Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/7d829c50-260d-3b4a-b0b4-cce919acce32.roa
File:                     7d829c50-260d-3b4a-b0b4-cce919acce32.roa (raw, json)
Hash identifier:          UYGTbems5Y1lb59gdr8J0V67K512uMyMne1xOTFWGAw=
Subject key identifier:   FB:0B:D4:6B:D0:36:A0:14:EC:AA:35:2A:BB:85:02:01:72:E0:0A:76
Certificate issuer:       /CN=02df9026-5ea2-4718-a55c-d46da7505348
Certificate serial:       010D0C9F4328584D15A24E49EB0E102A16D28C00
Authority key identifier: C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/7d829c50-260d-3b4a-b0b4-cce919acce32.roa
Signing time:             Sat 07 Mar 2026 02:00:32 +0000
ROA not before:           Sat 07 Mar 2026 02:00:32 +0000
ROA not after:            Fri 05 Jun 2026 01:00:32 +0000
asID:                     14291
IP address blocks:        206.198.248.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:15:a2:4e:49:eb:0e:10:2a:16:d2:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02df9026-5ea2-4718-a55c-d46da7505348
        Validity
            Not Before: Mar  7 02:00:32 2026 GMT
            Not After : Jun  5 01:00:32 2026 GMT
        Subject: CN=96743632-7a70-41f8-b088-c05f6436f299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:92:87:54:1b:e1:c5:27:ad:bf:c5:3d:bb:39:
                    6e:bb:64:99:50:cb:80:7c:5b:eb:91:5f:9e:9c:b6:
                    05:14:97:8d:96:ac:f2:69:22:a5:77:ee:f2:45:de:
                    94:4d:d3:dd:50:17:2f:ce:e0:25:4f:e6:06:6e:6c:
                    76:a6:64:df:2d:0f:25:bc:4e:50:e1:28:ee:08:2a:
                    55:22:0d:1d:2e:11:10:80:d2:00:2a:57:c6:02:3e:
                    9c:93:c6:fc:b6:dc:4d:42:98:ea:5d:8b:71:f2:6d:
                    59:75:d1:d9:12:45:31:4e:c9:20:6d:e7:57:9e:80:
                    c9:ff:07:36:3d:a7:c0:77:77:14:74:79:99:68:04:
                    75:53:74:5a:ca:31:9b:d0:d2:c3:6e:6b:2e:3a:95:
                    7a:33:73:c7:a0:7f:5b:f2:61:9a:37:a4:55:99:5c:
                    52:26:2e:6d:30:5b:95:82:f9:16:5d:7e:47:fe:eb:
                    c1:bf:57:7b:43:2e:c9:db:91:2b:4d:b1:17:c0:78:
                    b2:a7:83:06:28:17:33:a7:2c:4b:17:51:cd:58:84:
                    cc:d6:b2:57:3f:a4:82:c2:3e:5f:86:48:95:e4:1f:
                    0f:e5:ec:60:73:18:22:c2:d6:f2:7d:3d:32:eb:9d:
                    c0:97:7f:34:94:bc:ee:96:a2:6a:dc:14:83:67:9b:
                    3b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:0B:D4:6B:D0:36:A0:14:EC:AA:35:2A:BB:85:02:01:72:E0:0A:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/7d829c50-260d-3b4a-b0b4-cce919acce32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl

            X509v3 Authority Key Identifier:
                keyid:C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.198.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f2:47:6c:b1:0e:a2:1c:0d:c1:c8:8f:8c:be:91:a8:da:6f:
         51:60:e5:a8:3c:24:a9:49:53:1d:a5:b9:03:2b:13:d3:b0:dc:
         cc:e8:23:fd:97:31:dd:58:7d:57:0e:14:15:74:f0:a9:4c:6b:
         c0:1d:17:73:33:81:88:e9:66:64:fc:19:3c:d4:c0:7a:4d:c6:
         08:6d:d7:c1:39:f7:14:cf:33:8d:f8:bb:a3:2b:d4:93:66:b9:
         ab:11:f4:fd:c1:8c:35:3e:06:2c:5a:24:e5:dc:a9:47:c3:0e:
         33:f7:09:ae:43:e1:eb:89:05:26:21:3e:1c:66:67:5e:bb:57:
         ae:c1:a0:3b:89:81:ff:6a:ea:fb:23:6d:c5:b0:d8:53:42:3b:
         e7:72:c8:76:6d:7d:d0:f5:37:99:e4:ac:7f:f9:f7:c0:2e:6f:
         bb:86:5a:66:23:e5:55:83:50:37:b7:f9:d2:61:34:82:33:35:
         58:5b:38:78:48:52:99:23:39:f0:9c:20:88:4d:db:43:8e:d3:
         50:84:5c:88:fe:1c:23:52:48:0e:4b:5a:e9:28:92:81:6d:83:
         f8:7f:75:08:fa:32:86:0a:ba:36:01:ba:a0:7f:87:23:bf:52:
         c9:54:7c:8c:89:fa:26:86:e7:ad:e0:1c:9d:e3:b1:e7:ca:17:
         4b:64:99:b2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Vok5J6w4QKhbSjAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDJkZjkwMjYtNWVhMi00NzE4LWE1NWMtZDQ2ZGE3NTA1
MzQ4MB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk
OTY3NDM2MzItN2E3MC00MWY4LWIwODgtYzA1ZjY0MzZmMjk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZKHVBvhxSetv8U9uzluu2SZUMuAfFvrkV+e
nLYFFJeNlqzyaSKld+7yRd6UTdPdUBcvzuAlT+YGbmx2pmTfLQ8lvE5Q4SjuCCpV
Ig0dLhEQgNIAKlfGAj6ck8b8ttxNQpjqXYtx8m1ZddHZEkUxTskgbedXnoDJ/wc2
PafAd3cUdHmZaAR1U3RayjGb0NLDbmsuOpV6M3PHoH9b8mGaN6RVmVxSJi5tMFuV
gvkWXX5H/uvBv1d7Qy7J25ErTbEXwHiyp4MGKBczpyxLF1HNWITM1rJXP6SCwj5f
hkiV5B8P5exgcxgiwtbyfT0y653Al380lLzulqJq3BSDZ5s7AQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPsL1GvQNqAU7Ko1KruFAgFy4Ap2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRm
OTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZkYTc1MDUzNDgvN2Q4MjljNTAtMjYwZC0z
YjRhLWIwYjQtY2NlOTE5YWNjZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDJkZjkwMjYtNWVhMi00NzE4LWE1
NWMtZDQ2ZGE3NTA1MzQ4LzAyZGY5MDI2LTVlYTItNDcxOC1hNTVjLWQ0NmRhNzUw
NTM0OC5jcmwwHwYDVR0jBBgwFoAUyBt2Ol6lM34AGtjZ+ZDa9s1kXqUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMmRmOTAyNi01ZWEyLTQ3MTgtYTU1Yy1kNDZk
YTc1MDUzNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzsb4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABXyR2yxDqIcDcHIj4y+kajab1Fg5ag8JKlJUx2luQMrE9Ow3MzoI/2X
Md1YfVcOFBV08KlMa8AdF3MzgYjpZmT8GTzUwHpNxght18E59xTPM434u6Mr1JNm
uasR9P3BjDU+BixaJOXcqUfDDjP3Ca5D4euJBSYhPhxmZ167V67BoDuJgf9q6vsj
bcWw2FNCO+dyyHZtfdD1N5nkrH/598Aub7uGWmYj5VWDUDe3+dJhNIIzNVhbOHhI
UpkjOfCcIIhN20OO01CEXIj+HCNSSA5LWukokoFtg/h/dQj6MoYKujYBuqB/hyO/
UslUfIyJ+iaG563gHJ3jsefKF0tkmbI=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:54:46 2026 by rpki-client