Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/cd9be427-039f-3881-bd0f-2810548b0c3b.roa
File:                     cd9be427-039f-3881-bd0f-2810548b0c3b.roa (raw, json)
Hash identifier:          JGDHFQzN8UQRMp1nc5/ZhCrTKT7iqkwIHmL0W1v8UZQ=
Subject key identifier:   EE:80:A5:43:83:79:6D:7C:AC:02:FE:5A:32:24:EF:02:D1:48:DF:67
Certificate issuer:       /CN=8e262294-f3c0-4a56-8c97-786e6ae2f14c
Certificate serial:       010D0C9F4328584D44FA4C2F65D632BF19586B00
Authority key identifier: 27:A7:46:6C:19:A9:9A:2B:26:07:13:D0:A7:19:8D:AE:5C:29:52:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/cd9be427-039f-3881-bd0f-2810548b0c3b.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     7018
IP address blocks:        207.228.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/8e262294-f3c0-4a56-8c97-786e6ae2f14c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/8e262294-f3c0-4a56-8c97-786e6ae2f14c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:4c:2f:65:d6:32:bf:19:58:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e262294-f3c0-4a56-8c97-786e6ae2f14c
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=716998d0-6324-47c7-8589-8471e989a260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:21:a5:fb:46:cc:93:1b:4a:37:c6:65:d7:63:
                    9a:8c:cf:79:ad:da:49:3a:71:25:93:33:c8:e6:e2:
                    7e:e1:65:8b:8f:57:e8:15:62:13:28:0e:2b:20:91:
                    6f:a8:cd:b1:a3:02:33:2d:a4:65:04:09:0f:9c:b6:
                    c3:28:c6:a3:45:0f:95:46:59:49:f8:0f:f3:70:e8:
                    25:b5:28:20:46:0a:db:f1:34:ca:e3:a7:5c:b7:52:
                    87:c6:dd:8a:d4:40:12:ba:82:a0:51:e5:0e:6e:c3:
                    7b:79:7d:4d:dc:7d:1b:23:a7:83:1b:19:33:4d:cd:
                    52:3d:20:4e:fc:70:77:5d:7c:a1:bc:65:10:c1:7e:
                    94:c3:05:51:00:34:3d:1e:9e:4a:5f:37:d7:c8:43:
                    07:e2:af:1d:e3:5d:21:ae:0c:04:5b:84:66:66:92:
                    64:dc:7c:5a:1b:0f:85:ff:29:ea:c5:fc:74:25:8c:
                    0c:8c:e4:63:1f:c0:2a:51:03:12:17:9d:b3:95:dc:
                    44:1f:97:6c:c0:d9:99:75:54:c2:bc:c5:fe:98:18:
                    4b:ea:79:60:6b:53:31:59:61:17:7d:48:87:22:4a:
                    6e:6c:ed:57:62:eb:c0:7b:0c:54:5a:1c:5f:12:2d:
                    8a:da:f1:09:73:79:a0:42:db:16:1e:d4:b3:04:75:
                    e7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:80:A5:43:83:79:6D:7C:AC:02:FE:5A:32:24:EF:02:D1:48:DF:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/cd9be427-039f-3881-bd0f-2810548b0c3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/8e262294-f3c0-4a56-8c97-786e6ae2f14c.crl

            X509v3 Authority Key Identifier:
