Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/c9ca2cca-170f-3bbc-8d5b-16743399b15a.roa
File:                     c9ca2cca-170f-3bbc-8d5b-16743399b15a.roa (raw, json)
Hash identifier:          c4KOJtwqBt+8PgiZZOmc0rK9DZj3Z4DnZq9NJopLY3Y=
Subject key identifier:   8F:DF:E8:8C:9C:04:C1:7D:85:37:7D:CC:66:CF:81:BB:DE:29:B8:18
Certificate issuer:       /CN=e8264592-bcc3-48f1-a782-8ba48fc506fa
Certificate serial:       010D0C9F4328584DD09057D51146E871CBE88680
Authority key identifier: 88:77:4C:4E:9F:3F:F4:C2:E0:44:36:A9:F1:0A:B6:D4:84:9D:A7:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/c9ca2cca-170f-3bbc-8d5b-16743399b15a.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     397952
IP address blocks:        199.116.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:57:d5:11:46:e8:71:cb:e8:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8264592-bcc3-48f1-a782-8ba48fc506fa
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=af6f531b-5727-4361-b82b-13267c905fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7a:f0:30:0c:f7:45:e7:d7:c7:33:ba:35:dd:
                    d0:85:cf:d5:67:96:26:01:e5:4b:35:28:e3:49:26:
                    d1:e1:f9:24:41:25:34:60:80:79:86:72:26:4d:98:
                    23:ad:80:93:a3:70:ed:33:31:80:67:52:97:ab:9b:
                    c1:66:15:e0:77:49:46:2b:0b:52:00:91:e9:e2:e5:
                    74:e5:79:24:11:83:aa:03:be:35:4c:4b:20:79:44:
                    c3:75:13:b5:61:a8:d3:2f:ba:8c:77:96:da:ec:8d:
                    be:56:d8:95:1c:7b:76:db:b2:a2:c0:06:18:48:b7:
                    32:d3:16:f7:6f:47:49:7e:4d:9c:27:f1:e4:a6:8d:
                    e3:a7:9c:fb:ff:30:3e:e4:21:e6:c8:a3:55:82:d3:
                    36:34:da:61:74:90:c3:b3:d8:64:ec:b5:25:2d:2e:
                    7a:39:80:f4:d5:3d:ea:29:5e:7f:0a:5c:05:3d:bd:
                    68:0d:5a:a9:91:9d:8e:9c:10:84:96:57:40:17:ec:
                    7f:ed:94:85:c1:b8:78:16:b4:3f:76:05:a4:e3:0d:
                    0e:39:71:e5:9b:bf:e8:92:5e:1f:09:57:89:70:1f:
                    b5:4f:50:a0:60:dc:a9:5c:c3:4f:de:4d:d9:c5:95:
                    d2:c8:25:d4:b4:b6:b6:0c:0d:b3:69:d8:38:48:ce:
                    38:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DF:E8:8C:9C:04:C1:7D:85:37:7D:CC:66:CF:81:BB:DE:29:B8:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/c9ca2cca-170f-3bbc-8d5b-16743399b15a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa/e8264592-bcc3-48f1-a782-8ba48fc506fa.crl

            X509v3 Authority Key Identifier:
                keyid:88:77:4C:4E:9F:3F:F4:C2:E0:44:36:A9:F1:0A:B6:D4:84:9D:A7:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e8264592-bcc3-48f1-a782-8ba48fc506fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.116.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:25:31:e3:90:ff:25:cd:04:1d:75:e2:7d:90:2b:81:ca:67:
         f6:6c:93:66:ba:37:16:19:25:41:87:6a:78:e2:eb:37:d3:76:
         5f:ba:de:1f:e3:42:70:97:51:a6:d0:cc:ac:0c:d2:05:34:65:
         6f:46:0f:43:77:db:84:19:8d:10:36:65:81:fd:96:b2:19:67:
         93:74:c9:56:55:d3:50:56:12:da:1c:33:58:10:1c:49:05:c3:
         bf:19:fd:1e:05:45:03:cf:f7:96:7d:3e:e6:15:81:15:4e:22:
         4a:bd:13:cf:97:c9:3f:26:db:fb:ef:25:4b:28:88:55:16:34:
         88:e9:c4:17:df:41:b7:74:19:85:0a:77:3c:f7:3d:68:a7:90:
         26:eb:25:2b:72:81:2f:58:ee:b0:9c:c6:dc:58:ab:f3:95:cf:
         48:9e:c1:3d:41:1d:c7:8a:f7:b0:d7:da:38:1d:cb:fc:71:1d:
         61:2a:d2:69:ba:29:9e:68:90:4e:75:1a:09:c6:ce:54:c5:ca:
         87:9c:04:bf:01:6c:4d:f4:91:40:05:fe:bd:8b:00:cd:68:8c:
         0d:60:9d:5d:9f:d2:ef:de:a0:53:5a:ed:88:67:5a:d7:9b:16:
         e8:f3:d4:0b:f3:71:09:32:7d:8d:5b:e2:ad:1d:47:fc:f4:bd:
         10:e3:90:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3QkFfVEUboccvohoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTgyNjQ1OTItYmNjMy00OGYxLWE3ODItOGJhNDhmYzUw
NmZhMB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk
YWY2ZjUzMWItNTcyNy00MzYxLWI4MmItMTMyNjdjOTA1ZmEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3rwMAz3RefXxzO6Nd3Qhc/VZ5YmAeVLNSjj
SSbR4fkkQSU0YIB5hnImTZgjrYCTo3DtMzGAZ1KXq5vBZhXgd0lGKwtSAJHp4uV0
5XkkEYOqA741TEsgeUTDdRO1YajTL7qMd5ba7I2+VtiVHHt227KiwAYYSLcy0xb3
b0dJfk2cJ/Hkpo3jp5z7/zA+5CHmyKNVgtM2NNphdJDDs9hk7LUlLS56OYD01T3q
KV5/ClwFPb1oDVqpkZ2OnBCElldAF+x/7ZSFwbh4FrQ/dgWk4w0OOXHlm7/okl4f
CVeJcB+1T1CgYNypXMNP3k3ZxZXSyCXUtLa2DA2zadg4SM44GQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI/f6IycBMF9hTd9zGbPgbveKbgYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lODI2
NDU5Mi1iY2MzLTQ4ZjEtYTc4Mi04YmE0OGZjNTA2ZmEvYzljYTJjY2EtMTcwZi0z
YmJjLThkNWItMTY3NDMzOTliMTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTgyNjQ1OTItYmNjMy00OGYxLWE3
ODItOGJhNDhmYzUwNmZhL2U4MjY0NTkyLWJjYzMtNDhmMS1hNzgyLThiYTQ4ZmM1
MDZmYS5jcmwwHwYDVR0jBBgwFoAUiHdMTp8/9MLgRDap8Qq21ISdpwowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lODI2NDU5Mi1iY2MzLTQ4ZjEtYTc4Mi04YmE0
OGZjNTA2ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx3Q0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHklMeOQ/yXNBB114n2QK4HKZ/Zsk2a6NxYZJUGHanji6zfTdl+63h/j
QnCXUabQzKwM0gU0ZW9GD0N324QZjRA2ZYH9lrIZZ5N0yVZV01BWEtocM1gQHEkF
w78Z/R4FRQPP95Z9PuYVgRVOIkq9E8+XyT8m2/vvJUsoiFUWNIjpxBffQbd0GYUK
dzz3PWinkCbrJStygS9Y7rCcxtxYq/OVz0iewT1BHceK97DX2jgdy/xxHWEq0mm6
KZ5okE51GgnGzlTFyoecBL8BbE30kUAF/r2LAM1ojA1gnV2f0u/eoFNa7YhnWteb
Fujz1AvzcQkyfY1b4q0dR/z0vRDjkLA=
-----END CERTIFICATE-----
Generated at Wed May 13 13:07:25 2026 by rpki-client