Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/d98ff242-b4f1-3965-86dc-a85d09eab58c.roa
File:                     d98ff242-b4f1-3965-86dc-a85d09eab58c.roa (raw, json)
Hash identifier:          A7DLVzSCyQSdpfkVM5SctGWQxq8yuWsifbeym2+q4yo=
Subject key identifier:   40:49:AE:A7:05:E8:FC:13:49:3B:82:19:27:A7:EA:51:08:09:AA:F9
Certificate issuer:       /CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd
Certificate serial:       010D0C9F4328584DC83041AF952329268A8B8B50
Authority key identifier: C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/d98ff242-b4f1-3965-86dc-a85d09eab58c.roa
Signing time:             Sun 10 May 2026 01:00:24 +0000
ROA not before:           Sun 10 May 2026 01:00:24 +0000
ROA not after:            Sat 08 Aug 2026 01:00:24 +0000
asID:                     15164
IP address blocks:        192.111.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c8:30:41:af:95:23:29:26:8a:8b:8b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd
        Validity
            Not Before: May 10 01:00:24 2026 GMT
            Not After : Aug  8 01:00:24 2026 GMT
        Subject: CN=5b02cba5-5a16-41ce-8ba0-13b0c53b0975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3d:af:a1:de:6d:9b:aa:4f:c9:6a:e4:70:2a:
                    b8:78:2b:af:58:d5:a8:e8:10:bb:65:a3:1d:f4:0a:
                    47:a8:4a:61:d6:fb:92:28:d3:c0:f9:0d:94:fb:2e:
                    05:2a:2e:ff:8d:f2:e4:b7:9c:23:0d:ee:08:8e:e2:
                    3a:6f:14:53:02:13:5f:40:3a:81:01:a0:6f:14:a9:
                    64:1c:7c:24:a7:64:0f:79:4a:63:87:1f:3b:8e:09:
                    93:8c:7a:0e:35:94:ba:da:93:5d:29:a1:6b:9a:8c:
                    99:90:67:32:6e:27:f9:a0:35:9a:fd:d2:bf:44:d9:
                    2d:25:98:58:5a:ee:9e:3d:93:f0:6f:cd:06:c8:1f:
                    d1:72:05:07:44:d0:c2:49:87:21:c7:e8:d8:c5:07:
                    cf:aa:4d:89:89:64:ae:b2:0d:c7:b6:86:90:30:68:
                    53:ae:39:7a:6e:01:01:a5:f7:3c:45:e7:29:00:80:
                    07:c2:30:1a:c8:71:0a:b6:09:8b:41:e4:d5:89:d8:
                    5d:d2:d5:2c:b3:1e:1e:07:48:25:71:49:f8:bc:8a:
                    dd:71:88:20:c6:59:ac:9b:85:d2:b6:6b:24:cd:9a:
                    c1:fe:07:6e:ad:04:4e:1e:b8:30:e0:cb:62:b2:a3:
                    e0:a1:98:3f:79:96:6e:a8:c3:0b:83:81:e2:21:05:
                    6d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:49:AE:A7:05:E8:FC:13:49:3B:82:19:27:A7:EA:51:08:09:AA:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/d98ff242-b4f1-3965-86dc-a85d09eab58c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.crl

            X509v3 Authority Key Identifier:
