Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/5b1bd7dd-3f00-3a3c-922c-f7ee131e636f.roa
File:                     5b1bd7dd-3f00-3a3c-922c-f7ee131e636f.roa (raw, json)
Hash identifier:          Rf1kpb4+kqrHtRgr0amnWKQ2xN34JNKRr61eok9E0wM=
Subject key identifier:   43:CA:AF:00:7D:4C:57:8C:E3:6F:BE:DF:0E:A3:03:51:7A:1B:E9:C2
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584D0217A8249D2DA5C61092DBE0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/5b1bd7dd-3f00-3a3c-922c-f7ee131e636f.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     13768
IP address blocks:        65.39.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:a8:24:9d:2d:a5:c6:10:92:db:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=9cc17fc1-45f4-4c3e-add1-7983d966a146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ac:ee:ca:62:8d:35:89:9a:33:35:20:e7:36:
                    7f:03:2d:44:cd:59:e2:ed:79:be:68:af:34:0d:f8:
                    b2:ec:47:49:0d:be:b1:d0:56:1e:79:28:1c:4e:6d:
                    7c:f4:a5:1c:78:d5:c7:a4:f1:02:9c:7a:57:71:91:
                    2b:2b:4d:f7:87:be:e2:72:57:6d:4d:f7:f1:f1:87:
                    09:b0:dd:44:6c:19:15:69:64:b5:b4:85:1e:cc:3a:
                    69:58:dc:a0:61:16:03:9e:57:b5:01:d9:5d:fb:1c:
                    49:db:ea:90:f6:f0:76:bd:b2:48:af:0f:ca:1a:97:
                    08:56:71:8c:da:af:61:74:6a:d0:00:bc:b3:a2:22:
                    bc:87:81:9e:20:6a:16:b3:5d:ba:15:f9:12:d8:39:
                    c6:a7:37:1a:d6:44:f7:c8:b0:fd:a5:00:50:87:6c:
                    77:ef:42:ea:d3:8f:45:0f:da:92:ac:d2:43:25:d1:
                    e5:4c:8c:b1:b6:e3:80:a0:fd:2b:dc:ef:5a:51:52:
                    f4:4c:9a:05:ab:be:8d:e9:9d:41:95:3f:b0:a6:67:
                    0f:e2:69:80:38:0e:2e:aa:d5:21:8f:e5:bc:1f:fc:
                    59:b1:07:95:ac:4d:36:70:9c:01:d4:2f:bd:d5:25:
                    97:32:91:e2:f9:90:ef:8b:e8:90:64:b1:c7:d5:d7:
                    73:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:CA:AF:00:7D:4C:57:8C:E3:6F:BE:DF:0E:A3:03:51:7A:1B:E9:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/5b1bd7dd-3f00-3a3c-922c-f7ee131e636f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.39.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:1a:a3:9b:19:31:b6:4b:69:46:f9:81:02:e6:0d:12:45:0b:
         50:1e:b7:b0:79:6d:f7:a8:d6:1c:f2:46:9b:8e:7f:91:ef:21:
         5e:14:99:3e:cd:fa:a7:a1:f9:bc:dd:bc:76:68:d9:ae:ba:bf:
         76:a2:2c:3d:1b:31:58:d2:91:69:2c:78:d3:2c:07:7a:0c:ae:
         37:49:e6:52:0d:80:cf:92:0e:55:b8:29:ec:d0:8f:1c:8f:42:
         ba:96:d9:68:ba:2f:96:f4:6f:3c:06:4d:e0:27:03:8d:a1:f9:
         b9:e5:31:34:a9:e0:9f:6b:96:58:17:7a:36:99:53:50:b3:be:
         e5:64:75:4b:0e:b4:05:53:ba:ac:32:cf:9b:37:d6:76:f4:52:
         89:5e:8c:ec:1f:fe:5a:78:c2:77:dc:51:c6:d6:cd:af:91:50:
         a5:12:e2:fb:60:69:3a:fe:71:92:6b:af:37:4f:85:bc:5c:bd:
         97:e5:c2:50:40:7e:fc:ab:57:43:59:61:0a:91:0f:cc:ff:a4:
         5d:3f:da:d5:47:7f:d8:95:54:c2:bc:59:87:1e:60:42:4f:81:
         af:2c:5b:a2:c7:59:14:38:07:20:a6:30:f9:07:16:9b:fc:59:
         48:94:f4:94:99:45:4f:fe:7d:54:63:c2:58:a9:8c:45:f0:50:
         49:91:ce:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF6gknS2lxhCS2+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk
YjEwMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk
OWNjMTdmYzEtNDVmNC00YzNlLWFkZDEtNzk4M2Q5NjZhMTQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqzuymKNNYmaMzUg5zZ/Ay1EzVni7Xm+aK80
Dfiy7EdJDb6x0FYeeSgcTm189KUceNXHpPECnHpXcZErK033h77icldtTffx8YcJ
sN1EbBkVaWS1tIUezDppWNygYRYDnle1Adld+xxJ2+qQ9vB2vbJIrw/KGpcIVnGM
2q9hdGrQALyzoiK8h4GeIGoWs126FfkS2DnGpzca1kT3yLD9pQBQh2x370Lq049F
D9qSrNJDJdHlTIyxtuOAoP0r3O9aUVL0TJoFq76N6Z1BlT+wpmcP4mmAOA4uqtUh
j+W8H/xZsQeVrE02cJwB1C+91SWXMpHi+ZDvi+iQZLHH1ddzRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEPKrwB9TFeM42++3w6jA1F6G+nCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3
OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvNWIxYmQ3ZGQtM2YwMC0z
YTNjLTkyMmMtZjdlZTEzMWU2MzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0
YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1
ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl
NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQSeIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADAao5sZMbZLaUb5gQLmDRJFC1Aet7B5bfeo1hzyRpuOf5HvIV4UmT7N
+qeh+bzdvHZo2a66v3aiLD0bMVjSkWkseNMsB3oMrjdJ5lINgM+SDlW4KezQjxyP
QrqW2Wi6L5b0bzwGTeAnA42h+bnlMTSp4J9rllgXejaZU1CzvuVkdUsOtAVTuqwy
z5s31nb0UolejOwf/lp4wnfcUcbWza+RUKUS4vtgaTr+cZJrrzdPhbxcvZflwlBA
fvyrV0NZYQqRD8z/pF0/2tVHf9iVVMK8WYceYEJPga8sW6LHWRQ4ByCmMPkHFpv8
WUiU9JSZRU/+fVRjwlipjEXwUEmRzis=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:00 2026 by rpki-client