Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/04779a26-700c-39da-b030-d13a28361f4f.roa
File:                     04779a26-700c-39da-b030-d13a28361f4f.roa (raw, json)
Hash identifier:          dDqED8EX6hhKudfHUY+wDP7vBhSGzi2IT+4IPP8IOAU=
Subject key identifier:   7B:36:FC:6C:CE:AB:1C:56:14:21:0B:F5:82:D9:64:40:CA:36:F1:38
Certificate issuer:       /CN=be7a0cf5-d98b-4cd3-adcb-1936d1ae1059
Certificate serial:       010D0C9F4328584D75D527BACE85594DA0FDA700
Authority key identifier: 54:69:11:A8:6B:29:6F:61:FB:5E:DE:24:20:B9:2A:11:E7:6F:7B:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/04779a26-700c-39da-b030-d13a28361f4f.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     30165
IP address blocks:        205.144.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:27:ba:ce:85:59:4d:a0:fd:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be7a0cf5-d98b-4cd3-adcb-1936d1ae1059
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=7150b336-4e83-4cce-a44b-df5b4af9b954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9f:24:57:01:7e:22:8e:24:00:0e:1b:1a:18:
                    07:f1:c6:19:d3:1d:27:5c:4b:2f:86:68:5e:03:78:
                    74:a7:51:54:30:c9:c3:cc:07:c6:45:3d:18:e9:bb:
                    63:2c:57:54:dc:a5:ad:7f:12:fb:a5:6e:e8:12:a5:
                    99:98:7f:cc:2c:7d:2c:da:ff:9d:e9:40:45:9f:37:
                    3c:e5:12:00:31:1f:88:7e:47:51:cd:3c:63:d7:e2:
                    60:d0:49:09:22:81:d8:92:60:86:0f:b6:66:eb:ec:
                    96:6e:50:fd:65:3b:6f:09:a2:9f:df:cd:00:43:73:
                    eb:c5:5e:31:d4:c2:02:95:55:c9:86:04:66:16:e1:
                    03:65:46:20:b5:24:8e:b6:77:08:41:21:c9:90:59:
                    ad:75:a3:56:7b:48:a5:5b:bb:1a:ff:12:65:30:dc:
                    1d:66:09:17:9b:88:41:8e:c3:1a:98:ba:cb:6d:da:
                    80:89:b4:82:d8:5d:f6:9f:d3:30:fe:84:a4:ed:2f:
                    80:e1:1f:5e:bc:0b:f5:94:64:c9:fa:05:c1:5e:93:
                    d0:8f:40:a7:94:b0:89:27:61:38:47:e3:10:4b:ca:
                    24:f8:f7:fd:dc:7b:d4:48:1c:22:b8:21:0f:b5:60:
                    95:6b:82:1b:fb:63:51:d1:a0:31:9b:77:59:e6:2c:
                    91:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:36:FC:6C:CE:AB:1C:56:14:21:0B:F5:82:D9:64:40:CA:36:F1:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/04779a26-700c-39da-b030-d13a28361f4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.crl

            X509v3 Authority Key Identifier:
                keyid:54:69:11:A8:6B:29:6F:61:FB:5E:DE:24:20:B9:2A:11:E7:6F:7B:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/be7a0cf5-d98b-4cd3-adcb-1936d1ae1059.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.144.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:13:f7:13:04:5b:06:f5:17:95:c9:3d:e5:2d:01:ed:3b:7f:
