Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/148bae10-4b3a-3470-87c3-6c21a344d540.roa
File:                     148bae10-4b3a-3470-87c3-6c21a344d540.roa (raw, json)
Hash identifier:          Spj9aW7+5oNT8esNtc/UibtWSaomSgW/j/QrpuQRuN4=
Subject key identifier:   D2:5D:81:90:71:89:B4:96:55:F8:6F:AA:F5:EA:FA:15:BA:8D:EC:3D
Certificate issuer:       /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3
Certificate serial:       010D0C9F4328584D09126F926EF38DE8AF75A580
Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/148bae10-4b3a-3470-87c3-6c21a344d540.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     395567
IP address blocks:        207.65.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:6f:92:6e:f3:8d:e8:af:75:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=070eb613-1a7a-44d6-a909-769c2905470b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e6:57:a2:e8:40:4e:68:46:74:b3:a5:b1:39:
                    50:60:f3:ec:4d:3d:76:92:d4:82:bc:14:a3:d0:3d:
                    4a:c5:ac:91:62:a0:20:48:32:93:46:fd:e1:35:f5:
                    8e:b3:71:5a:b9:13:0a:6f:88:e8:a6:4d:e0:6b:ec:
                    b0:5d:98:c9:e5:00:3d:e4:38:f7:d4:5d:bc:98:52:
                    60:ab:8c:3e:e6:eb:32:9f:8e:34:58:7b:e2:a8:9e:
                    ec:ff:02:07:ae:30:02:21:6b:23:01:23:95:b6:71:
                    6f:9e:62:50:4a:50:13:f8:8a:34:e6:fb:e2:2c:c6:
                    1a:4f:70:a8:a6:4e:b8:e6:c0:34:89:98:bb:78:cb:
                    a9:89:9f:c4:07:45:4c:de:cf:d1:d4:6a:1c:6d:fb:
                    cc:56:62:09:ff:1a:28:f5:11:01:dc:b9:e4:92:67:
                    3c:fb:16:50:b4:54:b8:57:20:74:fc:a6:39:56:9c:
                    b8:04:04:18:c5:ba:cc:31:56:47:cc:98:d6:fe:cc:
                    52:88:ad:34:70:4d:be:32:0e:a2:a0:a3:70:39:18:
                    09:d1:4e:b1:69:b5:a5:5e:90:ba:bc:06:93:a9:7e:
                    6d:77:71:e0:08:14:0b:5f:e4:4c:eb:09:44:8b:2d:
                    92:86:0f:90:c6:b6:46:fd:e1:8b:da:e8:36:a5:78:
                    5e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:5D:81:90:71:89:B4:96:55:F8:6F:AA:F5:EA:FA:15:BA:8D:EC:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/148bae10-4b3a-3470-87c3-6c21a344d540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.65.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:ca:ba:1d:bc:08:7e:81:46:78:7d:75:1f:5c:b6:d5:d5:d1:
         1c:5a:b5:d7:55:26:f3:2e:75:6b:ef:7b:d3:2b:d5:fe:ad:95:
         08:23:7c:49:05:d9:32:28:11:82:c6:e2:64:9a:1d:d9:3a:21:
         d5:b9:e8:52:02:85:70:c2:5a:1a:6c:19:20:08:29:53:9c:e3:
         27:6e:d0:e9:18:58:47:70:9c:df:e2:38:67:92:38:03:a2:40:
         e3:62:0c:11:42:35:c5:eb:f0:90:49:07:74:d8:17:b4:46:33:
         07:88:f3:5c:01:df:c8:94:fb:bd:af:f1:c1:29:87:9a:2a:2f:
         65:99:f5:8b:59:c6:f0:78:f7:fa:f8:af:30:b0:49:f3:32:ea:
         e8:9b:9c:d6:09:41:9e:08:d9:a3:b9:70:b2:05:83:b7:a4:c6:
         31:fb:24:bb:98:1d:ea:d3:13:f2:67:0e:ba:7c:90:74:6b:d2:
         c5:88:cb:ba:f7:1b:7f:cf:0e:6c:63:b5:a6:13:6c:79:c4:93:
         40:d3:23:b2:1a:86:5d:cd:1b:ad:b9:c3:45:56:84:17:64:c3:
         80:3d:00:fc:08:da:2a:a0:f6:cc:54:fc:6a:b5:74:25:0b:0a:
         a6:25:52:84:e9:6d:a3:62:6e:8b:f7:59:97:75:b2:c4:d9:cc:
         ea:84:62:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEm+SbvON6K91pYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWU3N2I1YWYtYTFiNS00ODU4LWI2MWQtZjA5ZmQ2N2Y3
Y2IzMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk
MDcwZWI2MTMtMWE3YS00NGQ2LWE5MDktNzY5YzI5MDU0NzBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeZXouhATmhGdLOlsTlQYPPsTT12ktSCvBSj
0D1KxayRYqAgSDKTRv3hNfWOs3FauRMKb4jopk3ga+ywXZjJ5QA95Dj31F28mFJg
q4w+5usyn440WHviqJ7s/wIHrjACIWsjASOVtnFvnmJQSlAT+Io05vviLMYaT3Co
pk645sA0iZi7eMupiZ/EB0VM3s/R1GocbfvMVmIJ/xoo9REB3Lnkkmc8+xZQtFS4
VyB0/KY5Vpy4BAQYxbrMMVZHzJjW/sxSiK00cE2+Mg6ioKNwORgJ0U6xabWlXpC6
vAaTqX5td3HgCBQLX+RM6wlEiy2Shg+QxrZG/eGL2ug2pXheJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNJdgZBxibSWVfhvqvXq+hW6jew9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3
YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlmZDY3ZjdjYjMvMTQ4YmFlMTAtNGIzYS0z
NDcwLTg3YzMtNmMyMWEzNDRkNTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWU3N2I1YWYtYTFiNS00ODU4LWI2
MWQtZjA5ZmQ2N2Y3Y2IzL2FlNzdiNWFmLWExYjUtNDg1OC1iNjFkLWYwOWZkNjdm
N2NiMy5jcmwwHwYDVR0jBBgwFoAUQ8bZZVYwh5KCSgXB185ho81dPhkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlm
ZDY3ZjdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz0EqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGnKuh28CH6BRnh9dR9cttXV0RxatddVJvMudWvve9Mr1f6tlQgjfEkF
2TIoEYLG4mSaHdk6IdW56FIChXDCWhpsGSAIKVOc4ydu0OkYWEdwnN/iOGeSOAOi
QONiDBFCNcXr8JBJB3TYF7RGMweI81wB38iU+72v8cEph5oqL2WZ9YtZxvB49/r4
rzCwSfMy6uibnNYJQZ4I2aO5cLIFg7ekxjH7JLuYHerTE/JnDrp8kHRr0sWIy7r3
G3/PDmxjtaYTbHnEk0DTI7Iahl3NG625w0VWhBdkw4A9APwI2iqg9sxU/Gq1dCUL
CqYlUoTpbaNibov3WZd1ssTZzOqEYp8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:57:49 2026 by rpki-client