Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa
File:                     439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa (raw, json)
Hash identifier:          +41u0AIOkzNxRLiXdwf9gDAOq0urBY1uHnMj/vI2/7E=
Subject key identifier:   29:6D:51:BB:2D:73:B7:5A:31:CC:1B:59:07:FF:45:03:A0:9D:BD:99
Certificate issuer:       /CN=70a424d3-35bd-43df-8245-3fb08ea7af5a
Certificate serial:       010D0C9F4328584D6AAA84988B75654F1A06DD80
Authority key identifier: F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     40583
IP address blocks:        198.236.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:84:98:8b:75:65:4f:1a:06:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70a424d3-35bd-43df-8245-3fb08ea7af5a
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=5a807325-c0d7-4f0d-b635-92fa52062bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:30:03:92:5b:6c:83:39:e4:72:a4:50:33:b0:
                    40:1d:a2:59:62:10:c8:9c:bd:83:70:54:d8:f0:17:
                    8c:b0:58:29:ac:64:e8:35:45:7d:b3:0f:55:af:b4:
                    41:95:9e:45:5c:1c:21:65:07:00:76:b0:a8:84:15:
                    06:34:65:60:55:a0:0c:21:f3:38:5c:f5:03:a4:15:
                    ff:d9:4e:85:ad:8b:f9:1c:0f:0a:ec:33:d6:05:dd:
                    8c:a0:e6:8a:24:cc:bb:f1:6c:dd:14:22:22:ee:af:
                    69:7e:cd:90:9f:97:81:a0:bf:fb:9e:d5:1c:bc:f4:
                    86:8e:01:35:f0:b8:68:7b:28:5f:cb:ef:c2:d9:d3:
                    c6:b1:12:f5:a0:7c:4c:4a:bf:16:58:59:b3:5f:74:
                    8a:97:e3:2a:99:a8:29:f7:fb:19:6b:7a:10:da:d3:
                    a8:1a:78:58:2a:5c:34:42:37:96:37:40:ba:ff:2c:
                    80:ce:e2:2d:bd:f9:b4:d1:a9:26:1f:20:72:5e:b6:
                    ac:7c:e8:33:79:7b:62:aa:4e:30:f6:3d:3c:15:52:
                    af:f3:b7:f1:1d:5a:ff:b3:34:ea:3f:0f:0d:c1:8b:
                    17:ea:77:9f:7b:74:b9:33:55:3e:88:0a:10:73:34:
                    45:10:cc:f0:42:ad:a6:bc:16:5a:ca:a6:9f:a3:a2:
                    a5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6D:51:BB:2D:73:B7:5A:31:CC:1B:59:07:FF:45:03:A0:9D:BD:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl

            X509v3 Authority Key Identifier:
                keyid:F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.236.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:10:ee:4e:ad:0e:2e:82:d2:9f:08:e8:37:2a:14:96:7a:12:
         82:56:f2:51:73:8d:ed:cf:6c:7a:39:94:2d:54:14:c3:02:31:
         da:11:96:ae:58:20:7c:ac:2d:55:0b:9b:38:08:44:0c:25:82:
         8c:5c:02:45:3e:b3:09:d5:d6:df:fb:cc:99:61:c1:b0:f1:39:
         72:5c:4e:69:84:e7:eb:b2:d9:1c:e7:b3:cd:5a:6f:df:d5:9b:
         ed:76:bb:c1:e1:1e:c5:6d:f5:81:06:fa:b5:83:d0:f3:d3:25:
         6a:95:c2:f7:20:66:90:1a:a3:29:94:fd:01:2d:34:8d:63:61:
         5b:06:1b:ff:6f:a5:be:69:1d:a5:85:fd:15:f8:a0:7d:a9:74:
         d5:77:a8:52:9a:df:b5:d4:fc:05:5f:66:15:a3:39:d5:87:b9:
         23:b8:6f:04:b6:6f:37:f6:25:67:9a:3b:52:c4:11:06:51:ca:
         55:b1:10:a0:b7:93:ac:e3:c3:d6:3d:d4:6f:cc:0f:22:54:3f:
         28:56:ac:f5:47:a1:6f:fe:8b:1c:21:70:51:c8:e5:d6:f3:7c:
         2a:dc:c4:7c:46:9c:83:e7:05:cd:f7:7e:a6:5a:d2:69:c9:50:
         ef:14:b5:fa:2e:03:31:05:04:2c:58:81:6c:9b:fa:5b:41:a9:
         36:1c:22:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqoSYi3VlTxoG3YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzBhNDI0ZDMtMzViZC00M2RmLTgyNDUtM2ZiMDhlYTdh
ZjVhMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk
NWE4MDczMjUtYzBkNy00ZjBkLWI2MzUtOTJmYTUyMDYyYmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozADkltsgznkcqRQM7BAHaJZYhDInL2DcFTY
8BeMsFgprGToNUV9sw9Vr7RBlZ5FXBwhZQcAdrCohBUGNGVgVaAMIfM4XPUDpBX/
2U6FrYv5HA8K7DPWBd2MoOaKJMy78WzdFCIi7q9pfs2Qn5eBoL/7ntUcvPSGjgE1
8Lhoeyhfy+/C2dPGsRL1oHxMSr8WWFmzX3SKl+Mqmagp9/sZa3oQ2tOoGnhYKlw0
QjeWN0C6/yyAzuItvfm00akmHyByXrasfOgzeXtiqk4w9j08FVKv87fxHVr/szTq
Pw8NwYsX6nefe3S5M1U+iAoQczRFEMzwQq2mvBZayqafo6KlsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCltUbstc7daMcwbWQf/RQOgnb2ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MGE0
MjRkMy0zNWJkLTQzZGYtODI0NS0zZmIwOGVhN2FmNWEvNDM5ZWU0NGQtMmY2My0z
YzBlLTgwZGUtN2FkN2Y3Y2I2OWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzBhNDI0ZDMtMzViZC00M2RmLTgy
NDUtM2ZiMDhlYTdhZjVhLzcwYTQyNGQzLTM1YmQtNDNkZi04MjQ1LTNmYjA4ZWE3
YWY1YS5jcmwwHwYDVR0jBBgwFoAU8loH7di3va0sdvBenFAq6oPksZYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83MGE0MjRkMy0zNWJkLTQzZGYtODI0NS0zZmIw
OGVhN2FmNWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxuy4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEAQ7k6tDi6C0p8I6DcqFJZ6EoJW8lFzje3PbHo5lC1UFMMCMdoRlq5Y
IHysLVULmzgIRAwlgoxcAkU+swnV1t/7zJlhwbDxOXJcTmmE5+uy2Rzns81ab9/V
m+12u8HhHsVt9YEG+rWD0PPTJWqVwvcgZpAaoymU/QEtNI1jYVsGG/9vpb5pHaWF
/RX4oH2pdNV3qFKa37XU/AVfZhWjOdWHuSO4bwS2bzf2JWeaO1LEEQZRylWxEKC3
k6zjw9Y91G/MDyJUPyhWrPVHoW/+ixwhcFHI5dbzfCrcxHxGnIPnBc33fqZa0mnJ
UO8UtfouAzEFBCxYgWyb+ltBqTYcIrs=
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:35:57 2026 by rpki-client