Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/5e8f119e-3db2-325d-beaa-bc0323b500eb.roa
File:                     5e8f119e-3db2-325d-beaa-bc0323b500eb.roa (raw, json)
Hash identifier:          RUpLHhMrKX6BOU4Xu1352aQl2MYHnMMpfMmgl9Bsg7g=
Subject key identifier:   9D:84:DB:6A:3C:20:F5:BD:71:0C:48:E8:D9:66:51:BB:2B:D9:E8:80
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F4328584D56896C0B596F36E36BD36C80
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/5e8f119e-3db2-325d-beaa-bc0323b500eb.roa
Signing time:             Mon 30 Mar 2026 07:57:59 +0000
ROA not before:           Mon 30 Mar 2026 07:57:59 +0000
ROA not after:            Sun 28 Jun 2026 07:57:59 +0000
asID:                     14114
IP address blocks:        169.145.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:56:89:6c:0b:59:6f:36:e3:6b:d3:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: Mar 30 07:57:59 2026 GMT
            Not After : Jun 28 07:57:59 2026 GMT
        Subject: CN=2f93b725-47da-4aa4-b1ae-60e1e1549812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8d:07:f2:61:17:e6:e0:4e:4d:e8:69:fe:fd:
                    1d:2a:a3:70:7c:e9:0e:78:60:d0:7e:db:c1:ec:ff:
                    2f:68:37:a5:bb:b2:5c:46:46:a6:df:a6:42:bc:39:
                    34:b0:c2:34:e4:57:d6:05:3b:0e:fc:a1:1a:e3:e8:
                    43:5e:1a:a6:6e:03:d5:7c:57:ca:eb:6d:83:f1:14:
                    50:fa:ed:5e:81:2c:43:d3:e1:67:fe:75:b7:d9:87:
                    7e:61:1b:b1:18:11:76:5c:74:a5:85:6a:a3:e3:7f:
                    1d:68:d6:5e:f7:62:ae:11:61:e5:90:8e:62:7d:da:
                    62:20:1d:03:1a:d5:db:5a:bf:63:5b:df:bd:1d:bd:
                    82:16:98:06:82:4c:00:3a:95:28:8c:03:15:aa:3e:
                    d3:e6:46:fa:84:fc:be:05:3f:5f:4f:ec:d5:79:b4:
                    bb:94:7e:74:a3:51:60:61:44:b5:de:35:17:e4:8b:
                    a3:19:3c:2d:63:53:10:96:71:07:a8:62:15:f1:7e:
                    51:54:46:ed:b9:b5:cd:d0:31:dc:21:a7:79:b5:e6:
                    c1:b9:a2:42:a5:ee:a6:a2:2f:f0:83:f2:be:26:b3:
                    3f:4a:54:62:55:fd:dd:c1:dc:ae:da:7a:96:90:81:
                    77:5d:30:35:79:12:d9:03:86:39:62:45:8f:ec:ef:
                    ee:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:84:DB:6A:3C:20:F5:BD:71:0C:48:E8:D9:66:51:BB:2B:D9:E8:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/5e8f119e-3db2-325d-beaa-bc0323b500eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:2c:b4:dd:c6:3b:14:ea:ee:3c:f5:d3:f7:18:30:be:49:08:
         7f:40:73:48:1c:ef:35:c7:c7:8b:f7:b7:6b:3b:8e:4a:dc:29:
