Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fc56ee27-8e3a-3abb-a32a-12f9ca280d9a.roa
File:                     fc56ee27-8e3a-3abb-a32a-12f9ca280d9a.roa (raw, json)
Hash identifier:          p3JzQg+Y6HC3FzHYbCMZXMPigK5XX72Mfjbllc8VBng=
Subject key identifier:   42:70:01:2E:B0:0F:D0:E9:12:D4:47:CD:16:BD:F6:FF:04:A2:56:3F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584DA81592E99B055576277FA480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fc56ee27-8e3a-3abb-a32a-12f9ca280d9a.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     0
IP address blocks:        208.193.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:92:e9:9b:05:55:76:27:7f:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=32e2e47f-acaf-458b-9ba1-0c3bf63b6e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c5:b1:b1:d3:e4:94:26:77:b2:58:01:b2:39:
                    22:e3:73:12:cd:b5:70:1d:85:b1:8d:6d:29:0d:1e:
                    b2:11:42:3a:98:45:ea:52:71:40:4a:84:9f:a8:08:
                    d5:41:9e:00:3e:93:37:5c:41:ec:95:b0:59:57:5d:
                    28:fe:25:87:06:dd:9a:37:da:d8:a6:cc:b2:f0:55:
                    1c:0a:4e:17:2f:64:1c:94:c2:c8:2b:d7:ce:44:3f:
                    6d:f2:5c:bb:77:b5:8d:4d:19:50:b2:72:6d:3c:31:
                    d4:60:f8:2f:2b:b4:12:a6:ed:33:6e:45:02:97:c9:
                    44:2a:73:51:f8:c5:9b:f2:05:46:f2:72:ec:f2:ab:
                    52:97:1e:66:d9:71:78:42:d2:b0:80:d9:c9:8f:3b:
                    d1:dc:fa:33:ab:32:96:ce:ad:fe:60:c2:6f:ea:05:
                    0c:5d:2f:ce:29:2a:44:b6:b1:23:86:4e:e8:e7:be:
                    cd:6d:30:45:01:70:58:9d:19:c6:4f:f9:73:be:75:
                    74:02:98:25:95:50:f3:eb:61:e5:d6:cb:34:bf:23:
                    15:13:b4:eb:ae:ba:7c:73:52:ef:5e:bb:af:ee:05:
                    b1:25:20:17:08:91:3f:36:2f:9a:fd:85:ec:cc:c9:
                    bc:45:2b:f3:29:c4:18:ef:ad:05:e1:cc:ab:bf:84:
                    23:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:70:01:2E:B0:0F:D0:E9:12:D4:47:CD:16:BD:F6:FF:04:A2:56:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fc56ee27-8e3a-3abb-a32a-12f9ca280d9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.193.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:73:3e:47:02:02:ea:c0:32:0b:b9:3c:c2:bc:92:3a:0a:0e:
         18:99:8f:60:03:24:5e:a9:f7:14:fa:21:a5:5c:54:37:1b:4f:
         6d:6c:e0:f7:cb:0d:ef:2d:f7:6d:d1:7f:c2:54:6f:66:0f:64:
         0c:98:d1:b5:96:91:51:71:8b:7d:ca:ac:50:d3:40:00:19:b8:
         05:96:9d:85:c0:5d:97:ee:ef:64:ca:2f:dd:fd:7c:b7:e8:4e:
         88:5d:cf:4d:25:a6:c9:1b:a3:33:74:5e:71:7b:5d:5f:1f:f0:
         71:bc:41:45:5f:e1:ce:0a:87:02:c9:9c:c0:ce:22:1e:0f:69:
         bc:65:9c:df:71:60:06:aa:b0:80:4b:0f:1b:82:41:3c:62:bd:
         0b:76:e8:27:a4:ed:f7:f8:d1:98:58:3e:5e:74:d3:b5:d9:fd:
         71:23:ba:7c:26:9e:42:77:f8:56:01:8c:df:ad:b0:20:89:e5:
         5f:9f:30:42:bf:b8:62:58:1f:d4:3c:33:64:39:3f:f1:c2:a2:
         e2:19:3e:fa:fb:1e:ce:ae:c9:11:a1:e5:f5:8c:e0:0f:a0:50:
         34:0c:39:d2:6d:2f:f0:80:13:cc:fd:d3:3b:27:8f:97:88:8f:
         58:07:bb:63:7b:33:2b:b0:25:05:ab:f3:50:af:8e:c9:7d:e6:
         62:6c:eb:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFZLpmwVVdid/pIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk
MzJlMmU0N2YtYWNhZi00NThiLTliYTEtMGMzYmY2M2I2ZTRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsWxsdPklCZ3slgBsjki43MSzbVwHYWxjW0p
DR6yEUI6mEXqUnFASoSfqAjVQZ4APpM3XEHslbBZV10o/iWHBt2aN9rYpsyy8FUc
Ck4XL2QclMLIK9fORD9t8ly7d7WNTRlQsnJtPDHUYPgvK7QSpu0zbkUCl8lEKnNR
+MWb8gVG8nLs8qtSlx5m2XF4QtKwgNnJjzvR3PozqzKWzq3+YMJv6gUMXS/OKSpE
trEjhk7o577NbTBFAXBYnRnGT/lzvnV0ApgllVDz62Hl1ss0vyMVE7Trrrp8c1Lv
Xruv7gWxJSAXCJE/Ni+a/YXszMm8RSvzKcQY760F4cyrv4QjewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEJwAS6wD9DpEtRHzRa99v8EolY/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmM1NmVlMjctOGUzYS0z
YWJiLWEzMmEtMTJmOWNhMjgwZDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0MF4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGVzPkcCAurAMgu5PMK8kjoKDhiZj2ADJF6p9xT6IaVcVDcbT21s4PfL
De8t923Rf8JUb2YPZAyY0bWWkVFxi33KrFDTQAAZuAWWnYXAXZfu72TKL939fLfo
Tohdz00lpskbozN0XnF7XV8f8HG8QUVf4c4KhwLJnMDOIh4PabxlnN9xYAaqsIBL
DxuCQTxivQt26Cek7ff40ZhYPl5007XZ/XEjunwmnkJ3+FYBjN+tsCCJ5V+fMEK/
uGJYH9Q8M2Q5P/HCouIZPvr7Hs6uyRGh5fWM4A+gUDQMOdJtL/CAE8z90zsnj5eI
j1gHu2N7MyuwJQWr81Cvjsl95mJs6yc=
-----END CERTIFICATE-----
Generated at Wed May 13 08:41:00 2026 by rpki-client