Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/2bfecb58-6485-3c6b-b425-9db4b0acc6cb.roa
File:                     2bfecb58-6485-3c6b-b425-9db4b0acc6cb.roa (raw, json)
Hash identifier:          3EJnO0uD49OERbX6FH5ARXNjV7Y1cW5JVJIW9ZyQSy8=
Subject key identifier:   F4:D1:B6:EE:B3:A2:E9:E4:E9:37:28:99:BE:07:58:AE:90:42:D9:2B
Certificate issuer:       /CN=e0647553-32ca-48b6-be58-d6c7f475e654
Certificate serial:       010D0C9F4328584DBBA054762E3F85DF2A7ACF00
Authority key identifier: 3D:EA:87:2B:EB:A8:27:88:90:FC:5A:63:64:0F:CA:8F:10:C0:FE:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/2bfecb58-6485-3c6b-b425-9db4b0acc6cb.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     7784
IP address blocks:        207.188.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/e0647553-32ca-48b6-be58-d6c7f475e654.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/e0647553-32ca-48b6-be58-d6c7f475e654.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:54:76:2e:3f:85:df:2a:7a:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0647553-32ca-48b6-be58-d6c7f475e654
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=59491029-355c-4fdc-80ee-58f6664ef706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f8:3c:59:16:ec:8a:f7:5d:f6:bc:c6:df:8e:
                    12:67:30:da:54:d2:f7:90:cd:6a:fb:6a:78:09:fa:
                    68:f5:b1:26:0e:23:82:39:ba:87:18:c1:60:7c:e3:
                    ee:27:91:e8:83:86:51:8e:61:29:b3:46:af:a7:9a:
                    c7:c8:95:2f:a7:3d:19:a0:61:35:72:74:e1:5f:83:
                    7d:34:69:27:77:df:bf:78:d9:ac:f8:0c:bd:66:fa:
                    a7:7b:8c:27:c2:b0:b8:a5:d7:55:77:29:e3:5c:2c:
                    e0:86:4d:b6:c3:05:94:0f:a9:45:46:9d:94:04:38:
                    f3:86:ef:7d:76:d1:f5:6e:77:35:f4:f0:35:75:c8:
                    7e:2f:2a:e5:72:c8:67:fe:fb:b2:42:06:b7:41:bc:
                    57:df:13:cd:fa:72:fa:f1:58:51:da:ee:af:75:c1:
                    27:dc:39:dc:67:2b:93:b5:16:34:45:38:7f:db:2d:
                    f7:20:03:e5:8b:28:4d:81:c1:b1:62:05:53:cc:8f:
                    02:ce:b9:d1:59:39:14:9a:ba:0c:e8:87:cb:bb:e9:
                    8f:73:72:04:16:55:83:c9:dd:b2:f3:84:3f:b1:f2:
                    32:73:36:9e:ce:58:49:67:8f:4e:16:9e:80:3a:47:
                    8a:53:0c:4b:f5:ec:e6:7d:d1:99:a9:a4:66:2a:dc:
                    ef:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D1:B6:EE:B3:A2:E9:E4:E9:37:28:99:BE:07:58:AE:90:42:D9:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/2bfecb58-6485-3c6b-b425-9db4b0acc6cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654/e0647553-32ca-48b6-be58-d6c7f475e654.crl

            X509v3 Authority Key Identifier:
