Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/2cfc07a7-9790-3c1f-8f4a-56efc35ac620.roa
File:                     2cfc07a7-9790-3c1f-8f4a-56efc35ac620.roa (raw, json)
Hash identifier:          cFoG3bYAl4xw0dwA7FaJkE5+dLbSOYIdjbshYURtCK8=
Subject key identifier:   EE:FA:5D:E4:69:95:06:8A:70:9D:2D:F9:86:BA:2C:43:76:72:FC:18
Certificate issuer:       /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Certificate serial:       010D0C9F4328584DCAFAF5350CFEA11D2FA4F200
Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/2cfc07a7-9790-3c1f-8f4a-56efc35ac620.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     399244
IP address blocks:        104.204.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fa:f5:35:0c:fe:a1:1d:2f:a4:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=6e735876-8660-473a-b4e0-364621d07c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:26:ba:0e:94:6e:b4:9a:70:5e:47:e0:69:41:
                    84:f0:51:a4:6a:64:78:19:ea:84:de:09:42:43:e4:
                    b9:f8:3f:b6:1f:89:4c:0c:a8:63:56:86:1e:07:7c:
                    00:65:77:30:70:bd:32:08:cd:3d:7d:d7:81:78:c4:
                    b5:c9:b8:55:4c:ca:3b:7b:bf:df:7e:e8:6c:3d:9b:
                    8c:eb:f5:64:48:62:db:0b:5f:cc:cf:b7:93:54:5b:
                    1d:63:f3:f2:0e:4e:32:a3:1c:f4:9f:d5:68:41:41:
                    e2:de:ba:6b:cf:ba:4e:85:ed:9b:2f:35:98:09:cf:
                    e1:93:7f:74:6f:95:0c:a6:79:e2:e4:be:d4:6d:30:
                    fc:5a:4f:f8:09:67:90:3c:89:2a:2c:2c:9a:ef:0f:
                    ce:dd:08:b6:7a:1c:2f:58:87:b0:26:f0:8d:99:c1:
                    94:9a:fa:8a:f4:f8:ab:1e:41:90:44:9c:59:7a:af:
                    06:05:b7:23:16:40:56:60:db:ea:d5:f1:c7:5f:9d:
                    2d:8f:f2:17:7f:f7:94:26:0a:5e:c8:b7:74:05:2e:
                    f3:be:42:ff:d3:7f:83:d1:50:9b:c0:a8:00:f2:47:
                    7f:e7:73:43:53:99:08:67:76:68:ad:1c:07:05:75:
                    ec:c3:0c:b4:d1:45:e8:3b:f9:f4:2a:42:e1:83:db:
                    b6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FA:5D:E4:69:95:06:8A:70:9D:2D:F9:86:BA:2C:43:76:72:FC:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/2cfc07a7-9790-3c1f-8f4a-56efc35ac620.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl

            X509v3 Authority Key Identifier:
                keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.204.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:eb:db:bd:e9:b5:25:d0:e7:7b:72:6e:45:c5:ec:6f:f3:49:
         24:96:1b:3d:66:88:08:32:6c:98:d9:2b:11:ec:23:5d:be:3a:
         8e:e1:60:09:f2:a1:cd:2d:37:d3:4c:4a:ad:f8:5d:75:d5:9b:
         3d:df:c0:f8:78:24:a2:51:b0:fb:3b:ff:e1:6a:35:87:ee:0d:
         93:01:be:b7:0c:34:e9:9a:ba:d7:e2:c5:a2:4e:b9:e5:02:0b:
         e8:53:70:d3:2a:14:05:f6:89:07:9b:41:17:00:2a:04:32:69:
         ee:53:d3:41:9e:43:30:40:f3:dc:c8:9a:ec:aa:67:00:94:21:
         35:1b:b8:e2:9e:be:d0:0e:e4:37:59:83:9d:f4:07:52:c3:0d:
         e1:27:60:14:28:b4:cd:63:7c:40:f3:00:ea:d4:88:1f:1d:d0:
         77:f5:fa:75:85:46:93:ec:1e:a7:7f:80:4f:70:43:d9:57:ae:
         42:db:49:00:7a:7c:62:5b:3e:6d:38:f6:91:bd:c2:59:33:a6:
         05:52:55:15:71:24:0a:e3:f3:d4:95:ae:ec:bd:3d:7e:1e:0d:
         c8:7f:b3:94:5d:93:70:06:19:54:0a:63:3d:1a:ed:f5:e6:9c:
         93:db:1d:4f:d2:a9:69:c9:02:63:86:bb:d7:a4:42:ff:e3:83:
         bd:45:e7:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+vU1DP6hHS+k8gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTAyZDgyZmUtOTVhNy00ZTA5LTlhMmEtYmUxZTE1NGJh
MzhkMB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk
NmU3MzU4NzYtODY2MC00NzNhLWI0ZTAtMzY0NjIxZDA3YzI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCa6DpRutJpwXkfgaUGE8FGkamR4GeqE3glC
Q+S5+D+2H4lMDKhjVoYeB3wAZXcwcL0yCM09fdeBeMS1ybhVTMo7e7/ffuhsPZuM
6/VkSGLbC1/Mz7eTVFsdY/PyDk4yoxz0n9VoQUHi3rprz7pOhe2bLzWYCc/hk390
b5UMpnni5L7UbTD8Wk/4CWeQPIkqLCya7w/O3Qi2ehwvWIewJvCNmcGUmvqK9Pir
HkGQRJxZeq8GBbcjFkBWYNvq1fHHX50tj/IXf/eUJgpeyLd0BS7zvkL/03+D0VCb
wKgA8kd/53NDU5kIZ3ZorRwHBXXswwy00UXoO/n0KkLhg9u2PwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO76XeRplQaKcJ0t+Ya6LEN2cvwYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJk
ODJmZS05NWE3LTRlMDktOWEyYS1iZTFlMTU0YmEzOGQvMmNmYzA3YTctOTc5MC0z
YzFmLThmNGEtNTZlZmMzNWFjNjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTAyZDgyZmUtOTVhNy00ZTA5LTlh
MmEtYmUxZTE1NGJhMzhkL2UwMmQ4MmZlLTk1YTctNGUwOS05YTJhLWJlMWUxNTRi
YTM4ZC5jcmwwHwYDVR0jBBgwFoAUpMW3Uwr3bKTh98MEI6vYWwVwhGwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJkODJmZS05NWE3LTRlMDktOWEyYS1iZTFl
MTU0YmEzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaMzYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHHr273ptSXQ53tybkXF7G/zSSSWGz1miAgybJjZKxHsI12+Oo7hYAny
oc0tN9NMSq34XXXVmz3fwPh4JKJRsPs7/+FqNYfuDZMBvrcMNOmautfixaJOueUC
C+hTcNMqFAX2iQebQRcAKgQyae5T00GeQzBA89zImuyqZwCUITUbuOKevtAO5DdZ
g530B1LDDeEnYBQotM1jfEDzAOrUiB8d0Hf1+nWFRpPsHqd/gE9wQ9lXrkLbSQB6
fGJbPm049pG9wlkzpgVSVRVxJArj89SVruy9PX4eDch/s5Rdk3AGGVQKYz0a7fXm
nJPbHU/SqWnJAmOGu9ekQv/jg71F53c=
-----END CERTIFICATE-----
Generated at Wed May 13 06:53:46 2026 by rpki-client