         6d:6b:ff:e9:e4:3e:49:b3:c9:63:a1:bd:66:31:c4:e1:49:0d:
         9e:a0:d1:7a:ec:f8:eb:a8:cb:09:42:57:cf:a1:11:55:09:34:
         72:a6:52:af:16:a6:c8:1a:bb:f4:fa:ba:db:1f:1a:f0:6d:3d:
         73:8e:0f:cc:69:3f:f9:86:85:7f:7d:2a:c7:77:13:d9:61:63:
         92:3c:2a:11:e9:1f:3c:8c:fd:31:a8:58:56:62:0a:db:ec:ad:
         be:9b:e1:34:4d:a3:f9:87:85:87:2d:0f:f2:1b:68:63:35:7b:
         f9:09:7d:24:cf:62:bd:39:b4:09:6c:7b:8e:73:10:e3:b7:9e:
         04:ae:29:0a:c7:10:a3:b5:9a:c2:5f:4c:7a:09:3f:8a:4b:0b:
         ab:3d:97:e0:a4:6a:c5:30:e3:2d:e2:66:89:70:57:4c:bc:1b:
         eb:8e:a9:b2:60:d6:0a:fb:44:e4:d5:ea:2e:06:b2:e3:a1:7b:
         f5:7e:7c:d8:3d:98:e8:ee:ea:1c:5e:90:e5:b1:10:5c:9e:6f:
         29:ac:8e:06:b2:83:cb:e5:66:fd:9e:8d:1a:13:ec:76:48:b8:
         16:cd:14:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1WiWwLWW8242vTbIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzgzNzk5NWItY2M4MC00ZTIzLWFmMDctY2Q0MjJkMGQz
N2E5MB4XDTI2MDMzMDA3NTc1OVoXDTI2MDYyODA3NTc1OVowLzEtMCsGA1UEAxMk
MmY5M2I3MjUtNDdkYS00YWE0LWIxYWUtNjBlMWUxNTQ5ODEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY0H8mEX5uBOTehp/v0dKqNwfOkOeGDQftvB
7P8vaDelu7JcRkam36ZCvDk0sMI05FfWBTsO/KEa4+hDXhqmbgPVfFfK622D8RRQ
+u1egSxD0+Fn/nW32Yd+YRuxGBF2XHSlhWqj438daNZe92KuEWHlkI5ifdpiIB0D
GtXbWr9jW9+9Hb2CFpgGgkwAOpUojAMVqj7T5kb6hPy+BT9fT+zVebS7lH50o1Fg
YUS13jUX5IujGTwtY1MQlnEHqGIV8X5RVEbtubXN0DHcIad5tebBuaJCpe6moi/w
g/K+JrM/SlRiVf3dwdyu2nqWkIF3XTA1eRLZA4Y5YkWP7O/uDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ2E22o8IPW9cQxI6NlmUbsr2eiAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zODM3
OTk1Yi1jYzgwLTRlMjMtYWYwNy1jZDQyMmQwZDM3YTkvNWU4ZjExOWUtM2RiMi0z
MjVkLWJlYWEtYmMwMzIzYjUwMGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzgzNzk5NWItY2M4MC00ZTIzLWFm
MDctY2Q0MjJkMGQzN2E5LzM4Mzc5OTViLWNjODAtNGUyMy1hZjA3LWNkNDIyZDBk
MzdhOS5jcmwwHwYDVR0jBBgwFoAUTaXny8du945GEkC7oBxE2P5AZ0AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zODM3OTk1Yi1jYzgwLTRlMjMtYWYwNy1jZDQy
MmQwZDM3YTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqZFkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAgstN3GOxTq7jz10/cYML5JCH9Ac0gc7zXHx4v3t2s7jkrcKW1r/+nk
PkmzyWOhvWYxxOFJDZ6g0Xrs+OuoywlCV8+hEVUJNHKmUq8Wpsgau/T6utsfGvBt
PXOOD8xpP/mGhX99Ksd3E9lhY5I8KhHpHzyM/TGoWFZiCtvsrb6b4TRNo/mHhYct
D/IbaGM1e/kJfSTPYr05tAlse45zEOO3ngSuKQrHEKO1msJfTHoJP4pLC6s9l+Ck
asUw4y3iZolwV0y8G+uOqbJg1gr7ROTV6i4GsuOhe/V+fNg9mOju6hxekOWxEFye
bymsjgayg8vlZv2ejRoT7HZIuBbNFI8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:26 2026 by rpki-client