Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6a7cc440-c701-3906-b2fe-594c62786924.roa
File:                     6a7cc440-c701-3906-b2fe-594c62786924.roa (raw, json)
Hash identifier:          vdyMCyfYhC9bjVaNTMAc0cIEPvafunpukgPPtJCY7rA=
Subject key identifier:   85:E2:81:08:46:2C:EB:F1:C4:9A:16:03:BB:BB:8B:2F:27:DB:8A:DA
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584D80FFE501D7A22D3554F62C80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6a7cc440-c701-3906-b2fe-594c62786924.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     29538
IP address blocks:        128.1.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:e5:01:d7:a2:2d:35:54:f6:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=9814e65b-d854-465a-82e4-2b8eec10c863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:f2:3f:63:a7:20:95:b0:c5:3c:bf:ac:71:
                    ff:b7:56:be:61:33:df:bc:23:24:dc:ec:5c:6f:37:
                    5d:93:ef:e5:71:9a:42:c0:8b:87:d3:ad:5f:0a:f8:
                    9b:cd:14:4e:65:bd:ae:b1:80:05:86:d3:23:7a:50:
                    90:90:db:84:25:af:97:2c:6c:b3:92:23:78:75:ed:
                    9a:ca:ab:10:71:bb:d4:4b:20:c8:2e:0f:86:c4:3a:
                    95:84:99:95:c6:27:be:d1:61:ef:6f:a4:60:25:19:
                    4c:10:74:a1:78:9a:e5:4e:4a:0e:5a:e7:22:1d:eb:
                    3c:f8:cf:5e:6e:24:5d:58:66:c5:12:21:d8:db:e4:
                    77:3c:cc:59:f6:d6:3b:3c:c7:60:e0:65:71:59:81:
                    ea:df:cc:be:21:9b:c1:7e:64:e8:30:b8:96:96:0b:
                    16:91:7a:04:8e:70:7e:93:d2:4d:93:80:4c:dc:28:
                    58:76:ae:74:a8:26:e5:11:4c:60:3d:52:b8:e5:29:
                    e9:e0:76:44:36:f2:51:d2:b5:36:51:f8:ef:6a:b4:
                    40:4e:8e:e4:36:b3:65:c7:12:8a:53:62:23:3f:fe:
                    3c:0f:e5:48:73:21:53:c1:ce:46:18:22:0b:5a:8e:
                    09:a8:a7:4c:34:54:d0:02:fe:4f:d9:74:3e:42:74:
                    50:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E2:81:08:46:2C:EB:F1:C4:9A:16:03:BB:BB:8B:2F:27:DB:8A:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6a7cc440-c701-3906-b2fe-594c62786924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:44:48:01:77:aa:82:a6:e9:b4:11:92:ba:a5:46:c3:55:d9:
         6f:5b:66:2b:a9:24:6b:49:e2:4b:15:27:95:25:7b:ab:c7:78:
         2d:0e:1e:d3:f1:39:0d:ce:c7:db:17:53:c5:f9:07:81:dd:a0:
         46:3b:fb:f8:4d:3d:9c:f5:54:94:46:43:8d:74:d6:d6:1d:82:
         19:2a:49:e5:c9:e3:95:d1:13:4a:42:32:f1:78:11:11:b2:48:
         9f:cb:99:9e:93:0b:fc:b9:4e:df:5d:d5:51:f4:6f:f5:5a:98:
         ea:f7:f7:0a:52:a3:b0:95:66:01:de:e7:91:b9:e3:03:88:2d:
         71:9c:6f:40:54:d9:f7:11:1f:87:18:1d:bc:4c:0d:d6:52:de:
         22:1d:8c:01:a4:a5:e6:b0:c9:09:1a:b5:8d:d6:86:2c:91:18:
         ae:91:d3:d5:61:03:0a:b8:a1:01:4c:f2:3c:e3:e2:07:76:26:
         2c:74:36:8d:1b:37:eb:ce:60:0e:af:5d:4a:3d:ea:a4:0e:e7:
         cd:e0:7a:39:c3:e4:6f:95:f4:17:22:48:bb:db:d2:04:d6:ea:
         8c:df:4e:c9:a7:c2:3c:f4:d3:09:7a:0e:45:cd:58:21:31:41:
         c7:fe:66:cf:12:3d:10:e3:aa:9f:a5:e7:83:f3:51:8a:d5:cf:
         3c:3e:99:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A/+UB16ItNVT2LIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk
OTgxNGU2NWItZDg1NC00NjVhLTgyZTQtMmI4ZWVjMTBjODYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7byP2OnIJWwxTy/rHH/t1a+YTPfvCMk3Oxc
bzddk+/lcZpCwIuH061fCvibzRROZb2usYAFhtMjelCQkNuEJa+XLGyzkiN4de2a
yqsQcbvUSyDILg+GxDqVhJmVxie+0WHvb6RgJRlMEHSheJrlTkoOWuciHes8+M9e
biRdWGbFEiHY2+R3PMxZ9tY7PMdg4GVxWYHq38y+IZvBfmToMLiWlgsWkXoEjnB+
k9JNk4BM3ChYdq50qCblEUxgPVK45Snp4HZENvJR0rU2UfjvarRATo7kNrNlxxKK
U2IjP/48D+VIcyFTwc5GGCILWo4JqKdMNFTQAv5P2XQ+QnRQxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIXigQhGLOvxxJoWA7u7iy8n24raMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNmE3Y2M0NDAtYzcwMS0z
OTA2LWIyZmUtNTk0YzYyNzg2OTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgAGYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIdESAF3qoKm6bQRkrqlRsNV2W9bZiupJGtJ4ksVJ5Ule6vHeC0OHtPx
OQ3Ox9sXU8X5B4HdoEY7+/hNPZz1VJRGQ4101tYdghkqSeXJ45XRE0pCMvF4ERGy
SJ/LmZ6TC/y5Tt9d1VH0b/VamOr39wpSo7CVZgHe55G54wOILXGcb0BU2fcRH4cY
HbxMDdZS3iIdjAGkpeawyQkatY3WhiyRGK6R09VhAwq4oQFM8jzj4gd2Jix0No0b
N+vOYA6vXUo96qQO583gejnD5G+V9BciSLvb0gTW6ozfTsmnwjz00wl6DkXNWCEx
Qcf+Zs8SPRDjqp+l54PzUYrVzzw+mYs=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:47:46 2026 by rpki-client