Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/f6720a31-8263-3bb2-b646-ce9236139a67.roa
File:                     f6720a31-8263-3bb2-b646-ce9236139a67.roa (raw, json)
Hash identifier:          myfkaeNoZ6Rmoj2htal8O8I4sMNNXDgj4hjJdWebSmw=
Subject key identifier:   2C:F0:B2:05:0D:E9:BF:17:65:29:3B:6B:57:0E:57:A6:95:F2:A8:74
Certificate issuer:       /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Certificate serial:       010D0C9F4328584D492A739E797AEFAFB56DE800
Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/f6720a31-8263-3bb2-b646-ce9236139a67.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     26341
IP address blocks:        198.29.16.0/22 maxlen: 24
                          198.29.22.0/24 maxlen: 24
                          198.29.23.0/24 maxlen: 24
                          198.29.24.0/24 maxlen: 24
                          198.29.25.0/24 maxlen: 24
                          198.29.26.0/24 maxlen: 24
                          2602:f9e7:20::/45 maxlen: 48
                          2602:f9e7:28::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:73:9e:79:7a:ef:af:b5:6d:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=cad9133c-0154-4f7f-9410-5c6e883027cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:18:0c:cf:44:e8:f1:4d:ff:f3:9d:7e:0e:6e:
                    3c:f4:05:49:be:96:bf:06:c1:f5:a8:da:85:c2:d9:
                    95:59:4e:db:cf:a0:77:69:ed:74:83:66:92:35:62:
                    c9:49:9f:b9:a2:ec:13:f8:1a:f9:26:21:e3:d1:dc:
                    aa:7d:87:3b:8a:6b:e6:c6:8a:92:9e:e9:22:d6:de:
                    77:da:d0:19:87:27:16:b2:40:4c:4b:ca:72:8e:81:
                    1a:ab:d4:78:ef:b4:44:ab:ad:69:22:a6:06:fb:23:
                    cb:16:3f:44:27:e2:bf:35:ac:b6:0d:b6:12:17:06:
                    81:34:97:ba:2f:52:2f:97:d8:51:c0:68:54:ec:b4:
                    5f:66:09:2b:23:f9:eb:d6:c1:19:fc:3d:a2:ec:94:
                    14:90:e0:e6:29:88:9d:53:75:d3:63:1d:33:62:bb:
                    a2:2f:53:d3:46:cd:2b:d0:28:65:d0:9b:cb:37:b0:
                    2b:0e:44:ea:9b:70:38:92:9a:0b:ab:be:2f:72:24:
                    0f:00:13:c3:6d:6f:d5:64:b1:51:0c:45:b3:6a:48:
                    c4:80:9b:55:71:48:70:15:bf:9e:9d:4e:a6:67:f6:
                    0a:8a:d1:80:3c:5d:d3:cc:9d:45:b1:62:3b:76:fe:
                    0f:06:c0:f1:bf:ff:45:2c:7e:0a:40:16:d3:52:1d:
                    ed:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F0:B2:05:0D:E9:BF:17:65:29:3B:6B:57:0E:57:A6:95:F2:A8:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/f6720a31-8263-3bb2-b646-ce9236139a67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl

            X509v3 Authority Key Identifier:
                keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.29.16.0/22
                  198.29.22.0-198.29.26.255
                IPv6:
