Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/757c7316-eb27-3d3c-aa04-7dc01e4efd12.roa
File:                     757c7316-eb27-3d3c-aa04-7dc01e4efd12.roa (raw, json)
Hash identifier:          uUG1K6TWC+IBTn/1AiGQ4leh4f/NmMXfVF4y1ziwd84=
Subject key identifier:   3F:16:0C:92:00:B8:89:8C:7F:9A:D9:55:F7:BC:62:25:88:BD:B7:AF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D0A779AA11BB0D91358749B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/757c7316-eb27-3d3c-aa04-7dc01e4efd12.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     0
IP address blocks:        208.200.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:9a:a1:1b:b0:d9:13:58:74:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=e7269216-4896-4b94-b0b2-56f91d7816b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fb:dd:23:83:83:a6:a8:08:4d:f3:f0:c7:37:
                    73:2e:86:47:2f:24:d1:11:6d:0c:7a:55:32:02:3c:
                    32:be:12:aa:50:6e:16:71:4a:98:d8:ac:8c:78:47:
                    38:b3:17:5b:9b:2f:e5:49:da:46:0e:f6:3e:ce:c2:
                    5b:6b:70:f0:95:20:bf:9f:69:21:38:8c:cd:fb:ee:
                    07:1a:18:8e:04:97:5c:26:33:d0:64:8c:b9:81:96:
                    d8:98:5b:d9:c1:94:20:40:06:c7:ab:56:99:ea:dc:
                    e4:b8:9a:13:d3:d6:a6:99:b3:f0:f6:98:09:f7:19:
                    6c:df:c8:d6:fb:ef:25:11:3f:8d:bd:8c:c7:51:8b:
                    72:de:1a:94:60:28:19:fd:e2:fc:88:92:0e:5c:83:
                    ff:a6:29:eb:d7:b4:c0:cc:d2:bb:55:31:2d:2b:a9:
                    cb:d5:e7:8f:d6:dd:d8:34:e0:db:b6:d4:d3:8d:67:
                    ee:46:eb:24:e2:26:76:51:3b:2c:0e:da:23:03:da:
                    ee:dc:48:24:51:9a:2e:66:22:08:12:2c:1f:62:d0:
                    3e:03:1c:09:f0:92:8d:3a:02:06:7a:dd:6d:2d:b5:
                    9a:e1:e4:4b:91:19:1c:f4:ad:8f:6d:5e:c3:45:66:
                    76:87:90:2b:20:d4:00:84:3e:28:45:9c:64:14:e5:
                    c4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:16:0C:92:00:B8:89:8C:7F:9A:D9:55:F7:BC:62:25:88:BD:B7:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/757c7316-eb27-3d3c-aa04-7dc01e4efd12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.200.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:58:15:a5:42:bd:3b:c7:66:94:45:4e:63:96:d4:6a:f6:8b:
         96:67:7e:10:79:5c:4f:56:ed:82:97:89:03:22:06:e4:fd:98:
         66:ba:21:db:80:23:76:07:80:94:0f:c5:38:2b:51:df:a0:15:
         2b:e4:ac:0c:b2:ab:38:f8:a5:b6:b0:39:af:3c:89:e1:d3:cf:
         e4:8d:95:7e:3c:2c:2a:b3:1b:23:8a:eb:51:c3:b1:2c:22:0a:
         31:d8:e5:47:cc:da:31:99:2c:9e:71:7f:0f:49:09:d3:6d:44:
         c5:e7:9d:62:fc:bd:24:e7:62:19:13:98:e4:80:0b:4e:d1:da:
         d5:80:91:07:a3:29:a9:15:16:00:28:38:44:e0:9c:41:9c:2c:
         bf:6d:d4:d4:0e:96:2d:d0:f7:56:c4:87:8a:40:14:37:d0:56:
         70:80:24:2c:2e:78:1f:17:67:76:60:d2:ed:09:9e:bc:42:82:
         10:c7:7a:8e:7e:a8:7a:dc:e1:5e:88:8f:3c:4a:c5:ed:d0:da:
         2a:c6:e4:0a:4d:6d:4c:fb:60:a7:90:f0:65:41:d2:40:27:2e:
         83:d8:b8:b3:75:6d:69:0d:59:65:7c:79:ce:90:b6:ed:f6:80:
         2a:15:02:25:7f:d1:46:0a:2a:17:a1:58:c2:36:33:b8:94:79:
         a9:e2:5e:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd5qhG7DZE1h0m4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk
ZTcyNjkyMTYtNDg5Ni00Yjk0LWIwYjItNTZmOTFkNzgxNmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPvdI4ODpqgITfPwxzdzLoZHLyTREW0MelUy
AjwyvhKqUG4WcUqY2KyMeEc4sxdbmy/lSdpGDvY+zsJba3DwlSC/n2khOIzN++4H
GhiOBJdcJjPQZIy5gZbYmFvZwZQgQAbHq1aZ6tzkuJoT09ammbPw9pgJ9xls38jW
++8lET+NvYzHUYty3hqUYCgZ/eL8iJIOXIP/pinr17TAzNK7VTEtK6nL1eeP1t3Y
NODbttTTjWfuRusk4iZ2UTssDtojA9ru3EgkUZouZiIIEiwfYtA+AxwJ8JKNOgIG
et1tLbWa4eRLkRkc9K2PbV7DRWZ2h5ArINQAhD4oRZxkFOXERwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD8WDJIAuImMf5rZVfe8YiWIvbevMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNzU3YzczMTYtZWIyNy0z
ZDNjLWFhMDQtN2RjMDFlNGVmZDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0MgAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABFYFaVCvTvHZpRFTmOW1Gr2i5ZnfhB5XE9W7YKXiQMiBuT9mGa6IduA
I3YHgJQPxTgrUd+gFSvkrAyyqzj4pbawOa88ieHTz+SNlX48LCqzGyOK61HDsSwi
CjHY5UfM2jGZLJ5xfw9JCdNtRMXnnWL8vSTnYhkTmOSAC07R2tWAkQejKakVFgAo
OETgnEGcLL9t1NQOli3Q91bEh4pAFDfQVnCAJCwueB8XZ3Zg0u0JnrxCghDHeo5+
qHrc4V6IjzxKxe3Q2irG5ApNbUz7YKeQ8GVB0kAnLoPYuLN1bWkNWWV8ec6Qtu32
gCoVAiV/0UYKKhehWMI2M7iUeaniXk4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:50:56 2026 by rpki-client