Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/e3100e93-af92-3477-b367-b21ea83e7382.roa
File:                     e3100e93-af92-3477-b367-b21ea83e7382.roa (raw, json)
Hash identifier:          NiitUDM1tmBthwVrOGNmTH2/qZiM1pHRiOlCfO57YVc=
Subject key identifier:   C5:AB:32:1E:AA:B7:D3:86:BD:61:D7:78:FB:2B:5B:D0:47:7E:EE:8B
Certificate issuer:       /CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
Certificate serial:       010D0C9F4328584DBD059E72D077FD2E0DF5BE00
Authority key identifier: 27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/e3100e93-af92-3477-b367-b21ea83e7382.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     198949
IP address blocks:        199.64.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:9e:72:d0:77:fd:2e:0d:f5:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8231077d-0559-4e7a-9cdf-fe00a512ab5c
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=a97f1b0e-8a20-45eb-b67a-3151069ccd8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b3:d5:b3:a9:06:49:fc:c6:3e:70:e4:54:7b:
                    56:5c:f2:a8:23:30:49:45:ca:00:fc:e7:9b:b1:a6:
                    ad:d3:72:b7:5e:8b:8e:f6:5c:1f:fa:32:06:a0:b5:
                    ee:fb:89:88:31:a9:09:45:b1:50:3d:ae:3d:64:cb:
                    c5:bb:5e:bf:9b:9b:1b:79:91:5f:8f:5a:81:7b:de:
                    19:d1:d6:70:e5:6e:9e:76:de:57:86:b2:d4:56:87:
                    14:92:c3:c2:2c:94:08:90:f7:ae:2f:ed:d5:f6:3d:
                    4d:e3:1d:d0:ae:15:2c:4d:d8:38:0c:06:6f:01:be:
                    db:91:1c:d9:98:8b:9a:67:86:32:00:9f:ba:bf:ec:
                    b8:06:9e:01:00:47:c9:74:86:b1:a3:a6:d4:fe:0b:
                    82:ce:86:ef:03:54:d3:74:a7:2d:32:6a:0e:a5:b2:
                    e6:4b:cb:59:5b:c1:60:fc:6a:cc:31:71:9a:a5:73:
                    94:2b:5f:ad:5b:e9:fa:13:d6:19:5c:64:5d:ed:83:
                    c7:c7:23:87:cc:07:70:f8:b4:cd:9e:54:d7:f3:31:
                    b7:ce:63:4e:20:ed:a5:91:12:5e:98:96:c8:fe:22:
                    57:90:e6:e8:10:c1:c0:42:13:c2:c2:e4:4d:25:30:
                    ec:3e:1a:28:95:cf:76:be:92:fe:18:02:25:23:fb:
                    a4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AB:32:1E:AA:B7:D3:86:BD:61:D7:78:FB:2B:5B:D0:47:7E:EE:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/e3100e93-af92-3477-b367-b21ea83e7382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c/8231077d-0559-4e7a-9cdf-fe00a512ab5c.crl

            X509v3 Authority Key Identifier:
                keyid:27:57:42:AE:CA:A8:23:ED:C1:20:5C:9F:F0:23:65:5D:05:65:FB:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8231077d-0559-4e7a-9cdf-fe00a512ab5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.64.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:f9:b2:62:03:9a:49:f8:d6:c4:e3:68:68:b0:0d:bc:26:30:
