Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/68dae09f-47df-3c08-b3d6-68592a6158bf.roa
File:                     68dae09f-47df-3c08-b3d6-68592a6158bf.roa (raw, json)
Hash identifier:          0XFEUswR3SyQFLZsNTUh3A2essz+o1HlDnHil4OI5dQ=
Subject key identifier:   34:4C:B2:46:F0:1F:0A:AF:FA:BF:2B:10:1B:37:BA:76:03:53:66:B2
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584D6AAA79BFE6E9DBEAA04D6940
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/68dae09f-47df-3c08-b3d6-68592a6158bf.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     14340
IP address blocks:        13.110.0.0/16 maxlen: 24
                          96.43.144.0/20 maxlen: 24
                          96.43.152.0/23 maxlen: 24
                          136.146.0.0/16 maxlen: 24
                          136.147.0.0/17 maxlen: 24
                          136.147.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:79:bf:e6:e9:db:ea:a0:4d:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=80ed5d39-cbd1-4d57-ace1-2caf8dc4f6f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:74:43:ab:24:66:8a:17:30:b6:e3:ba:3a:ca:
                    c2:35:72:f2:89:0d:8e:27:2d:1a:30:6f:3c:2d:33:
                    cd:83:3c:f8:d7:25:3f:69:c5:1d:6d:1b:5e:18:d2:
                    d6:af:17:8d:2e:5e:b9:5d:18:7b:ec:55:06:41:3c:
                    08:c0:bc:a9:13:b3:fd:fe:9d:2b:86:bd:53:1b:09:
                    17:90:ad:03:73:56:47:bf:08:20:bb:73:5f:86:06:
                    13:37:48:dd:13:22:0a:56:35:b7:54:1a:ac:15:75:
                    a8:91:48:48:af:e5:51:9d:4d:1a:72:d3:09:70:b6:
                    58:c5:5b:79:d8:b1:53:8a:6b:74:e0:df:bd:e0:2a:
                    5c:78:1f:1e:a6:f8:a8:b8:5b:05:df:88:e6:dc:cd:
                    eb:f2:81:d2:6b:fa:89:c7:8b:40:e0:e0:46:1b:53:
                    b5:ff:7d:65:43:cd:f8:1e:b1:2e:e1:2f:45:ee:f5:
                    14:94:a3:88:7f:93:b6:5b:2c:6a:c4:fc:88:d4:8b:
                    3f:f3:20:73:d6:26:0b:27:b4:fc:65:98:fc:3a:83:
                    9a:99:15:2f:93:12:da:52:08:43:af:d5:20:b1:5f:
                    7c:2d:36:c8:9b:c3:92:f5:96:e8:da:81:78:b1:33:
                    f1:bd:24:85:e7:9a:89:83:38:f9:65:d3:96:24:c9:
                    6e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4C:B2:46:F0:1F:0A:AF:FA:BF:2B:10:1B:37:BA:76:03:53:66:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/68dae09f-47df-3c08-b3d6-68592a6158bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.110.0.0/16
                  96.43.144.0/20
                  136.146.0.0-136.147.127.255
                  136.147.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:28:99:e0:23:20:5d:62:7a:d4:03:01:ab:5f:b4:d9:c6:4b:
         3a:d3:82:86:04:dd:ec:04:32:a9:8e:6a:36:76:eb:2a:88:76:
         c0:85:50:ff:0c:aa:9d:1c:c6:a0:1a:ea:15:0f:ee:3f:8b:0d:
         0b:34:85:49:bf:66:7b:ae:43:fe:b8:20:cf:62:5c:05:c9:58:
         63:11:86:ab:92:49:57:a9:9e:1b:8e:77:34:3f:71:d9:e7:65:
         a9:df:dd:f9:02:24:c5:41:16:41:cf:39:cc:60:f4:0e:bb:da:
         53:92:37:cf:ad:35:80:97:de:9b:63:d0:f9:9f:b6:c7:54:ba:
         c8:7a:a3:83:7b:9e:18:97:15:99:42:07:38:2e:92:e6:0e:82:
         ab:8e:70:40:31:af:f4:cb:80:4a:1a:1f:21:50:03:a0:cd:95:
         e5:65:f4:2f:ba:6f:ef:c0:33:47:13:83:12:90:2a:d1:92:58:
         25:7a:14:ff:8e:e1:cd:e8:b9:e9:30:88:ec:42:0c:26:7e:3e:
         59:d6:df:4a:59:41:57:b9:4f:03:4a:ed:e5:d5:80:26:a4:a2:
         c9:0f:7b:8a:27:88:f6:38:20:17:98:cc:29:12:a9:36:da:64:
         11:3b:a6:8b:65:34:97:6b:ac:4c:a4:a6:39:20:c2:84:0d:0a:
         d0:06:84:d2
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWE1qqnm/5unb6qBNaUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl
NTRmMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk
ODBlZDVkMzktY2JkMS00ZDU3LWFjZTEtMmNhZjhkYzRmNmY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXRDqyRmihcwtuO6OsrCNXLyiQ2OJy0aMG88
LTPNgzz41yU/acUdbRteGNLWrxeNLl65XRh77FUGQTwIwLypE7P9/p0rhr1TGwkX
kK0Dc1ZHvwggu3NfhgYTN0jdEyIKVjW3VBqsFXWokUhIr+VRnU0actMJcLZYxVt5
2LFTimt04N+94CpceB8epviouFsF34jm3M3r8oHSa/qJx4tA4OBGG1O1/31lQ834
HrEu4S9F7vUUlKOIf5O2WyxqxPyI1Is/8yBz1iYLJ7T8ZZj8OoOamRUvkxLaUghD
r9UgsV98LTbIm8OS9Zbo2oF4sTPxvSSF55qJgzj5ZdOWJMlugwIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFDRMskbwHwqv+r8rEBs3unYDU2ayMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj
MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvNjhkYWUwOWYtNDdkZi0z
YzA4LWIzZDYtNjg1OTJhNjE1OGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1
NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm
ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz
MWMyZmU1NGYuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwMADW4DBARg
K5AwCwMDAYiSAwQHiJMAAwQEiJPQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBANkomeAjIF1ietQDAatftNnG
SzrTgoYE3ewEMqmOajZ26yqIdsCFUP8Mqp0cxqAa6hUP7j+LDQs0hUm/ZnuuQ/64
IM9iXAXJWGMRhquSSVepnhuOdzQ/cdnnZanf3fkCJMVBFkHPOcxg9A672lOSN8+t
NYCX3ptj0PmftsdUush6o4N7nhiXFZlCBzgukuYOgquOcEAxr/TLgEoaHyFQA6DN
leVl9C+6b+/AM0cTgxKQKtGSWCV6FP+O4c3ouekwiOxCDCZ+PlnW30pZQVe5TwNK
7eXVgCakoskPe4oniPY4IBeYzCkSqTbaZBE7potlNJdrrEykpjkgwoQNCtAGhNI=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:46:48 2026 by rpki-client