         1b:b3:84:8b:77:1e:9c:ab:d9:3e:be:6f:b5:e0:9c:a6:8f:bc:
         0d:ab:6f:69:be:4e:79:53:03:f5:a0:3b:96:66:9b:f4:20:d9:
         85:a7:70:d6:1a:b5:ae:70:b0:78:07:dc:62:46:e2:56:40:3a:
         8b:23:30:f4:56:72:4b:03:d4:a6:d0:c8:18:80:a6:62:51:f2:
         33:b5:43:f7:1a:1f:c3:4b:f4:60:fc:ed:cf:f1:5c:b7:3e:26:
         ae:06:0e:ea:95:a9:8b:24:f6:88:d5:9f:5d:da:2b:a7:db:fc:
         b4:bf:99:65:5b:f9:f0:bc:20:6b:ef:91:96:1f:5a:8b:bb:a3:
         7d:c4:33:5f:b4:63:28:96:28:20:78:74:f0:ca:0c:c8:4c:41:
         c6:34:5a:96:ff:53:cd:8a:2d:83:6e:3a:5d:0b:cc:58:d8:5a:
         e6:9b:fd:14:bc:c9:46:0c:d3:79:93:2c:c0:e2:67:4e:8e:0f:
         0f:51:80:91:5c:97:3a:a2:c9:76:ce:ec:43:33:aa:5c:78:71:
         18:9f:e8:be:82:73:7f:13:6e:f9:de:6a:ff:b2:69:3e:bf:30:
         1e:dd:da:a7:fb:6d:9a:d9:23:4a:f5:24:5e:2e:3b:3a:06:30:
         0c:24:e7:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE111Se6zoVZTaD9pwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmU3YTBjZjUtZDk4Yi00Y2QzLWFkY2ItMTkzNmQxYWUx
MDU5MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk
NzE1MGIzMzYtNGU4My00Y2NlLWE0NGItZGY1YjRhZjliOTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj58kVwF+Io4kAA4bGhgH8cYZ0x0nXEsvhmhe
A3h0p1FUMMnDzAfGRT0Y6btjLFdU3KWtfxL7pW7oEqWZmH/MLH0s2v+d6UBFnzc8
5RIAMR+IfkdRzTxj1+Jg0EkJIoHYkmCGD7Zm6+yWblD9ZTtvCaKf380AQ3PrxV4x
1MIClVXJhgRmFuEDZUYgtSSOtncIQSHJkFmtdaNWe0ilW7sa/xJlMNwdZgkXm4hB
jsMamLrLbdqAibSC2F32n9Mw/oSk7S+A4R9evAv1lGTJ+gXBXpPQj0CnlLCJJ2E4
R+MQS8ok+Pf93HvUSBwiuCEPtWCVa4Ib+2NR0aAxm3dZ5iyRcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHs2/GzOqxxWFCEL9YLZZEDKNvE4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZTdh
MGNmNS1kOThiLTRjZDMtYWRjYi0xOTM2ZDFhZTEwNTkvMDQ3NzlhMjYtNzAwYy0z
OWRhLWIwMzAtZDEzYTI4MzYxZjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmU3YTBjZjUtZDk4Yi00Y2QzLWFk
Y2ItMTkzNmQxYWUxMDU5L2JlN2EwY2Y1LWQ5OGItNGNkMy1hZGNiLTE5MzZkMWFl
MTA1OS5jcmwwHwYDVR0jBBgwFoAUVGkRqGspb2H7Xt4kILkqEedve0IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iZTdhMGNmNS1kOThiLTRjZDMtYWRjYi0xOTM2
ZDFhZTEwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzZDQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABET9xMEWwb1F5XJPeUtAe07fxuzhIt3Hpyr2T6+b7XgnKaPvA2rb2m+
TnlTA/WgO5Zmm/Qg2YWncNYata5wsHgH3GJG4lZAOosjMPRWcksD1KbQyBiApmJR
8jO1Q/caH8NL9GD87c/xXLc+Jq4GDuqVqYsk9ojVn13aK6fb/LS/mWVb+fC8IGvv
kZYfWou7o33EM1+0YyiWKCB4dPDKDMhMQcY0Wpb/U82KLYNuOl0LzFjYWuab/RS8
yUYM03mTLMDiZ06ODw9RgJFclzqiyXbO7EMzqlx4cRif6L6Cc38Tbvneav+yaT6/
MB7d2qf7bZrZI0r1JF4uOzoGMAwk55Q=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:49:51 2026 by rpki-client