         ce:44:f2:0e:a9:2b:9a:10:18:25:b7:c4:37:b3:9c:5a:5e:3c:
         d6:72:0b:11:0f:87:c3:23:2b:7e:44:b8:97:92:72:fb:a5:ca:
         34:c3:ac:20:f6:21:4b:12:26:80:21:50:50:75:1a:23:48:1c:
         6a:c8:58:4c:e6:16:20:13:b0:3d:77:21:56:da:b9:6c:dc:97:
         d5:d0:bd:29:fa:77:b8:81:c2:4d:8e:ef:9b:a8:0e:9f:41:1f:
         fd:3d:3e:f5:c9:cc:8c:8d:e2:24:3a:48:72:04:27:2d:48:71:
         46:6b:cb:40:58:11:e8:a5:09:92:fa:ed:90:7d:7d:76:4b:9e:
         1f:03:79:4f:b5:5c:7d:61:39:7d:51:40:b7:3f:bd:03:1a:10:
         43:8e:16:ed:d5:df:21:76:66:2d:bc:27:bd:99:81:53:e4:74:
         4f:41:97:b0:fd:d8:cc:64:b3:05:0f:74:08:5d:71:83:25:6a:
         ff:3e:e3:d6:06:2b:01:7d:57:2b:fa:b1:fa:b6:76:ba:9a:f0:
         b2:af:a0:c6:fb:b6:97:78:ad:66:ea:df:ba:2a:c1:3d:80:71:
         c3:6e:e7:4a:28:58:ba:14:5e:cb:d4:1d:30:6c:a1:b2:a0:60:
         1f:33:80:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BZ5y0Hf9Lg31vgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODIzMTA3N2QtMDU1OS00ZTdhLTljZGYtZmUwMGE1MTJh
YjVjMB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk
YTk3ZjFiMGUtOGEyMC00NWViLWI2N2EtMzE1MTA2OWNjZDhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbPVs6kGSfzGPnDkVHtWXPKoIzBJRcoA/Oeb
saat03K3XouO9lwf+jIGoLXu+4mIMakJRbFQPa49ZMvFu16/m5sbeZFfj1qBe94Z
0dZw5W6edt5XhrLUVocUksPCLJQIkPeuL+3V9j1N4x3QrhUsTdg4DAZvAb7bkRzZ
mIuaZ4YyAJ+6v+y4Bp4BAEfJdIaxo6bU/guCzobvA1TTdKctMmoOpbLmS8tZW8Fg
/GrMMXGapXOUK1+tW+n6E9YZXGRd7YPHxyOHzAdw+LTNnlTX8zG3zmNOIO2lkRJe
mJbI/iJXkOboEMHAQhPCwuRNJTDsPhoolc92vpL+GAIlI/uk4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMWrMh6qt9OGvWHXePsrW9BHfu6LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjMx
MDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAwYTUxMmFiNWMvZTMxMDBlOTMtYWY5Mi0z
NDc3LWIzNjctYjIxZWE4M2U3MzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIzMTA3N2QtMDU1OS00ZTdhLTlj
ZGYtZmUwMGE1MTJhYjVjLzgyMzEwNzdkLTA1NTktNGU3YS05Y2RmLWZlMDBhNTEy
YWI1Yy5jcmwwHwYDVR0jBBgwFoAUJ1dCrsqoI+3BIFyf8CNlXQVl+3YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84MjMxMDc3ZC0wNTU5LTRlN2EtOWNkZi1mZTAw
YTUxMmFiNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx0BYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ/5smIDmkn41sTjaGiwDbwmMM5E8g6pK5oQGCW3xDeznFpePNZyCxEP
h8MjK35EuJeScvulyjTDrCD2IUsSJoAhUFB1GiNIHGrIWEzmFiATsD13IVbauWzc
l9XQvSn6d7iBwk2O75uoDp9BH/09PvXJzIyN4iQ6SHIEJy1IcUZry0BYEeilCZL6
7ZB9fXZLnh8DeU+1XH1hOX1RQLc/vQMaEEOOFu3V3yF2Zi28J72ZgVPkdE9Bl7D9
2MxkswUPdAhdcYMlav8+49YGKwF9Vyv6sfq2drqa8LKvoMb7tpd4rWbq37oqwT2A
ccNu50ooWLoUXsvUHTBsobKgYB8zgOs=
-----END CERTIFICATE-----
Generated at Wed May 13 02:57:03 2026 by rpki-client