Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68/0810b9b5-925d-3ec4-a2a1-aa0a5fb1eac0.roa
File:                     0810b9b5-925d-3ec4-a2a1-aa0a5fb1eac0.roa (raw, json)
Hash identifier:          QDuqxhWIwb2u3kAX3vp/eXXqZJ1hc5wyjs30QOURWgI=
Subject key identifier:   67:49:96:B7:95:CB:E1:85:28:21:EF:2B:7A:76:5A:A2:A5:48:B8:1E
Certificate issuer:       /CN=c4a7bfa6-ee21-4973-98bb-12cc8fef1c68
Certificate serial:       010D0C9F4328584D975564C2B911B06024EF3470
Authority key identifier: EC:D8:32:2D:D6:3F:C6:8A:64:40:4C:7F:EE:95:76:FF:42:E5:BA:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68/0810b9b5-925d-3ec4-a2a1-aa0a5fb1eac0.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     18697
IP address blocks:        198.135.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:64:c2:b9:11:b0:60:24:ef:34:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4a7bfa6-ee21-4973-98bb-12cc8fef1c68
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=9a6b133a-b1ba-4bfc-9973-c785c12a6324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2f:7d:0f:fe:72:f6:e6:9e:33:7a:fd:9e:86:
                    a0:72:cb:77:22:7c:04:cc:13:d1:07:1e:45:ff:4c:
                    a0:02:19:6f:12:fd:eb:d5:bf:5c:3e:24:67:bf:01:
                    a6:4a:06:45:86:ea:95:32:08:2c:09:65:44:7d:86:
                    69:ef:a6:65:b3:99:4f:ac:dc:64:37:0c:f9:2a:5d:
                    52:69:3c:66:65:b2:20:60:fb:4c:71:e2:51:52:3d:
                    bf:de:78:a5:94:96:76:d6:e7:07:98:7e:e1:59:b6:
                    f2:c1:1d:41:0a:c0:08:d9:08:3c:20:35:14:44:ce:
                    5f:2e:34:ec:81:6d:96:2e:c6:79:b4:9b:69:62:68:
                    bf:94:2a:ac:74:21:93:ca:80:5b:11:e9:91:07:d5:
                    c4:4e:a3:7f:7a:db:16:ff:95:f4:61:db:51:93:27:
                    5a:82:51:0f:87:a7:13:e6:07:38:7a:a7:24:24:c8:
                    1f:cc:8c:41:b6:79:6e:71:0a:ea:32:dd:12:c9:ec:
                    61:c8:d1:48:42:f6:b4:da:44:6a:08:e7:b8:fa:dd:
                    f4:fc:d1:0f:b6:79:4f:08:14:39:e6:a5:b3:04:03:
                    f9:96:a8:b6:ad:5c:9e:a6:a6:23:98:c0:f7:af:b6:
                    43:24:af:ae:f1:2d:98:b4:1b:51:5b:5d:a8:94:dc:
                    28:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:49:96:B7:95:CB:E1:85:28:21:EF:2B:7A:76:5A:A2:A5:48:B8:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68/0810b9b5-925d-3ec4-a2a1-aa0a5fb1eac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68.crl

            X509v3 Authority Key Identifier:
                keyid:EC:D8:32:2D:D6:3F:C6:8A:64:40:4C:7F:EE:95:76:FF:42:E5:BA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.135.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:c8:21:bc:06:1f:4d:4b:4c:db:0e:54:fe:3d:c2:da:c1:8a:
