Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b03e547a-bd51-32f7-b184-db4dd74ae8e6.roa
File:                     b03e547a-bd51-32f7-b184-db4dd74ae8e6.roa (raw, json)
Hash identifier:          osHJaFem1iH8arxkewmAsRzkqOS7a9Yiu/YXnKQf5eg=
Subject key identifier:   EA:96:9A:36:5C:E4:0D:3D:92:1D:0B:B4:27:FB:80:84:BE:B8:C5:52
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584D703FEC8B622BF2A49CBFDB90
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b03e547a-bd51-32f7-b184-db4dd74ae8e6.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     54113
IP address blocks:        131.125.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:ec:8b:62:2b:f2:a4:9c:bf:db:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=f41d4258-fd84-4cce-a310-ca56971b0156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:23:2e:5c:0d:a6:e1:8e:2e:9d:6d:7b:33:b1:
                    6c:bf:07:03:bc:96:5f:0d:2b:a5:86:cf:af:40:30:
                    22:3f:b4:c4:c9:4d:e4:e4:10:bc:27:ed:ad:18:37:
                    76:c0:62:fa:3b:12:ca:ea:7c:2b:e0:e1:80:e3:95:
                    fd:41:96:23:a3:b9:70:eb:ab:4d:7a:eb:c4:fc:53:
                    a6:7b:ea:40:c6:8f:e9:73:34:a1:23:d3:ca:ac:33:
                    ff:c0:9c:38:c0:e5:d1:70:a4:76:38:f7:95:20:15:
                    81:cb:d1:01:d8:39:9e:88:c3:30:92:bd:c7:98:60:
                    cf:bb:5c:fe:0f:58:18:c7:33:8e:37:a8:68:5b:56:
                    fd:6e:f2:c4:4f:cf:3b:44:c7:23:59:f3:30:ee:da:
                    2c:41:30:ea:57:23:a9:e4:74:6b:4b:61:29:40:34:
                    96:bc:bc:4e:90:c2:1f:9d:e3:2a:19:be:d5:08:64:
                    e3:a5:3f:13:dd:0c:3a:6c:ae:93:3f:24:fb:dc:fa:
                    09:16:4e:e8:17:f9:9c:cd:a5:07:74:dd:29:03:22:
                    81:dc:79:4f:c5:8c:3d:00:86:9a:74:22:3c:75:8e:
                    39:3f:72:9c:70:ba:5c:0a:65:4f:5f:4b:f6:8f:90:
                    53:49:eb:a6:f9:ee:12:3c:55:d9:6a:bb:a7:a3:26:
                    cb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:96:9A:36:5C:E4:0D:3D:92:1D:0B:B4:27:FB:80:84:BE:B8:C5:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b03e547a-bd51-32f7-b184-db4dd74ae8e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:7f:91:2c:e8:50:0b:92:ed:52:cb:a7:2e:d8:e0:52:a3:c0:
         68:63:0e:46:3c:b1:57:ce:07:49:63:cc:d0:3d:0e:a0:63:59:
         3f:8a:d9:ba:96:e7:fc:e7:c6:cc:91:b6:83:14:c0:16:33:a4:
         c3:1e:bf:27:e0:fa:82:99:70:c4:18:4a:e7:d6:3e:9e:f3:eb:
         b5:d0:1b:f1:d3:b2:69:6b:91:eb:65:8d:98:3a:7e:25:6e:d8:
         28:9c:34:12:29:81:5d:8c:e0:61:0a:7d:e2:5f:4b:fa:e4:4d:
         9b:70:36:9e:5a:ce:7e:f3:17:ef:89:83:c8:75:37:32:30:d1:
         94:ae:c5:3d:27:14:b1:5a:73:84:51:84:50:4a:07:81:0f:bd:
         b5:b9:dd:27:ac:80:28:94:45:c3:76:61:64:6a:4c:83:26:11:
         89:ef:08:70:b8:02:3a:08:4c:ff:73:3b:8c:75:c2:69:f5:23:
         c2:ec:ca:b0:f4:79:fa:f1:45:6f:4b:06:4a:11:d6:6a:a5:e9:
         1c:64:5d:b0:5e:a9:9d:e7:42:4a:f4:67:d6:25:8f:b0:36:ce:
         ce:5c:82:1a:19:8e:99:51:35:a1:88:a8:f6:1f:72:6a:c9:58:
         7c:1d:89:d6:f3:8b:d9:84:b0:5c:f6:b6:4d:34:94:ca:95:da:
         e7:71:1d:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP+yLYivypJy/25AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk
ZjQxZDQyNTgtZmQ4NC00Y2NlLWEzMTAtY2E1Njk3MWIwMTU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiMuXA2m4Y4unW17M7FsvwcDvJZfDSulhs+v
QDAiP7TEyU3k5BC8J+2tGDd2wGL6OxLK6nwr4OGA45X9QZYjo7lw66tNeuvE/FOm
e+pAxo/pczShI9PKrDP/wJw4wOXRcKR2OPeVIBWBy9EB2DmeiMMwkr3HmGDPu1z+
D1gYxzOON6hoW1b9bvLET887RMcjWfMw7tosQTDqVyOp5HRrS2EpQDSWvLxOkMIf
neMqGb7VCGTjpT8T3Qw6bK6TPyT73PoJFk7oF/mczaUHdN0pAyKB3HlPxYw9AIaa
dCI8dY45P3KccLpcCmVPX0v2j5BTSeum+e4SPFXZarunoybL7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOqWmjZc5A09kh0LtCf7gIS+uMVSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYjAzZTU0N2EtYmQ1MS0z
MmY3LWIxODQtZGI0ZGQ3NGFlOGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg31kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAh/kSzoUAuS7VLLpy7Y4FKjwGhjDkY8sVfOB0ljzNA9DqBjWT+K2bqW
5/znxsyRtoMUwBYzpMMevyfg+oKZcMQYSufWPp7z67XQG/HTsmlrketljZg6fiVu
2CicNBIpgV2M4GEKfeJfS/rkTZtwNp5azn7zF++Jg8h1NzIw0ZSuxT0nFLFac4RR
hFBKB4EPvbW53SesgCiURcN2YWRqTIMmEYnvCHC4AjoITP9zO4x1wmn1I8LsyrD0
efrxRW9LBkoR1mql6RxkXbBeqZ3nQkr0Z9Ylj7A2zs5cghoZjplRNaGIqPYfcmrJ
WHwdidbzi9mEsFz2tk00lMqV2udxHa0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:03:27 2026 by rpki-client