Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e0124a56-00b3-397d-94b4-a8fccac56c0c.roa
File:                     e0124a56-00b3-397d-94b4-a8fccac56c0c.roa (raw, json)
Hash identifier:          kvHMD+AkgvCOQMdMoUIfMbONmOlibzAiktp98NsyyJM=
Subject key identifier:   27:D3:5A:30:2B:F6:97:3B:E5:27:CB:9C:92:F2:CD:87:58:E0:F2:4A
Certificate issuer:       /CN=e44d1688-f8c8-4ce8-b494-f04bf2e3606f
Certificate serial:       010D0C9F4328584E296F134212112C1C99714C40
Authority key identifier: 4D:BC:22:68:EC:30:2C:65:C6:A6:D2:2F:B0:C6:12:4B:A1:AC:DA:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e0124a56-00b3-397d-94b4-a8fccac56c0c.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     2
IP address blocks:        128.4.0.0/16 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:13:42:12:11:2c:1c:99:71:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e44d1688-f8c8-4ce8-b494-f04bf2e3606f
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=3f3ec13a-91d3-4044-8466-b3d3287ae45e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1e:4d:de:f7:2a:58:f3:12:1a:85:a0:5e:18:
                    fb:5b:a2:09:93:6c:3a:ba:f3:da:25:27:4b:a3:d6:
                    50:f2:c9:9a:2b:12:a3:1f:62:bf:ee:2f:be:13:0e:
                    54:7c:ad:b9:fc:22:1b:3c:a1:d7:54:25:f0:45:e6:
                    00:bc:0c:30:35:55:d0:c4:ce:06:45:ff:bf:0c:c6:
                    74:f5:76:86:89:ad:0d:c7:4c:0c:dd:81:30:29:b0:
                    8d:78:97:a9:ca:5a:61:2b:6a:a7:bd:11:55:48:cb:
                    10:81:b9:4d:70:1a:8c:7c:c6:f3:b3:03:bc:2a:3d:
                    ce:0f:ab:73:af:37:d8:30:f5:33:71:31:77:5b:72:
                    d8:1c:54:6e:ef:2f:db:aa:20:c2:44:53:bd:69:4e:
                    cf:94:b3:a8:44:8c:b9:c8:38:31:35:9a:d9:90:f3:
                    2b:59:45:c8:a1:71:d2:0b:c1:74:cc:b8:f7:2d:e4:
                    cd:c8:35:b7:34:68:d5:2a:eb:8c:e0:22:21:80:1b:
                    06:a6:99:6f:c1:d8:87:c9:1e:d7:3e:be:af:ed:a0:
                    c0:95:b6:fc:c7:32:49:0e:87:e3:0a:24:6c:97:ee:
                    3a:d8:13:b5:56:59:78:b8:d2:5c:ae:79:c8:2a:54:
                    95:0d:33:2f:f1:8b:63:de:68:91:c3:6b:3a:20:c7:
                    47:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D3:5A:30:2B:F6:97:3B:E5:27:CB:9C:92:F2:CD:87:58:E0:F2:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e0124a56-00b3-397d-94b4-a8fccac56c0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.crl

            X509v3 Authority Key Identifier:
                keyid:4D:BC:22:68:EC:30:2C:65:C6:A6:D2:2F:B0:C6:12:4B:A1:AC:DA:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.4.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:61:12:d6:33:a9:86:91:db:9a:31:af:8c:cb:95:09:d9:70:
         f9:f3:88:63:81:18:a9:5c:bd:91:f8:cb:ab:35:ca:2c:b4:33:
         17:5c:21:0e:26:78:c7:1b:da:69:62:e5:56:da:9f:d5:c0:5c:
         74:1c:ca:4c:87:6f:a9:00:96:77:bc:c4:ec:54:30:55:de:5c:
         d7:1b:6e:71:05:25:87:24:97:a5:b9:89:49:53:58:eb:d6:b6:
         95:b9:4a:d6:02:bf:0e:b6:e0:26:15:59:c4:cd:86:22:c6:1b:
         6d:26:de:64:46:35:bc:bb:45:cc:db:ac:c4:5d:65:35:78:19:
         50:5c:8e:ac:29:10:bd:de:0c:63:f7:a1:46:17:2d:de:74:e6:
         00:88:05:fd:17:62:4e:97:f9:4e:66:f9:c0:8b:1f:99:66:89:
         2d:54:d6:24:5e:1d:80:50:ef:45:4b:12:93:8d:a1:19:c1:50:
         66:b9:6b:13:37:3b:71:ef:ab:4b:af:49:44:dc:38:0a:b4:fe:
         98:31:2a:0c:44:c8:72:4f:99:25:5f:1f:4b:c6:15:aa:bb:97:
         f8:ff:7d:9d:9e:cd:3e:48:4f:74:5f:f4:f7:7b:1a:59:94:d8:
         0e:65:84:e8:9e:04:d7:b0:d6:25:a3:4d:e9:2e:f1:d3:65:a8:
         b4:f3:fc:3e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE4pbxNCEhEsHJlxTEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTQ0ZDE2ODgtZjhjOC00Y2U4LWI0OTQtZjA0YmYyZTM2
MDZmMB4XDTI2MDYxMzIxMDAxMloXDTI2MDkxMTIxMDAxMlowLzEtMCsGA1UEAxMk
M2YzZWMxM2EtOTFkMy00MDQ0LTg0NjYtYjNkMzI4N2FlNDVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArh5N3vcqWPMSGoWgXhj7W6IJk2w6uvPaJSdL
o9ZQ8smaKxKjH2K/7i++Ew5UfK25/CIbPKHXVCXwReYAvAwwNVXQxM4GRf+/DMZ0
9XaGia0Nx0wM3YEwKbCNeJepylphK2qnvRFVSMsQgblNcBqMfMbzswO8Kj3OD6tz
rzfYMPUzcTF3W3LYHFRu7y/bqiDCRFO9aU7PlLOoRIy5yDgxNZrZkPMrWUXIoXHS
C8F0zLj3LeTNyDW3NGjVKuuM4CIhgBsGpplvwdiHyR7XPr6v7aDAlbb8xzJJDofj
CiRsl+462BO1Vll4uNJcrnnIKlSVDTMv8Ytj3miRw2s6IMdH9QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCfTWjAr9pc75SfLnJLyzYdY4PJKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lNDRk
MTY4OC1mOGM4LTRjZTgtYjQ5NC1mMDRiZjJlMzYwNmYvZTAxMjRhNTYtMDBiMy0z
OTdkLTk0YjQtYThmY2NhYzU2YzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTQ0ZDE2ODgtZjhjOC00Y2U4LWI0
OTQtZjA0YmYyZTM2MDZmL2U0NGQxNjg4LWY4YzgtNGNlOC1iNDk0LWYwNGJmMmUz
NjA2Zi5jcmwwHwYDVR0jBBgwFoAUTbwiaOwwLGXGptIvsMYSS6Gs2qowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lNDRkMTY4OC1mOGM4LTRjZTgtYjQ5NC1mMDRi
ZjJlMzYwNmYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgAQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATmES1jOphpHbmjGvjMuVCdlw+fOIY4EYqVy9kfjLqzXKLLQzF1whDiZ4
xxvaaWLlVtqf1cBcdBzKTIdvqQCWd7zE7FQwVd5c1xtucQUlhySXpbmJSVNY69a2
lblK1gK/DrbgJhVZxM2GIsYbbSbeZEY1vLtFzNusxF1lNXgZUFyOrCkQvd4MY/eh
Rhct3nTmAIgF/RdiTpf5Tmb5wIsfmWaJLVTWJF4dgFDvRUsSk42hGcFQZrlrEzc7
ce+rS69JRNw4CrT+mDEqDETIck+ZJV8fS8YVqruX+P99nZ7NPkhPdF/093saWZTY
DmWE6J4E17DWJaNN6S7x02WotPP8Pg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:57:48 2026 by rpki-client