
HzX20sFIxQ22/vQ+Bg9lt7qhqoxEcwKBXnCkkCU+kMd+Y9TbY2ANm+FYD7qW5Xgv
38TBli+0M9XKD2vKhkO9sdxLZJIqVyI1dsxRkVFimDr6GfG8KBwtxn/LOd3gTaZ5
U3UPuN6pyyIYOtkfqWWhED2seqv4etTk/qQKv8aNFtWM09gAehBLa3NvgdUX4INH
Rg3pJNTb5gwKT8hKkONxPz2zhm1YVN5XGZxqVQQ0nRSo3H8Sc9wQXuLoZNouvq7w
WjlTC6hzEddY1P6spOq4dxA8WQzIU/TW+9usHz5Ub4a4ugbjYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF2athc4N86zDJawvg4xI/K5GLxLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3
YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvZThlYTgxYjMtN2ZlNS0z
NmQ2LTllNTUtY2Q2MWQ0OWU5MWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5
MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0
ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm
ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzpqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHxEycF83HyjjdVyVXUcmkl5g9y8rlhRMVR01uYGWCVSCF15/QAzRRvM
W8pLGkW+4/r+XGVFTlONXDV1j7089Wg2iEOqZe4jeg98lvW2VJ3J6vXixEoH9hEG
Y8leFNuQIcKILu1UIdjqqElZKr86cWzRhN1u22FyH8ehgcKScJloMdQplZj/diMF
B2Mn3qYWExXYeE462qopP6cEhw6tbN0xAnWKklPmPg/Vpwd1NKkmdc1CVVcxT+9k
EP3KMwDBJ/Qtn6jmM182Kq3CuYcf8LNjvJ02cfKzGn2uy5TsUtAoTWMFMV/LwsLb
LdVsepxby5T5wCyfbHjnjjwmbtBYQcg=
-----END CERTIFICATE-----
Generated at Wed May 13 10:51:40 2026 by rpki-client