Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/366b95e0-cd96-3a0b-ab6d-b7d7311e87c8.roa
File:                     366b95e0-cd96-3a0b-ab6d-b7d7311e87c8.roa (raw, json)
Hash identifier:          wR5PawiPC4fqWG7E0K85xXKx5IbZzlmBguqTFe0qdlE=
Subject key identifier:   A7:6C:D5:F5:A3:79:14:44:E4:25:0B:23:65:99:12:EC:A2:85:5F:50
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584D300A515D831FCB7E682F3BA8
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/366b95e0-cd96-3a0b-ab6d-b7d7311e87c8.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     6922
IP address blocks:        198.215.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:51:5d:83:1f:cb:7e:68:2f:3b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=49e06fba-d10a-40db-a985-37e858895985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:76:e9:08:8c:1f:b5:47:d7:19:f3:91:a8:37:
                    18:f3:9b:07:d9:25:04:4b:af:4c:82:14:5a:3d:5c:
                    e0:1c:60:ba:74:b1:77:d4:40:7e:31:98:35:20:50:
                    74:32:7f:ab:78:e3:c0:cd:f6:06:d7:5d:11:1e:d6:
                    fd:aa:cc:ca:7e:c7:b2:10:f2:9e:37:25:bc:e2:85:
                    a2:22:d4:f9:0d:ba:77:9f:5f:5c:bb:18:4a:5f:e8:
                    b6:8d:88:b1:6d:7a:97:98:ac:ca:c9:2e:fc:4a:51:
                    1e:17:07:03:a2:ba:db:00:37:2d:47:a6:ca:26:69:
                    45:29:ed:fd:3a:5c:44:ef:2c:24:69:d1:aa:54:a4:
                    13:fb:d8:c0:f4:83:ba:7b:61:05:5d:76:68:4d:0d:
                    44:32:a6:a9:0e:09:c3:82:56:52:55:2c:d5:37:d2:
                    12:7a:c5:78:d9:7f:f0:85:47:c6:74:08:f3:03:3f:
                    db:f9:6c:80:21:2a:ca:59:bd:1e:f0:7b:f0:81:1e:
                    14:aa:36:b4:1c:68:c8:7f:ff:17:b7:cf:9b:d8:27:
                    7b:bd:96:12:0c:d3:4d:25:d3:92:8e:5c:64:bb:cf:
                    f7:b4:0f:37:86:2d:d5:89:d3:63:81:a2:ce:8f:27:
                    ab:b3:68:65:32:49:2b:66:79:d2:ce:30:10:1d:1c:
                    29:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6C:D5:F5:A3:79:14:44:E4:25:0B:23:65:99:12:EC:A2:85:5F:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/366b95e0-cd96-3a0b-ab6d-b7d7311e87c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.215.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:ca:c0:04:53:27:93:84:b8:01:40:69:ca:05:39:8a:32:d0:
         06:d8:7e:73:b5:0d:24:33:4d:2a:a3:38:ef:ad:ba:0b:24:bb:
         26:53:46:db:34:5d:a6:bf:f6:0b:e0:3d:80:e2:ca:48:59:b5:
         f5:8c:14:53:0b:e6:1f:90:c9:89:7b:79:44:9d:c6:7a:bc:67:
         0b:04:d5:96:c1:50:48:78:cf:ce:11:54:9b:39:55:6e:5f:aa:
         39:f5:05:1e:43:ab:1c:1b:1a:07:3e:de:5c:74:99:ac:89:ab:
         89:c4:bf:0e:86:bb:18:bb:01:d2:7d:33:33:01:ef:da:6c:ac:
         4a:8b:9d:9f:5b:53:e5:65:b8:53:05:76:d5:06:27:ab:3d:4b:
         37:e7:0a:3d:f7:90:ce:d1:06:5e:72:83:11:f3:60:99:38:76:
         40:e8:5d:20:a3:4e:41:84:ef:9c:7f:72:3c:a4:5b:06:39:e9:
         86:f3:9a:bb:df:8b:91:49:d8:98:1d:dd:72:fb:33:a5:d0:8d:
         63:14:31:2d:1a:6a:df:3b:16:dc:87:95:cd:dc:17:5e:fb:39:
         86:c2:a2:3a:25:57:50:70:52:38:65:e5:dd:55:7f:d2:8f:9b:
         28:bf:58:2b:ab:34:82:24:51:ce:03:eb:a8:9f:4d:b9:45:f7:
         c1:31:51:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wClFdgx/LfmgvO6gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU4MWEyNTYtNDFmZi00ZjUxLTgwOTItYzdmZmZhNGQ5
MjIxMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk
NDllMDZmYmEtZDEwYS00MGRiLWE5ODUtMzdlODU4ODk1OTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XbpCIwftUfXGfORqDcY85sH2SUES69MghRa
PVzgHGC6dLF31EB+MZg1IFB0Mn+reOPAzfYG110RHtb9qszKfseyEPKeNyW84oWi
ItT5Dbp3n19cuxhKX+i2jYixbXqXmKzKyS78SlEeFwcDorrbADctR6bKJmlFKe39
OlxE7ywkadGqVKQT+9jA9IO6e2EFXXZoTQ1EMqapDgnDglZSVSzVN9ISesV42X/w
hUfGdAjzAz/b+WyAISrKWb0e8HvwgR4Uqja0HGjIf/8Xt8+b2Cd7vZYSDNNNJdOS
jlxku8/3tA83hi3VidNjgaLOjyers2hlMkkrZnnSzjAQHRwpgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKds1fWjeRRE5CULI2WZEuyihV9QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgx
YTI1Ni00MWZmLTRmNTEtODA5Mi1jN2ZmZmE0ZDkyMjEvMzY2Yjk1ZTAtY2Q5Ni0z
YTBiLWFiNmQtYjdkNzMxMWU4N2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU4MWEyNTYtNDFmZi00ZjUxLTgw
OTItYzdmZmZhNGQ5MjIxLzRlODFhMjU2LTQxZmYtNGY1MS04MDkyLWM3ZmZmYTRk
OTIyMS5jcmwwHwYDVR0jBBgwFoAUwitnYdEerOUTJk8QRtL6zHxFiyowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgxYTI1Ni00MWZmLTRmNTEtODA5Mi1jN2Zm
ZmE0ZDkyMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxtcoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFrKwARTJ5OEuAFAacoFOYoy0AbYfnO1DSQzTSqjOO+tugskuyZTRts0
Xaa/9gvgPYDiykhZtfWMFFML5h+QyYl7eUSdxnq8ZwsE1ZbBUEh4z84RVJs5VW5f
qjn1BR5DqxwbGgc+3lx0mayJq4nEvw6Guxi7AdJ9MzMB79psrEqLnZ9bU+VluFMF
dtUGJ6s9SzfnCj33kM7RBl5ygxHzYJk4dkDoXSCjTkGE75x/cjykWwY56Ybzmrvf
i5FJ2Jgd3XL7M6XQjWMUMS0aat87FtyHlc3cF177OYbCojolV1BwUjhl5d1Vf9KP
myi/WCurNIIkUc4D66ifTblF98ExUTU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:03:48 2026 by rpki-client