                  2602:f9e7:20::-2602:f9e7:2b:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:8e:a3:07:94:dd:bc:35:e6:8a:e0:7f:ba:3b:27:ca:da:4e:
         0d:bb:87:35:d5:2b:f1:a9:60:25:42:95:31:4d:a8:1d:38:cd:
         9e:21:eb:a0:a2:33:b8:44:03:49:5a:c4:40:09:b4:2e:68:08:
         7e:23:76:ed:4f:c1:4d:cb:2a:1e:d3:5d:95:11:ae:bb:d3:2f:
         f8:4d:0b:fe:08:33:fb:9e:fc:c2:f2:57:39:cc:40:4c:49:eb:
         98:6a:dd:23:fa:a6:5b:2a:00:36:be:2d:29:e0:ae:8e:b6:a1:
         2b:01:8e:67:ac:45:94:25:2f:8c:0a:1b:80:b0:d8:9a:53:03:
         6c:f2:c0:4c:40:9e:3c:57:d2:0f:9d:52:55:2a:98:c6:84:be:
         22:92:5b:9c:54:f2:ad:6d:80:a2:81:c1:51:a0:ef:dc:59:fb:
         ee:02:e9:48:eb:f1:0d:e4:e0:f6:e2:91:90:50:9f:9e:33:f0:
         0f:9b:48:37:bd:ad:d4:2f:6e:2b:a7:6a:6f:2f:d2:62:25:c0:
         4b:d7:74:64:bb:36:8b:71:ed:5a:c1:66:4d:53:52:84:94:68:
         81:55:93:0f:af:97:c6:be:7e:2c:75:76:bb:e4:31:e8:45:13:
         67:f8:8b:08:8d:84:47:13:b4:de:7a:6e:23:ba:6a:35:9a:5f:
         5e:ab:0f:27
-----BEGIN CERTIFICATE-----
MIIGbTCCBVWgAwIBAgIUAQ0Mn0MoWE1JKnOeeXrvr7Vt6AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWFkMDg2NWUtNzc4Ni00YzY2LTlmOTEtYmMxZjQ2ZjJj
MzRmMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk
Y2FkOTEzM2MtMDE1NC00ZjdmLTk0MTAtNWM2ZTg4MzAyN2NkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhgMz0To8U3/851+Dm489AVJvpa/BsH1qNqF
wtmVWU7bz6B3ae10g2aSNWLJSZ+5ouwT+Br5JiHj0dyqfYc7imvmxoqSnuki1t53
2tAZhycWskBMS8pyjoEaq9R477REq61pIqYG+yPLFj9EJ+K/Nay2DbYSFwaBNJe6
L1Ivl9hRwGhU7LRfZgkrI/nr1sEZ/D2i7JQUkODmKYidU3XTYx0zYruiL1PTRs0r
0Chl0JvLN7ArDkTqm3A4kpoLq74vciQPABPDbW/VZLFRDEWzakjEgJtVcUhwFb+e
nU6mZ/YKitGAPF3TzJ1FsWI7dv4PBsDxv/9FLH4KQBbTUh3tGQIDAQABo4IDfzCC
A3swHQYDVR0OBBYEFCzwsgUN6b8XZSk7a1cOV6aV8qh0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQw
ODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFmNDZmMmMzNGYvZjY3MjBhMzEtODI2My0z
YmIyLWI2NDYtY2U5MjM2MTM5YTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWFkMDg2NWUtNzc4Ni00YzY2LTlm
OTEtYmMxZjQ2ZjJjMzRmLzVhZDA4NjVlLTc3ODYtNGM2Ni05ZjkxLWJjMWY0NmYy
YzM0Zi5jcmwwHwYDVR0jBBgwFoAUOq+U75raoImJh13K6GCGyUDjDbgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQwODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFm
NDZmMmMzNGYuY2VyMEkGCCsGAQUFBwEHAQH/BDowODAaBAIAATAUAwQCxh0QMAwD
BAHGHRYDBADGHRowGgQCAAIwFDASAwcFJgL55wAgAwcCJgL55wAoMFQGA1UdIAEB
/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp
bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB
AAWOoweU3bw15orgf7o7J8raTg27hzXVK/GpYCVClTFNqB04zZ4h66CiM7hEA0la
xEAJtC5oCH4jdu1PwU3LKh7TXZURrrvTL/hNC/4IM/ue/MLyVznMQExJ65hq3SP6
plsqADa+LSngro62oSsBjmesRZQlL4wKG4Cw2JpTA2zywExAnjxX0g+dUlUqmMaE
viKSW5xU8q1tgKKBwVGg79xZ++4C6Ujr8Q3k4PbikZBQn54z8A+bSDe9rdQvbiun
am8v0mIlwEvXdGS7Notx7VrBZk1TUoSUaIFVkw+vl8a+fix1drvkMehFE2f4iwiN
hEcTtN56biO6ajWaX16rDyc=
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:11:53 2026 by rpki-client