                keyid:3D:EA:87:2B:EB:A8:27:88:90:FC:5A:63:64:0F:CA:8F:10:C0:FE:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0647553-32ca-48b6-be58-d6c7f475e654.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.188.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:27:49:51:f2:e4:68:4f:4e:94:03:a3:db:1e:1f:d2:01:f8:
         96:1e:63:1a:ec:88:e2:13:1f:e1:71:7f:a8:94:f3:5b:42:79:
         c6:29:f7:32:3f:d8:3b:a0:79:58:c8:f6:34:0e:99:a2:27:8c:
         d4:4f:33:b2:01:4e:06:a5:48:19:bc:92:8b:09:4b:09:60:e3:
         e2:45:10:c1:34:e8:5f:a1:0e:ff:13:41:88:bf:9f:6d:bc:2c:
         a4:36:7a:42:37:7d:4c:04:d8:de:ee:4d:84:f1:6d:d1:5f:0b:
         29:c9:cb:8d:3b:4f:06:11:59:2d:a1:c4:88:60:53:b8:1c:b2:
         92:1e:34:bd:a6:9f:20:e7:dc:5e:b5:64:ca:f8:d7:a3:f7:50:
         fb:b8:bf:33:04:75:9e:fd:78:67:f0:52:09:f4:6d:cb:9e:23:
         38:1e:8a:1a:e2:18:9d:ae:62:74:25:cc:b3:0f:02:00:d5:ca:
         61:4d:ca:d7:dd:db:61:e1:c1:8a:0a:7b:5e:b0:fc:e6:a7:e6:
         16:0f:40:3d:d5:29:79:95:ee:e6:d9:34:f8:96:b8:c2:22:fe:
         50:9d:32:b5:02:7d:28:7f:28:f5:07:86:ab:0b:9a:d9:15:60:
         9f:34:98:4e:6d:6d:83:b8:9a:2c:68:0f:db:c2:a7:aa:90:ca:
         64:0e:dd:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27oFR2Lj+F3yp6zwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTA2NDc1NTMtMzJjYS00OGI2LWJlNTgtZDZjN2Y0NzVl
NjU0MB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk
NTk0OTEwMjktMzU1Yy00ZmRjLTgwZWUtNThmNjY2NGVmNzA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPg8WRbsivdd9rzG344SZzDaVNL3kM1q+2p4
Cfpo9bEmDiOCObqHGMFgfOPuJ5Hog4ZRjmEps0avp5rHyJUvpz0ZoGE1cnThX4N9
NGknd9+/eNms+Ay9Zvqne4wnwrC4pddVdynjXCzghk22wwWUD6lFRp2UBDjzhu99
dtH1bnc19PA1dch+Lyrlcshn/vuyQga3QbxX3xPN+nL68VhR2u6vdcEn3DncZyuT
tRY0RTh/2y33IAPliyhNgcGxYgVTzI8CzrnRWTkUmroM6IfLu+mPc3IEFlWDyd2y
84Q/sfIyczaezlhJZ49OFp6AOkeKUwxL9ezmfdGZqaRmKtzvrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPTRtu6zounk6Tcomb4HWK6QQtkrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMDY0
NzU1My0zMmNhLTQ4YjYtYmU1OC1kNmM3ZjQ3NWU2NTQvMmJmZWNiNTgtNjQ4NS0z
YzZiLWI0MjUtOWRiNGIwYWNjNmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTA2NDc1NTMtMzJjYS00OGI2LWJl
NTgtZDZjN2Y0NzVlNjU0L2UwNjQ3NTUzLTMyY2EtNDhiNi1iZTU4LWQ2YzdmNDc1
ZTY1NC5jcmwwHwYDVR0jBBgwFoAUPeqHK+uoJ4iQ/FpjZA/KjxDA/kcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lMDY0NzU1My0zMmNhLTQ4YjYtYmU1OC1kNmM3
ZjQ3NWU2NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz7z+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEYnSVHy5GhPTpQDo9seH9IB+JYeYxrsiOITH+Fxf6iU81tCecYp9zI/
2DugeVjI9jQOmaInjNRPM7IBTgalSBm8kosJSwlg4+JFEME06F+hDv8TQYi/n228
LKQ2ekI3fUwE2N7uTYTxbdFfCynJy407TwYRWS2hxIhgU7gcspIeNL2mnyDn3F61
ZMr416P3UPu4vzMEdZ79eGfwUgn0bcueIzgeihriGJ2uYnQlzLMPAgDVymFNytfd
22HhwYoKe16w/Oan5hYPQD3VKXmV7ubZNPiWuMIi/lCdMrUCfSh/KPUHhqsLmtkV
YJ80mE5tbYO4mixoD9vCp6qQymQO3cw=
-----END CERTIFICATE-----
Generated at Wed May 13 11:37:26 2026 by rpki-client