         97:86:47:18:ce:92:75:b5:7b:d9:21:03:d3:07:0d:cb:52:80:
         c5:62:d7:83:70:32:9c:38:76:7a:ad:bf:be:93:7a:bd:85:bf:
         4a:3b:28:5e:61:5c:9d:d6:18:b4:e5:55:b1:41:0a:b5:69:0a:
         d7:fa:1c:ef:1d:88:aa:e1:be:80:22:5a:1f:f0:21:0b:3b:69:
         0b:91:48:15:6f:69:22:bf:a9:66:3b:a0:ef:ec:4d:ab:36:90:
         e8:0f:ab:df:b3:bb:20:ed:43:b7:17:39:1b:70:3d:ee:c2:8a:
         cd:a9:fd:18:f2:01:6f:dc:e6:56:8a:e3:e3:f9:80:b7:bd:63:
         d5:65:5a:ef:f2:db:6d:56:51:7e:d0:21:d9:ce:e7:a6:95:0f:
         ae:1d:0e:4c:71:01:64:54:da:08:a6:ab:5b:3b:ac:3b:07:6d:
         6c:ca:83:24:12:96:96:19:72:11:d7:41:1c:1f:cd:ef:3a:06:
         b5:79:89:71:a6:95:1b:3d:38:e0:c5:8e:4a:41:3d:a1:40:67:
         2a:58:9b:93:de:b3:7c:f9:63:46:14:56:c9:8a:e9:e2:49:f9:
         2d:d9:74:5a:30:62:43:71:69:73:af:b6:34:1e:b2:42:18:ba:
         c0:96:e4:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2XVWTCuRGwYCTvNHAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzRhN2JmYTYtZWUyMS00OTczLTk4YmItMTJjYzhmZWYx
YzY4MB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk
OWE2YjEzM2EtYjFiYS00YmZjLTk5NzMtYzc4NWMxMmE2MzI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki99D/5y9uaeM3r9noagcst3InwEzBPRBx5F
/0ygAhlvEv3r1b9cPiRnvwGmSgZFhuqVMggsCWVEfYZp76Zls5lPrNxkNwz5Kl1S
aTxmZbIgYPtMceJRUj2/3nillJZ21ucHmH7hWbbywR1BCsAI2Qg8IDUURM5fLjTs
gW2WLsZ5tJtpYmi/lCqsdCGTyoBbEemRB9XETqN/etsW/5X0YdtRkydaglEPh6cT
5gc4eqckJMgfzIxBtnlucQrqMt0SyexhyNFIQva02kRqCOe4+t30/NEPtnlPCBQ5
5qWzBAP5lqi2rVyepqYjmMD3r7ZDJK+u8S2YtBtRW12olNwolwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGdJlreVy+GFKCHvK3p2WqKlSLgeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNGE3
YmZhNi1lZTIxLTQ5NzMtOThiYi0xMmNjOGZlZjFjNjgvMDgxMGI5YjUtOTI1ZC0z
ZWM0LWEyYTEtYWEwYTVmYjFlYWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzRhN2JmYTYtZWUyMS00OTczLTk4
YmItMTJjYzhmZWYxYzY4L2M0YTdiZmE2LWVlMjEtNDk3My05OGJiLTEyY2M4ZmVm
MWM2OC5jcmwwHwYDVR0jBBgwFoAU7NgyLdY/xopkQEx/7pV2/0Llur4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNGE3YmZhNi1lZTIxLTQ5NzMtOThiYi0xMmNj
OGZlZjFjNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxof6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH3IIbwGH01LTNsOVP49wtrBipeGRxjOknW1e9khA9MHDctSgMVi14Nw
Mpw4dnqtv76Ter2Fv0o7KF5hXJ3WGLTlVbFBCrVpCtf6HO8diKrhvoAiWh/wIQs7
aQuRSBVvaSK/qWY7oO/sTas2kOgPq9+zuyDtQ7cXORtwPe7Cis2p/RjyAW/c5laK
4+P5gLe9Y9VlWu/y221WUX7QIdnO56aVD64dDkxxAWRU2gimq1s7rDsHbWzKgyQS
lpYZchHXQRwfze86BrV5iXGmlRs9OODFjkpBPaFAZypYm5Pes3z5Y0YUVsmK6eJJ
+S3ZdFowYkNxaXOvtjQeskIYusCW5Kw=
-----END CERTIFICATE-----
Generated at Wed May 13 03:12:07 2026 by rpki-client