Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1/e002c723-f552-35d5-80c3-df9a24ce1276.roa
File:                     e002c723-f552-35d5-80c3-df9a24ce1276.roa (raw, json)
Hash identifier:          2g0UkBDSgroQItJaUxfmH7ME1NSqn5pd8IRRV9YZJRA=
Subject key identifier:   A8:6F:5D:3A:9F:2C:ED:83:C1:D2:0E:AF:22:54:4D:4E:7F:F8:1D:EE
Certificate issuer:       /CN=92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1
Certificate serial:       010D0C9F4328584D492A749865E2C24EEFDD5A00
Authority key identifier: 07:87:FA:92:98:BE:2A:9F:63:FE:83:73:16:30:D5:DE:8F:CE:41:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1/e002c723-f552-35d5-80c3-df9a24ce1276.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     63428
IP address blocks:        104.255.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:74:98:65:e2:c2:4e:ef:dd:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=74812e15-08f5-4bc3-8d2a-e53831d5198b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:de:0e:c3:2c:d5:23:7b:95:0b:e4:ab:4b:4e:
                    d3:26:8b:87:b7:fa:9c:aa:1e:e9:62:11:a1:33:aa:
                    78:23:e2:e5:bb:f2:c0:2c:9d:10:ad:31:1b:50:21:
                    be:66:a2:6f:9b:7d:43:43:61:fe:70:9c:7d:f0:5f:
                    9f:14:5f:aa:cb:79:bd:e3:b9:26:c2:ba:2c:48:a9:
                    e0:ff:03:b4:01:e5:c4:e6:d3:de:38:f4:75:ec:ac:
                    ca:e0:40:04:6c:11:d1:fa:de:5c:d4:bc:25:9b:39:
                    85:e7:a8:4b:24:ed:27:63:41:81:d4:1f:f5:1a:f1:
                    c9:72:bb:1e:5d:67:a8:72:1e:6f:a8:0b:c9:76:e1:
                    5f:b2:e8:0e:1c:f9:2c:ec:59:6b:61:d1:cf:19:fc:
                    0b:52:e6:17:86:72:a0:f5:53:4f:00:44:34:10:c3:
                    61:19:21:c6:a9:7a:e0:cf:c9:13:1d:e0:5e:6d:ff:
                    a0:c7:d6:4a:23:0d:11:b7:26:3d:ba:48:5e:5f:0c:
                    16:bc:14:1f:c0:cf:3f:92:9c:fb:7b:a3:84:44:7a:
                    96:6c:75:30:c0:7f:02:cb:c3:7f:1f:34:21:50:0a:
                    8e:0e:bc:a2:ef:33:03:c1:43:b7:5c:53:a6:a3:cf:
                    04:4c:f6:68:c2:5e:ea:6c:57:f5:fd:61:6c:62:7a:
                    af:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6F:5D:3A:9F:2C:ED:83:C1:D2:0E:AF:22:54:4D:4E:7F:F8:1D:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1/e002c723-f552-35d5-80c3-df9a24ce1276.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1.crl

            X509v3 Authority Key Identifier:
                keyid:07:87:FA:92:98:BE:2A:9F:63:FE:83:73:16:30:D5:DE:8F:CE:41:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/92ebc6f9-5649-4c10-91e6-e7e4f44d6fd1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:c3:8f:a1:25:ce:35:ea:43:9c:47:6e:0b:75:d9:f4:66:60:
         38:76:6b:16:46:9d:bb:3b:56:d4:73:9d:b9:3e:a0:d3:ba:0b:
         88:3f:50:f8:97:d1:73:4c:6f:c6:04:fd:f7:9d:de:8e:81:f8:
         5b:90:32:09:e4:92:40:6c:c6:e3:a5:82:06:e9:5d:cb:57:d9:
         cb:7f:19:52:0b:34:16:4e:0e:63:5c:54:c0:ee:5d:de:32:07:
         89:aa:68:b7:73:93:53:56:74:64:9d:c1:c7:af:36:70:8c:b0:
         1d:6b:8a:50:13:e6:a5:b4:c0:29:f9:05:c2:44:2d:90:e3:ad:
         56:1a:32:2e:fe:39:0e:e3:d1:d5:58:18:0b:b3:a5:76:d3:0c:
         db:c7:04:f7:02:58:8c:89:b1:86:d8:56:3d:e9:53:8d:10:c9:
         6c:be:58:21:e1:3a:6b:63:57:f6:94:5c:f5:b9:7a:ad:20:d6:
         40:04:24:d8:4a:9d:92:b3:1b:b9:db:48:1f:7f:1f:f6:b9:bf:
         36:a6:ed:d9:34:fd:1e:ce:73:f8:5e:95:d0:e1:8c:2e:15:55:
         7a:01:59:0a:44:d8:42:bf:9b:1c:d5:7b:af:01:bd:89:d7:28:
         8d:65:67:d6:fb:5a:5c:b6:a8:a1:db:e2:d4:9a:d4:b0:98:30:
         58:6b:21:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKnSYZeLCTu/dWgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTJlYmM2ZjktNTY0OS00YzEwLTkxZTYtZTdlNGY0NGQ2
ZmQxMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk
NzQ4MTJlMTUtMDhmNS00YmMzLThkMmEtZTUzODMxZDUxOThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv94OwyzVI3uVC+SrS07TJouHt/qcqh7pYhGh
M6p4I+Llu/LALJ0QrTEbUCG+ZqJvm31DQ2H+cJx98F+fFF+qy3m947kmwrosSKng
/wO0AeXE5tPeOPR17KzK4EAEbBHR+t5c1LwlmzmF56hLJO0nY0GB1B/1GvHJcrse
XWeoch5vqAvJduFfsugOHPks7FlrYdHPGfwLUuYXhnKg9VNPAEQ0EMNhGSHGqXrg
z8kTHeBebf+gx9ZKIw0RtyY9ukheXwwWvBQfwM8/kpz7e6OERHqWbHUwwH8Cy8N/
HzQhUAqODryi7zMDwUO3XFOmo88ETPZowl7qbFf1/WFsYnqv7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKhvXTqfLO2DwdIOryJUTU5/+B3uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85MmVi
YzZmOS01NjQ5LTRjMTAtOTFlNi1lN2U0ZjQ0ZDZmZDEvZTAwMmM3MjMtZjU1Mi0z
NWQ1LTgwYzMtZGY5YTI0Y2UxMjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTJlYmM2ZjktNTY0OS00YzEwLTkx
ZTYtZTdlNGY0NGQ2ZmQxLzkyZWJjNmY5LTU2NDktNGMxMC05MWU2LWU3ZTRmNDRk
NmZkMS5jcmwwHwYDVR0jBBgwFoAUB4f6kpi+Kp9j/oNzFjDV3o/OQdMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85MmViYzZmOS01NjQ5LTRjMTAtOTFlNi1lN2U0
ZjQ0ZDZmZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaP/IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHHDj6ElzjXqQ5xHbgt12fRmYDh2axZGnbs7VtRznbk+oNO6C4g/UPiX
0XNMb8YE/fed3o6B+FuQMgnkkkBsxuOlggbpXctX2ct/GVILNBZODmNcVMDuXd4y
B4mqaLdzk1NWdGSdwcevNnCMsB1rilAT5qW0wCn5BcJELZDjrVYaMi7+OQ7j0dVY
GAuzpXbTDNvHBPcCWIyJsYbYVj3pU40QyWy+WCHhOmtjV/aUXPW5eq0g1kAEJNhK
nZKzG7nbSB9/H/a5vzam7dk0/R7Oc/heldDhjC4VVXoBWQpE2EK/mxzVe68BvYnX
KI1lZ9b7Wly2qKHb4tSa1LCYMFhrIaQ=
-----END CERTIFICATE-----
Generated at Sat Mar 28 13:42:54 2026 by rpki-client