Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/e9fada9c-c9e9-3abe-88cb-5043ea808fcc.roa
File:                     e9fada9c-c9e9-3abe-88cb-5043ea808fcc.roa (raw, json)
Hash identifier:          VCSsQiMSOuuC6g4eveRuqToCqXzhx1A8UmZGX4xvu2Q=
Subject key identifier:   A3:E9:A6:42:6B:94:D6:82:89:67:4A:CF:E3:1F:0D:6C:41:A6:2A:CB
Certificate issuer:       /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
Certificate serial:       010D0C9F4328584DBE6B245CDB8ECC75975DB600
Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/e9fada9c-c9e9-3abe-88cb-5043ea808fcc.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     7018
IP address blocks:        205.196.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:24:5c:db:8e:cc:75:97:5d:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=0941a7ce-f427-4a2a-bc6f-9a776a210e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:be:da:7a:c2:8a:13:1f:a0:ec:42:ea:bb:d5:
                    f7:9e:37:9d:87:34:99:51:80:cf:d4:0e:01:d4:93:
                    51:b0:8e:46:36:c3:e7:50:36:29:e9:c5:29:68:83:
                    dc:be:af:e5:ca:be:56:73:a9:dc:01:86:9e:31:06:
                    86:97:8b:0b:23:16:45:a8:03:0e:d3:46:b2:2f:f6:
                    3b:6c:7a:2c:ee:97:69:70:67:9f:fe:0e:04:e9:f9:
                    5c:d0:25:68:cd:5b:06:de:78:d4:f1:f7:51:6d:5a:
                    08:eb:ca:d3:54:93:5f:d2:c0:d0:bb:a1:ad:39:f9:
                    87:05:35:af:b7:a9:9a:72:79:d8:7f:96:73:09:a6:
                    8c:33:c7:9d:10:10:d5:9f:2f:56:46:04:8f:3b:ea:
                    42:97:1d:9c:7e:0b:1a:9c:14:48:14:bc:52:0a:d3:
                    54:c6:b1:85:7f:58:3e:28:f7:ad:b1:14:2f:b5:86:
                    b4:6d:89:fd:d7:f7:d8:aa:b7:09:9c:5b:e4:bc:0c:
                    9b:ae:4a:e5:44:e9:1f:27:6e:e8:98:48:b3:8e:4a:
                    b2:e7:66:cc:de:34:10:96:f2:c2:cc:a8:c3:ba:29:
                    f8:09:91:fe:5d:17:41:1e:06:71:e4:0d:06:7c:72:
                    aa:9b:f8:26:4e:fc:06:c1:0c:75:80:5c:4a:4d:fd:
                    22:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E9:A6:42:6B:94:D6:82:89:67:4A:CF:E3:1F:0D:6C:41:A6:2A:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/e9fada9c-c9e9-3abe-88cb-5043ea808fcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl

            X509v3 Authority Key Identifier:
                keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.196.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:c5:72:0a:f0:ce:e5:62:fb:16:5a:67:ab:d2:86:7e:26:f7:
         a6:8a:f1:17:b8:eb:40:7a:a5:68:dd:60:f4:4b:68:8e:91:6c:
         d3:a8:64:10:d6:88:35:1a:d1:28:db:d2:1c:e7:f2:66:84:66:
         ae:9f:44:98:46:eb:89:c3:45:b1:cb:97:82:42:af:78:49:f1:
         01:04:45:8d:18:e3:80:1c:55:44:da:00:de:13:6d:ac:ff:ad:
         09:65:34:fe:e7:0f:cf:85:47:67:58:76:8f:49:a2:9f:4c:0f:
         4f:a0:20:98:e8:33:2b:43:91:7b:c3:63:e2:2c:a2:84:53:8d:
         9a:59:b5:0d:6d:d4:78:46:30:5c:7c:51:65:55:6c:c8:4f:5f:
         15:53:8e:ed:26:2e:37:f8:5b:af:1b:b7:27:8f:e9:3a:8a:fc:
         d1:7b:4e:e1:78:92:12:c1:0b:05:76:5d:31:36:3c:f1:b2:fb:
         bb:06:79:25:2b:5e:27:11:19:3c:0d:7a:72:b7:85:f1:6e:4f:
         90:e7:b3:81:cf:8b:b0:98:92:5d:d8:76:5a:7e:2e:c4:aa:f9:
         a0:6d:6f:b5:84:db:7b:66:f9:e3:4c:6a:2d:2b:74:eb:8f:84:
         cd:0c:e8:d0:a1:fa:e2:ef:1e:96:03:e0:87:77:35:d3:59:56:
         43:80:ab:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2+ayRc247MdZddtgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ0ZDNmYWMtYWI5OS00YjM3LWE0MmUtZGJmNjdhOTVj
NDYwMB4XDTI2MDUwNjEzMDAzMFoXDTI2MDgwNDEzMDAzMFowLzEtMCsGA1UEAxMk
MDk0MWE3Y2UtZjQyNy00YTJhLWJjNmYtOWE3NzZhMjEwZTJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib7aesKKEx+g7ELqu9X3njedhzSZUYDP1A4B
1JNRsI5GNsPnUDYp6cUpaIPcvq/lyr5Wc6ncAYaeMQaGl4sLIxZFqAMO00ayL/Y7
bHos7pdpcGef/g4E6flc0CVozVsG3njU8fdRbVoI68rTVJNf0sDQu6GtOfmHBTWv
t6macnnYf5ZzCaaMM8edEBDVny9WRgSPO+pClx2cfgsanBRIFLxSCtNUxrGFf1g+
KPetsRQvtYa0bYn91/fYqrcJnFvkvAybrkrlROkfJ27omEizjkqy52bM3jQQlvLC
zKjDuin4CZH+XRdBHgZx5A0GfHKqm/gmTvwGwQx1gFxKTf0i2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKPppkJrlNaCiWdKz+MfDWxBpirLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRk
M2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2N2E5NWM0NjAvZTlmYWRhOWMtYzllOS0z
YWJlLTg4Y2ItNTA0M2VhODA4ZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ0ZDNmYWMtYWI5OS00YjM3LWE0
MmUtZGJmNjdhOTVjNDYwL2Q0NGQzZmFjLWFiOTktNGIzNy1hNDJlLWRiZjY3YTk1
YzQ2MC5jcmwwHwYDVR0jBBgwFoAUEHfkdKYtZFtD8H4411+2zqs3WzIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDRkM2ZhYy1hYjk5LTRiMzctYTQyZS1kYmY2
N2E5NWM0NjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzcQIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABLFcgrwzuVi+xZaZ6vShn4m96aK8Re460B6pWjdYPRLaI6RbNOoZBDW
iDUa0Sjb0hzn8maEZq6fRJhG64nDRbHLl4JCr3hJ8QEERY0Y44AcVUTaAN4Tbaz/
rQllNP7nD8+FR2dYdo9Jop9MD0+gIJjoMytDkXvDY+IsooRTjZpZtQ1t1HhGMFx8
UWVVbMhPXxVTju0mLjf4W68btyeP6TqK/NF7TuF4khLBCwV2XTE2PPGy+7sGeSUr
XicRGTwNenK3hfFuT5Dns4HPi7CYkl3Ydlp+LsSq+aBtb7WE23tm+eNMai0rdOuP
hM0M6NCh+uLvHpYD4Id3NdNZVkOAq1s=
-----END CERTIFICATE-----
Generated at Tue May 12 21:38:05 2026 by rpki-client