                keyid:C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:63:11:65:01:25:f6:a1:a2:cb:d6:b6:b5:8d:e8:a4:09:33:
         cc:06:8c:38:42:35:8e:81:9b:e3:02:d6:99:90:35:f6:8b:9a:
         33:9d:f2:43:c1:f9:56:e8:01:16:36:85:3a:62:c2:f1:64:57:
         c7:c9:9b:58:3c:55:c5:a7:e2:cd:a0:fa:cd:59:b9:65:7c:4c:
         55:63:06:36:17:1c:1e:af:ab:f6:22:f8:0e:a5:b6:96:cb:fc:
         b3:9d:49:d6:c5:41:9d:5c:77:1a:e1:45:0a:80:cc:17:6e:5a:
         3d:02:b6:0d:4a:e2:fb:6e:5f:e1:8e:03:ed:f3:ae:ad:a6:c9:
         ab:a0:7a:c8:83:6c:19:59:f7:64:08:f5:40:be:6e:7a:8d:fc:
         a5:7c:20:7a:99:37:f3:ba:02:98:5f:ac:f7:b7:da:28:5d:90:
         30:0f:7b:ad:6f:82:85:21:1b:a7:fe:76:b5:a9:e3:c8:f1:ba:
         a6:d0:00:7e:8b:b8:91:24:65:1c:08:ec:bb:fb:b7:30:54:66:
         23:f2:38:3c:72:21:1b:d9:a8:aa:29:2e:28:b2:4e:6c:ff:f8:
         c6:4b:18:de:6f:07:34:ce:bd:4c:87:c9:af:c8:2b:79:2b:29:
         90:78:88:f7:9e:e2:93:a1:9c:d7:29:ee:de:1e:91:44:2b:2a:
         84:54:0c:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3IMEGvlSMpJoqLi1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmVlN2I2N2UtNWU0Zi00YTA1LWE1OWUtOWU4MjBjODk4
ZmNkMB4XDTI2MDUxMDAxMDAyNFoXDTI2MDgwODAxMDAyNFowLzEtMCsGA1UEAxMk
NWIwMmNiYTUtNWExNi00MWNlLThiYTAtMTNiMGM1M2IwOTc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhz2vod5tm6pPyWrkcCq4eCuvWNWo6BC7ZaMd
9ApHqEph1vuSKNPA+Q2U+y4FKi7/jfLkt5wjDe4IjuI6bxRTAhNfQDqBAaBvFKlk
HHwkp2QPeUpjhx87jgmTjHoONZS62pNdKaFrmoyZkGcybif5oDWa/dK/RNktJZhY
Wu6ePZPwb80GyB/RcgUHRNDCSYchx+jYxQfPqk2JiWSusg3HtoaQMGhTrjl6bgEB
pfc8RecpAIAHwjAayHEKtgmLQeTVidhd0tUssx4eB0glcUn4vIrdcYggxlmsm4XS
tmskzZrB/gdurQROHrgw4MtisqPgoZg/eZZuqMMLg4HiIQVt/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEBJrqcF6PwTSTuCGSen6lEICar5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mZWU3
YjY3ZS01ZTRmLTRhMDUtYTU5ZS05ZTgyMGM4OThmY2QvZDk4ZmYyNDItYjRmMS0z
OTY1LTg2ZGMtYTg1ZDA5ZWFiNThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmVlN2I2N2UtNWU0Zi00YTA1LWE1
OWUtOWU4MjBjODk4ZmNkL2ZlZTdiNjdlLTVlNGYtNGEwNS1hNTllLTllODIwYzg5
OGZjZC5jcmwwHwYDVR0jBBgwFoAUyUCeXczprJIdAfK0l1qNJ/cvAbIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mZWU3YjY3ZS01ZTRmLTRhMDUtYTU5ZS05ZTgy
MGM4OThmY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABdjEWUBJfahosvWtrWN6KQJM8wGjDhCNY6Bm+MC1pmQNfaLmjOd8kPB
+VboARY2hTpiwvFkV8fJm1g8VcWn4s2g+s1ZuWV8TFVjBjYXHB6vq/Yi+A6ltpbL
/LOdSdbFQZ1cdxrhRQqAzBduWj0Ctg1K4vtuX+GOA+3zrq2myaugesiDbBlZ92QI
9UC+bnqN/KV8IHqZN/O6AphfrPe32ihdkDAPe61vgoUhG6f+drWp48jxuqbQAH6L
uJEkZRwI7Lv7tzBUZiPyODxyIRvZqKopLiiyTmz/+MZLGN5vBzTOvUyHya/IK3kr
KZB4iPee4pOhnNcp7t4ekUQrKoRUDPs=
-----END CERTIFICATE-----
Generated at Wed May 13 03:36:51 2026 by rpki-client