Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/ab0417bd-e109-3009-93c0-f235c176e944.roa
File:                     ab0417bd-e109-3009-93c0-f235c176e944.roa (raw, json)
Hash identifier:          LNeB/6RnJFmypNqkB3Gkb7dq1GSGw2DiRSKmdrEPfrY=
Subject key identifier:   9A:EF:11:C4:AA:FC:F2:6F:8C:38:EC:59:2E:DF:96:36:63:66:F0:5C
Certificate issuer:       /CN=f32837b4-0a36-4896-9fdf-ca41e3c848f3
Certificate serial:       010D0C9F4328584D3E001E4C420BCA9C6343A9C0
Authority key identifier: E4:F5:44:25:EA:88:0B:38:3A:D5:70:34:7C:DE:C8:81:3F:4D:40:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/ab0417bd-e109-3009-93c0-f235c176e944.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     62830
IP address blocks:        198.62.201.0/24 maxlen: 24
                          2620:52:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/f32837b4-0a36-4896-9fdf-ca41e3c848f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/f32837b4-0a36-4896-9fdf-ca41e3c848f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:1e:4c:42:0b:ca:9c:63:43:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f32837b4-0a36-4896-9fdf-ca41e3c848f3
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=70499f8d-88a0-46d1-a7fc-17268ef9dad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6d:f0:5f:96:1c:4c:2b:9b:59:51:63:cc:dc:
                    c1:76:6f:97:30:ba:6c:0d:8d:31:73:d0:5c:9a:05:
                    dc:ef:db:80:ac:f5:b1:5d:18:0e:db:5a:68:c4:49:
                    2b:f0:16:72:f5:24:93:9d:1d:2a:53:a3:f6:81:70:
                    cf:e1:93:7b:52:c3:bb:cf:b5:55:02:49:4d:59:64:
                    aa:6b:d1:48:eb:c7:d2:f8:65:b2:0b:be:b8:fb:8c:
                    e7:e7:9a:d7:f2:2b:60:7d:34:d7:8e:ac:13:c1:f8:
                    89:db:f7:79:29:5d:87:15:82:92:8e:fa:a2:77:10:
                    82:ee:78:b7:bf:8a:b6:89:5e:b1:17:7d:3e:f4:a0:
                    16:5a:cc:5a:3c:d8:40:cf:29:77:a8:ea:c6:86:91:
                    2a:00:3c:27:20:41:6b:5e:f6:e2:0f:d6:cf:de:dc:
                    2a:15:da:17:45:c6:a3:9c:8d:0c:e3:4a:98:98:d9:
                    f8:db:73:33:33:88:fe:39:a2:0f:10:55:bd:42:56:
                    26:13:d1:05:eb:03:be:5a:b2:14:5e:7f:84:c8:07:
                    d4:d9:ad:48:41:a6:f0:27:7c:5b:5d:2d:c6:82:d8:
                    69:ff:c7:b8:2b:23:9e:52:68:45:13:4d:3e:65:a1:
                    01:d4:f2:89:02:f8:8d:89:1a:14:60:db:d2:fc:d9:
                    88:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EF:11:C4:AA:FC:F2:6F:8C:38:EC:59:2E:DF:96:36:63:66:F0:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/ab0417bd-e109-3009-93c0-f235c176e944.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/f32837b4-0a36-4896-9fdf-ca41e3c848f3.crl

            X509v3 Authority Key Identifier:
                keyid:E4:F5:44:25:EA:88:0B:38:3A:D5:70:34:7C:DE:C8:81:3F:4D:40:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.62.201.0/24
