Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/04ecbba8-a20a-3de9-9e0a-adb751a99684.roa
File:                     04ecbba8-a20a-3de9-9e0a-adb751a99684.roa (raw, json)
Hash identifier:          h6LX3SnkhSlgBbLJzm1SOzW56knsm/bnith+7reHfaQ=
Subject key identifier:   FA:94:9D:3C:0A:96:9A:E3:95:98:69:B2:30:AB:34:BF:E3:B0:51:3D
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584D571FA04ECE6403EDA353EC00
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/04ecbba8-a20a-3de9-9e0a-adb751a99684.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     137280
IP address blocks:        107.155.51.0/24 maxlen: 24
                          107.155.52.0/23 maxlen: 24
                          169.197.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:a0:4e:ce:64:03:ed:a3:53:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=eb6353b9-ace1-4480-ae06-a0c02c1e1e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ae:10:2a:34:cc:62:37:be:18:07:da:dc:69:
                    03:b8:e3:fc:e9:13:13:a0:b9:e0:21:5a:a0:33:90:
                    af:6b:f9:f7:15:1a:f9:e2:87:9c:6e:95:6d:60:7e:
                    66:03:68:59:13:94:12:39:b1:fa:3d:73:bc:60:f7:
                    07:72:b3:d2:39:4d:e5:df:23:23:10:84:dd:bc:c3:
                    77:db:9d:9e:96:56:52:02:6d:7a:3f:ce:19:48:47:
                    af:0c:0c:30:1c:af:02:38:8e:c6:cf:eb:38:c1:40:
                    7b:2c:10:6f:35:2e:60:a9:81:98:1b:30:2a:21:bb:
                    e0:c0:fe:2a:53:8d:6b:51:72:a7:12:ee:bd:26:03:
                    3a:16:31:34:b3:df:6e:ed:27:0b:a6:e5:bd:98:74:
                    c4:7b:f9:50:91:cc:38:d7:3b:72:29:5e:32:6b:f5:
                    02:36:fb:1a:7a:c9:06:2c:56:6e:2b:36:50:50:c3:
                    dc:1b:c7:3c:43:24:f1:98:01:16:74:c7:42:d2:be:
                    ef:1f:d6:07:76:b8:61:58:62:98:8b:87:b4:d3:25:
                    57:fa:95:5c:eb:93:06:be:f0:70:92:1c:66:d0:9f:
                    54:b1:4e:62:9c:f3:29:8f:8b:a6:03:ea:dd:93:8e:
                    ee:a9:df:59:34:ce:c2:0a:79:6f:87:7b:1d:94:6b:
                    5d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:94:9D:3C:0A:96:9A:E3:95:98:69:B2:30:AB:34:BF:E3:B0:51:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/04ecbba8-a20a-3de9-9e0a-adb751a99684.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.155.51.0-107.155.53.255
                  169.197.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:f1:c1:b2:01:b4:56:4a:d1:66:c7:9e:fe:e8:a4:36:28:a4:
         52:6b:e9:06:88:50:e9:b9:2a:e3:a6:e6:b7:41:b9:79:bc:43:
         3a:c6:18:0a:76:9c:cd:52:25:35:b1:f1:10:73:c5:bd:81:2d:
         f8:2c:ca:88:56:50:da:15:72:bf:e4:9e:95:f3:a6:f0:37:98:
         70:ae:6e:17:95:ef:bf:1f:a9:24:72:dd:d2:84:d2:59:a0:c9:
         b3:35:2f:88:6d:f6:ed:b2:1d:81:6d:e7:88:a9:41:cb:5b:b3:
         d8:af:da:1c:cd:9a:f3:b2:db:82:ba:f0:24:ac:38:07:88:40:
         e0:b1:a6:18:c1:49:d5:c7:50:55:23:18:c2:bf:ec:2c:8f:b2:
         b8:08:93:2a:bb:1e:06:ee:9c:44:2d:7f:06:1e:df:3b:8c:42:
         8f:38:88:48:ab:b4:c7:43:d5:c0:0d:93:b6:6d:05:4c:8e:40:
         a9:0a:ad:a6:6a:ec:bd:01:e0:16:e6:1d:be:57:ee:bd:98:b4:
         02:7b:f4:3d:26:c0:c4:78:8f:34:dd:d9:98:9e:f4:f9:06:75:
         39:2a:59:f8:c9:a2:c8:74:21:65:41:60:e9:9b:1b:5b:dc:00:
         be:e8:8f:e2:22:77:d7:62:e1:26:29:4e:4e:1b:d3:e6:f0:b0:
         8c:23:8f:08
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE1XH6BOzmQD7aNT7AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk
ZWI2MzUzYjktYWNlMS00NDgwLWFlMDYtYTBjMDJjMWUxZTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK4QKjTMYje+GAfa3GkDuOP86RMToLngIVqg
M5Cva/n3FRr54oecbpVtYH5mA2hZE5QSObH6PXO8YPcHcrPSOU3l3yMjEITdvMN3
252ellZSAm16P84ZSEevDAwwHK8COI7Gz+s4wUB7LBBvNS5gqYGYGzAqIbvgwP4q
U41rUXKnEu69JgM6FjE0s99u7ScLpuW9mHTEe/lQkcw41ztyKV4ya/UCNvsaeskG
LFZuKzZQUMPcG8c8QyTxmAEWdMdC0r7vH9YHdrhhWGKYi4e00yVX+pVc65MGvvBw
khxm0J9UsU5inPMpj4umA+rdk47uqd9ZNM7CCnlvh3sdlGtdhQIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFPqUnTwKlprjlZhpsjCrNL/jsFE9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMDRlY2JiYTgtYTIwYS0z
ZGU5LTllMGEtYWRiNzUxYTk5Njg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABrmzMD
BAFrmzQDBAGpxXQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAjvHBsgG0VkrRZsee/uikNiikUmvpBohQ6bkq
46bmt0G5ebxDOsYYCnaczVIlNbHxEHPFvYEt+CzKiFZQ2hVyv+SelfOm8DeYcK5u
F5Xvvx+pJHLd0oTSWaDJszUviG327bIdgW3niKlBy1uz2K/aHM2a87LbgrrwJKw4
B4hA4LGmGMFJ1cdQVSMYwr/sLI+yuAiTKrseBu6cRC1/Bh7fO4xCjziISKu0x0PV
wA2Ttm0FTI5AqQqtpmrsvQHgFuYdvlfuvZi0Anv0PSbAxHiPNN3ZmJ70+QZ1OSpZ
+MmiyHQhZUFg6ZsbW9wAvuiP4iJ312LhJilOThvT5vCwjCOPCA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:03:29 2026 by rpki-client