Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/df8863a9-c9c2-395a-99c9-7f033d9b17cb.roa
File:                     df8863a9-c9c2-395a-99c9-7f033d9b17cb.roa (raw, json)
Hash identifier:          Nzl+5G8VceifKv2svDZPiXpj3+l4TMawT6M5NHnTPPs=
Subject key identifier:   37:4C:63:06:6F:91:64:D9:11:91:06:4A:AF:35:83:05:3E:72:F0:CD
Certificate issuer:       /CN=37d983de-280d-4374-a056-b21eb13451dd
Certificate serial:       010D0C9F4328584D83CA9D9542B76BBF873E0A00
Authority key identifier: A5:EE:A9:C5:BB:76:2C:20:7E:C3:A2:EF:36:C8:B9:26:D2:B5:07:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/df8863a9-c9c2-395a-99c9-7f033d9b17cb.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     33604
IP address blocks:        204.13.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/37d983de-280d-4374-a056-b21eb13451dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/37d983de-280d-4374-a056-b21eb13451dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:9d:95:42:b7:6b:bf:87:3e:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d983de-280d-4374-a056-b21eb13451dd
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=f862d89f-40d0-41dd-ba27-3359d7517236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2e:e6:4e:1a:08:55:b3:43:7e:99:92:37:a6:
                    5f:c2:7b:a0:af:26:fc:83:07:cb:06:2b:b6:a2:b4:
                    fa:b4:8e:80:26:e6:64:de:6d:1d:8c:d5:a8:94:cf:
                    ad:02:e4:fd:8f:15:12:28:5c:c2:8f:94:00:51:17:
                    6c:83:ed:fe:7d:1e:58:82:4e:43:25:d6:88:59:bc:
                    b4:ce:6d:20:b2:97:b0:f2:5f:79:89:f9:e0:2d:d7:
                    7f:0d:41:01:ea:a6:a1:06:c5:0f:4a:92:54:8a:8a:
                    ec:72:b1:74:7d:f6:34:45:5a:58:5d:81:b4:90:eb:
                    cb:d8:63:cc:24:b3:a0:4b:78:fc:3c:2d:ae:b6:50:
                    2f:aa:5e:aa:85:7c:a7:26:84:1a:01:0d:66:a2:6d:
                    f2:3a:6c:52:14:2d:df:2f:18:84:93:e2:bf:ab:78:
                    36:4c:7b:4f:fa:ca:67:a4:2f:a7:1c:03:a7:1f:e9:
                    e9:53:0c:eb:c9:5a:41:56:50:80:23:11:6a:37:ca:
                    3a:c3:3d:8f:42:3d:d2:d1:c0:cd:a4:99:ac:06:93:
                    9c:91:69:b8:5d:d3:ce:40:29:7d:28:75:32:1d:06:
                    2e:38:a9:5a:aa:10:02:8c:1d:8f:fa:ff:4b:f8:27:
                    cd:ea:bb:ab:09:b4:1f:40:41:84:e6:39:58:cb:10:
                    b5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4C:63:06:6F:91:64:D9:11:91:06:4A:AF:35:83:05:3E:72:F0:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/df8863a9-c9c2-395a-99c9-7f033d9b17cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/37d983de-280d-4374-a056-b21eb13451dd.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EE:A9:C5:BB:76:2C:20:7E:C3:A2:EF:36:C8:B9:26:D2:B5:07:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.13.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:d8:54:c6:e6:b8:5e:b2:f4:0a:43:ae:63:2b:2e:5f:87:18:
         ca:74:c5:25:32:0e:cc:3c:96:e4:71:48:9a:e7:32:f2:bd:02:
         93:47:a5:85:75:4c:24:9b:74:ed:7a:93:fa:b9:2b:39:b6:77:
         6a:ed:5c:26:60:38:3f:b8:cf:ff:71:cf:46:cc:cf:73:95:83:
         39:3c:d7:c9:dd:ef:dc:13:c6:fb:1d:48:2d:cb:c8:f5:d5:3c:
         e5:8a:61:0b:00:45:24:e9:e3:01:a0:29:cc:42:03:fd:86:9d:
         ed:a8:8c:98:7c:62:14:17:e5:f6:cd:44:75:aa:bb:48:c7:76:
         2e:a6:22:9e:5b:1f:ca:3a:14:fe:ea:a1:80:57:cf:7b:53:9b:
         45:52:f5:6d:22:46:3c:23:46:6d:99:d5:cd:e6:e2:5a:3a:38:
         e1:8d:1f:42:c1:6d:22:31:31:5d:70:47:9d:63:00:3b:75:dd:
         54:a3:36:ef:a5:b2:1d:e1:4f:47:8c:b6:aa:56:a1:8f:a4:8b:
         30:c7:dc:5f:7c:0f:b1:dd:59:47:4f:48:b7:1d:96:d1:7a:73:
         ad:74:f9:d2:b8:53:09:19:72:ec:f1:72:54:41:43:cb:5c:b5:
         4d:5e:51:48:f4:25:74:8d:4d:a3:69:e6:da:6b:d5:1b:c4:98:
         f6:c9:2c:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Dyp2VQrdrv4c+CgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzdkOTgzZGUtMjgwZC00Mzc0LWEwNTYtYjIxZWIxMzQ1
MWRkMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
Zjg2MmQ4OWYtNDBkMC00MWRkLWJhMjctMzM1OWQ3NTE3MjM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C7mThoIVbNDfpmSN6Zfwnugryb8gwfLBiu2
orT6tI6AJuZk3m0djNWolM+tAuT9jxUSKFzCj5QAURdsg+3+fR5Ygk5DJdaIWby0
zm0gspew8l95ifngLdd/DUEB6qahBsUPSpJUiorscrF0ffY0RVpYXYG0kOvL2GPM
JLOgS3j8PC2utlAvql6qhXynJoQaAQ1mom3yOmxSFC3fLxiEk+K/q3g2THtP+spn
pC+nHAOnH+npUwzryVpBVlCAIxFqN8o6wz2PQj3S0cDNpJmsBpOckWm4XdPOQCl9
KHUyHQYuOKlaqhACjB2P+v9L+CfN6rurCbQfQEGE5jlYyxC1qwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDdMYwZvkWTZEZEGSq81gwU+cvDNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zN2Q5
ODNkZS0yODBkLTQzNzQtYTA1Ni1iMjFlYjEzNDUxZGQvZGY4ODYzYTktYzljMi0z
OTVhLTk5YzktN2YwMzNkOWIxN2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzdkOTgzZGUtMjgwZC00Mzc0LWEw
NTYtYjIxZWIxMzQ1MWRkLzM3ZDk4M2RlLTI4MGQtNDM3NC1hMDU2LWIyMWViMTM0
NTFkZC5jcmwwHwYDVR0jBBgwFoAUpe6pxbt2LCB+w6LvNsi5JtK1B7MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zN2Q5ODNkZS0yODBkLTQzNzQtYTA1Ni1iMjFl
YjEzNDUxZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzA0oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACDYVMbmuF6y9ApDrmMrLl+HGMp0xSUyDsw8luRxSJrnMvK9ApNHpYV1
TCSbdO16k/q5Kzm2d2rtXCZgOD+4z/9xz0bMz3OVgzk818nd79wTxvsdSC3LyPXV
POWKYQsARSTp4wGgKcxCA/2Gne2ojJh8YhQX5fbNRHWqu0jHdi6mIp5bH8o6FP7q
oYBXz3tTm0VS9W0iRjwjRm2Z1c3m4lo6OOGNH0LBbSIxMV1wR51jADt13VSjNu+l
sh3hT0eMtqpWoY+kizDH3F98D7HdWUdPSLcdltF6c610+dK4UwkZcuzxclRBQ8tc
tU1eUUj0JXSNTaNp5tpr1RvEmPbJLAc=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:00:16 2026 by rpki-client