Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/ae2eb33e-3141-3b16-8357-8e390f00f2ef.roa
File:                     ae2eb33e-3141-3b16-8357-8e390f00f2ef.roa (raw, json)
Hash identifier:          4UKMUlK7Yurl0ahghWPvn0YH55f3ThorIQ5aRj2Dt58=
Subject key identifier:   73:27:88:C2:23:30:21:BA:1D:16:FE:6A:A6:6A:FF:61:3A:75:D9:2B
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584D8EF57DF25CC6EC3995EFBD00
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/ae2eb33e-3141-3b16-8357-8e390f00f2ef.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     376
IP address blocks:        207.162.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:7d:f2:5c:c6:ec:39:95:ef:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=968f8ee2-9538-4f17-b1c8-24ed96dadd31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:af:c0:d1:e5:65:70:2f:9c:6d:84:cf:1c:97:
                    a8:c7:00:d3:b0:4c:89:a9:7f:5e:25:aa:4c:20:4d:
                    b1:53:a0:08:88:a1:e7:f9:8f:c4:ec:95:cc:10:20:
                    13:b5:9f:15:b9:71:9d:ac:10:f9:a8:0e:96:9e:42:
                    ce:2a:94:9e:44:88:da:b1:38:42:7b:47:56:7a:ed:
                    c9:90:f3:e8:ee:b0:ab:b5:24:51:3d:7b:50:38:d5:
                    89:3d:34:e3:f2:23:13:5f:70:85:c0:ab:cf:3f:97:
                    52:7d:6c:69:ab:54:2c:3a:5f:91:b5:06:4e:ef:a6:
                    e9:67:9a:a5:12:66:94:12:47:66:3a:29:1a:74:ea:
                    36:0b:a2:16:b6:10:b1:20:59:27:85:cb:8e:0d:1d:
                    88:53:8a:f9:79:24:93:37:16:a6:b0:64:e2:03:78:
                    5f:37:3e:97:1c:7d:f6:95:6e:70:32:b6:ed:76:ec:
                    fc:a8:0e:37:0a:a8:4f:03:b8:2f:9d:f4:45:89:51:
                    1f:b2:e3:9d:7e:05:20:dd:a4:52:23:58:c5:4b:5c:
                    ff:97:12:9c:64:9f:ad:23:cc:3b:9e:7a:3f:22:53:
                    f2:db:a0:2f:7e:13:45:75:36:53:d8:4d:26:03:0e:
                    5c:8b:18:c0:f5:13:8e:d1:a3:9e:12:8c:16:3f:e9:
                    e0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:27:88:C2:23:30:21:BA:1D:16:FE:6A:A6:6A:FF:61:3A:75:D9:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/ae2eb33e-3141-3b16-8357-8e390f00f2ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.162.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:73:02:00:ce:c7:a5:3d:22:25:e7:e8:d8:15:c2:56:4e:82:
         b7:15:7c:3c:a5:da:0c:05:df:81:c9:6a:43:92:22:59:78:01:
         28:48:02:b4:32:e7:74:c0:c9:b2:ac:f0:33:6e:71:67:7b:3f:
         b3:b2:a5:d7:58:67:51:6d:8f:74:c1:96:d0:46:2d:18:88:f4:
         85:be:e4:01:f0:06:85:6d:37:cf:f9:3f:c7:7a:a4:21:97:9a:
         6b:a1:43:68:40:82:b9:7e:08:d2:6c:47:1b:9a:c3:24:23:8a:
         57:03:7e:93:cd:4e:e8:a6:30:0b:16:98:e6:b2:75:9b:51:1f:
         1d:0a:90:61:04:9a:fc:3b:8a:26:39:0a:6c:bf:f9:e8:91:a5:
         cf:16:b6:e3:ed:d4:c8:f9:66:16:7b:de:7d:f6:11:ea:e6:ca:
         c2:ba:f5:8f:76:31:99:31:b6:95:bc:65:9d:72:ee:ec:9e:59:
         11:e1:4d:d1:83:a6:cb:59:1a:64:37:1b:f1:88:2c:ae:5c:9d:
         cf:70:61:80:e5:2b:0b:2e:82:74:f2:13:e9:66:f4:7f:a2:8c:
         fa:83:66:79:bc:52:95:4c:7b:79:c4:78:38:d1:5d:b5:cd:b4:
         d7:61:4e:d9:46:0e:a3:93:fb:a2:38:a1:bd:c7:39:66:29:dc:
         e4:d3:b8:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9X3yXMbsOZXvvQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy
ZDk4MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
OTY4ZjhlZTItOTUzOC00ZjE3LWIxYzgtMjRlZDk2ZGFkZDMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta/A0eVlcC+cbYTPHJeoxwDTsEyJqX9eJapM
IE2xU6AIiKHn+Y/E7JXMECATtZ8VuXGdrBD5qA6WnkLOKpSeRIjasThCe0dWeu3J
kPPo7rCrtSRRPXtQONWJPTTj8iMTX3CFwKvPP5dSfWxpq1QsOl+RtQZO76bpZ5ql
EmaUEkdmOikadOo2C6IWthCxIFknhcuODR2IU4r5eSSTNxamsGTiA3hfNz6XHH32
lW5wMrbtduz8qA43CqhPA7gvnfRFiVEfsuOdfgUg3aRSI1jFS1z/lxKcZJ+tI8w7
nno/IlPy26AvfhNFdTZT2E0mAw5cixjA9ROO0aOeEowWP+ng8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHMniMIjMCG6HRb+aqZq/2E6ddkrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj
NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvYWUyZWIzM2UtMzE0MS0z
YjE2LTgzNTctOGUzOTBmMDBmMmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1
NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2
MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0
NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6JjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAJzAgDOx6U9IiXn6NgVwlZOgrcVfDyl2gwF34HJakOSIll4AShIArQy
53TAybKs8DNucWd7P7OypddYZ1Ftj3TBltBGLRiI9IW+5AHwBoVtN8/5P8d6pCGX
mmuhQ2hAgrl+CNJsRxuawyQjilcDfpPNTuimMAsWmOaydZtRHx0KkGEEmvw7iiY5
Cmy/+eiRpc8WtuPt1Mj5ZhZ73n32EermysK69Y92MZkxtpW8ZZ1y7uyeWRHhTdGD
pstZGmQ3G/GILK5cnc9wYYDlKwsugnTyE+lm9H+ijPqDZnm8UpVMe3nEeDjRXbXN
tNdhTtlGDqOT+6I4ob3HOWYp3OTTuNY=
-----END CERTIFICATE-----
Generated at Wed May 13 04:33:50 2026 by rpki-client