                IPv6:
                  2620:52:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:3d:90:79:c2:b4:ac:46:40:e0:e3:0d:85:50:a6:0e:a8:61:
         31:0d:23:8e:78:91:ff:41:ec:fb:c5:6b:a7:0c:99:f2:61:e4:
         8f:35:7e:96:19:80:0a:28:d8:b6:75:03:e3:31:8d:45:a7:dd:
         f4:66:c8:72:48:e4:aa:ee:a9:00:e4:a6:21:f3:cd:6d:ae:ee:
         4a:2a:4d:8f:61:40:88:51:4f:20:6f:66:82:7b:cd:93:6b:93:
         e4:3c:1b:00:07:08:bb:91:aa:73:32:a7:45:9d:0d:d0:7d:ce:
         94:b7:c5:8d:42:e4:ec:32:04:dd:b3:93:62:9a:7d:e6:07:19:
         99:d7:6e:11:72:d4:5a:31:48:27:04:bf:37:c4:99:96:e7:59:
         9e:09:92:8d:ac:36:d1:d2:f6:2e:fc:b2:8a:19:ec:1c:83:d8:
         51:fc:05:18:f5:d2:6a:64:49:a8:2b:14:ba:a3:97:51:c3:13:
         83:da:1c:cd:28:d7:25:80:6b:98:6d:d2:b4:c6:7d:4f:1b:c1:
         e4:b8:0b:08:98:6f:fe:17:6a:af:3d:38:11:d3:b3:59:a7:fb:
         88:f5:de:46:8b:81:c7:a3:38:d3:6f:d8:eb:27:cc:13:da:26:
         54:f9:75:d2:7d:56:80:50:d9:78:c6:82:59:a2:38:68:30:c3:
         8a:68:60:00
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE0+AB5MQgvKnGNDqcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjMyODM3YjQtMGEzNi00ODk2LTlmZGYtY2E0MWUzYzg0
OGYzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
NzA0OTlmOGQtODhhMC00NmQxLWE3ZmMtMTcyNjhlZjlkYWQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG3wX5YcTCubWVFjzNzBdm+XMLpsDY0xc9Bc
mgXc79uArPWxXRgO21poxEkr8BZy9SSTnR0qU6P2gXDP4ZN7UsO7z7VVAklNWWSq
a9FI68fS+GWyC764+4zn55rX8itgfTTXjqwTwfiJ2/d5KV2HFYKSjvqidxCC7ni3
v4q2iV6xF30+9KAWWsxaPNhAzyl3qOrGhpEqADwnIEFrXvbiD9bP3twqFdoXRcaj
nI0M40qYmNn423MzM4j+OaIPEFW9QlYmE9EF6wO+WrIUXn+EyAfU2a1IQabwJ3xb
XS3Ggthp/8e4KyOeUmhFE00+ZaEB1PKJAviNiRoUYNvS/NmIKwIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFJrvEcSq/PJvjDjsWS7fljZjZvBcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzI4
MzdiNC0wYTM2LTQ4OTYtOWZkZi1jYTQxZTNjODQ4ZjMvYWIwNDE3YmQtZTEwOS0z
MDA5LTkzYzAtZjIzNWMxNzZlOTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjMyODM3YjQtMGEzNi00ODk2LTlm
ZGYtY2E0MWUzYzg0OGYzL2YzMjgzN2I0LTBhMzYtNDg5Ni05ZmRmLWNhNDFlM2M4
NDhmMy5jcmwwHwYDVR0jBBgwFoAU5PVEJeqICzg61XA0fN7IgT9NQNgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMzI4MzdiNC0wYTM2LTQ4OTYtOWZkZi1jYTQx
ZTNjODQ4ZjMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAxj7JMA8E
AgACMAkDBwAmIABSQAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIj2QecK0rEZA4OMNhVCmDqhhMQ0jjniR
/0Hs+8VrpwyZ8mHkjzV+lhmACijYtnUD4zGNRafd9GbIckjkqu6pAOSmIfPNba7u
SipNj2FAiFFPIG9mgnvNk2uT5DwbAAcIu5GqczKnRZ0N0H3OlLfFjULk7DIE3bOT
Ypp95gcZmdduEXLUWjFIJwS/N8SZludZngmSjaw20dL2LvyyihnsHIPYUfwFGPXS
amRJqCsUuqOXUcMTg9oczSjXJYBrmG3StMZ9TxvB5LgLCJhv/hdqrz04EdOzWaf7
iPXeRouBx6M402/Y6yfME9omVPl10n1WgFDZeMaCWaI4aDDDimhgAA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:02:27 2026 by rpki-client