                keyid:27:A7:46:6C:19:A9:9A:2B:26:07:13:D0:A7:19:8D:AE:5C:29:52:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.228.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:71:96:33:74:1e:3c:2e:44:c8:40:58:82:40:0a:96:23:7a:
         1f:15:8d:d3:24:3e:e1:bf:58:ac:91:8b:57:24:b1:0d:5c:2c:
         e5:a8:cc:ae:bb:c9:7b:e1:7e:af:61:4b:75:ec:5d:43:86:4e:
         ee:c9:89:a9:7e:98:75:fa:97:75:24:b5:e7:b9:21:4b:1f:ff:
         81:b3:e6:8b:57:08:b0:0f:c7:7e:24:09:47:96:97:23:3b:53:
         5e:f4:3a:4a:2e:92:02:15:ba:b9:17:52:30:f2:fd:76:66:5a:
         2d:38:1d:5b:ce:ee:3f:b5:c3:ad:b0:5d:15:32:4e:27:14:62:
         a1:91:e2:21:1d:0b:9b:39:e4:8b:7a:91:d0:b9:d9:fb:f7:fc:
         dc:cb:ae:ea:7b:9b:bd:34:ec:bd:39:a9:54:14:e0:4e:ba:c2:
         a3:7d:b5:99:69:d1:af:6a:9e:d2:b7:25:be:29:98:8b:aa:3e:
         d2:62:7d:62:d2:79:42:e9:d9:20:b7:ed:fb:d1:f4:a9:56:8e:
         4f:2f:ae:d7:52:37:29:ab:64:cb:86:de:6b:1d:f0:3f:c4:88:
         f4:2f:60:08:16:a4:b7:66:23:92:9f:86:06:77:db:7a:2e:21:
         cb:cf:3e:20:5c:29:8d:4b:f3:3a:be:37:af:d0:49:1a:ba:f2:
         11:e3:83:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+kwvZdYyvxlYawAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUyNjIyOTQtZjNjMC00YTU2LThjOTctNzg2ZTZhZTJm
MTRjMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk
NzE2OTk4ZDAtNjMyNC00N2M3LTg1ODktODQ3MWU5ODlhMjYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiGl+0bMkxtKN8Zl12OajM95rdpJOnElkzPI
5uJ+4WWLj1foFWITKA4rIJFvqM2xowIzLaRlBAkPnLbDKMajRQ+VRllJ+A/zcOgl
tSggRgrb8TTK46dct1KHxt2K1EASuoKgUeUObsN7eX1N3H0bI6eDGxkzTc1SPSBO
/HB3XXyhvGUQwX6UwwVRADQ9Hp5KXzfXyEMH4q8d410hrgwEW4RmZpJk3HxaGw+F
/ynqxfx0JYwMjORjH8AqUQMSF52zldxEH5dswNmZdVTCvMX+mBhL6nlga1MxWWEX
fUiHIkpubO1XYuvAewxUWhxfEi2K2vEJc3mgQtsWHtSzBHXnLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO6ApUODeW18rAL+WjIk7wLRSN9nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTI2
MjI5NC1mM2MwLTRhNTYtOGM5Ny03ODZlNmFlMmYxNGMvY2Q5YmU0MjctMDM5Zi0z
ODgxLWJkMGYtMjgxMDU0OGIwYzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGUyNjIyOTQtZjNjMC00YTU2LThj
OTctNzg2ZTZhZTJmMTRjLzhlMjYyMjk0LWYzYzAtNGE1Ni04Yzk3LTc4NmU2YWUy
ZjE0Yy5jcmwwHwYDVR0jBBgwFoAUJ6dGbBmpmismBxPQpxmNrlwpUmQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC84ZTI2MjI5NC1mM2MwLTRhNTYtOGM5Ny03ODZl
NmFlMmYxNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+TQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEVxljN0HjwuRMhAWIJACpYjeh8VjdMkPuG/WKyRi1cksQ1cLOWozK67
yXvhfq9hS3XsXUOGTu7Jial+mHX6l3Uktee5IUsf/4Gz5otXCLAPx34kCUeWlyM7
U170OkoukgIVurkXUjDy/XZmWi04HVvO7j+1w62wXRUyTicUYqGR4iEdC5s55It6
kdC52fv3/NzLrup7m7007L05qVQU4E66wqN9tZlp0a9qntK3Jb4pmIuqPtJifWLS
eULp2SC37fvR9KlWjk8vrtdSNymrZMuG3msd8D/EiPQvYAgWpLdmI5KfhgZ323ou
IcvPPiBcKY1L8zq+N6/QSRq68hHjg/U=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:09:20 2026 by rpki-client