Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/88e1c23f-3271-32f7-88d1-24b93968b4c1.roa
File:                     88e1c23f-3271-32f7-88d1-24b93968b4c1.roa (raw, json)
Hash identifier:          pOcwBtOh22ke0AzcBgOmFeaIGkzjdwY2ZfykcEPZBHE=
Subject key identifier:   6D:C2:71:CA:26:8D:ED:D0:D6:45:0C:EB:8E:92:6F:F4:F7:A1:8C:C6
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F4328584D59EA52264DF354D939378C40
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/88e1c23f-3271-32f7-88d1-24b93968b4c1.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     1280
IP address blocks:        204.152.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:52:26:4d:f3:54:d9:39:37:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=4757be32-4ccf-4c02-b364-caf0fed49763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:dc:f5:70:45:c1:d7:57:60:01:92:95:98:e8:
                    44:8a:08:a0:4b:07:88:ce:6d:1b:22:c6:04:2e:ce:
                    fd:e3:83:2d:4e:c8:f2:35:69:2e:28:15:89:28:b5:
                    8c:8b:03:f4:df:1a:ed:ad:ce:0c:02:70:af:6d:13:
                    32:f2:d7:1c:16:cf:f5:08:13:14:f6:73:e5:e0:5b:
                    8d:ff:12:3e:36:c6:d7:c5:23:59:0a:b2:d8:a1:73:
                    15:08:35:f5:d5:82:66:3e:99:3e:0d:24:b4:64:ce:
                    1b:8a:ec:19:80:56:a1:96:34:1b:a3:21:ac:e0:fd:
                    56:6a:4d:a7:1e:3a:cf:fb:98:8d:b3:98:4a:b8:82:
                    e6:52:df:cd:26:15:9d:92:66:d1:04:94:ff:7c:0f:
                    e2:c2:d5:79:a7:5a:bb:e7:61:db:af:40:6f:a2:97:
                    56:a2:5e:2d:3c:27:c7:7c:88:d1:69:1b:f7:2d:83:
                    28:2d:5d:52:63:0d:db:1d:20:3d:88:80:61:37:f1:
                    77:b8:1e:d2:84:bf:46:bd:44:f3:94:83:12:90:db:
                    cd:0f:32:cc:4e:fc:91:b1:af:5b:ff:a0:30:3d:e5:
                    20:95:3c:d4:37:36:af:78:c6:2e:2b:7e:f2:73:b4:
                    17:72:96:1d:17:5d:8f:8e:4f:7e:bc:28:c5:ba:a0:
                    9e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C2:71:CA:26:8D:ED:D0:D6:45:0C:EB:8E:92:6F:F4:F7:A1:8C:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/88e1c23f-3271-32f7-88d1-24b93968b4c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.152.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:e3:a2:a4:ac:f9:99:ed:37:b7:75:46:0f:38:3d:0d:07:7c:
         0e:55:f9:a5:5a:17:1b:f0:b0:90:c0:99:08:6e:7b:94:72:e9:
         a7:c5:51:d9:23:eb:8a:00:dd:86:b7:00:70:72:3f:69:98:7d:
         07:2e:28:85:9b:02:b2:d4:a9:1c:30:2f:28:76:9c:0e:b0:ca:
         d9:5a:fe:ee:85:90:ef:e2:61:d3:d2:39:fa:bc:f1:c4:6f:00:
         89:d7:a9:e5:c8:8c:34:b4:ea:aa:b4:23:8d:2d:82:94:5f:3d:
         f6:89:40:a7:9e:12:2b:b1:9d:d0:45:2a:1c:a1:b6:ff:8b:d0:
         ea:8e:bd:75:06:ca:56:80:56:23:53:a8:03:68:7f:69:b2:fe:
         3d:1a:da:ae:bb:2e:20:48:eb:c0:05:2e:8f:d7:4a:0c:7b:a7:
         3c:2f:4a:c4:c6:0c:9f:7f:a6:ba:97:e4:a3:52:46:c8:d4:86:
         c5:f9:01:1d:5c:47:6a:38:ef:6f:24:15:93:dc:d0:73:2d:da:
         bd:d0:6f:d9:e4:6b:24:5c:05:12:a1:f8:cd:81:2f:27:00:ba:
         0f:60:00:3a:10:2f:2f:60:20:f5:4c:95:8d:bd:83:76:0f:57:
         57:76:d3:84:6f:5d:0a:d5:08:04:e9:4a:d9:04:bd:af:e6:aa:
         bb:4c:8d:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6lImTfNU2Tk3jEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4
NTEwMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
NDc1N2JlMzItNGNjZi00YzAyLWIzNjQtY2FmMGZlZDQ5NzYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9z1cEXB11dgAZKVmOhEigigSweIzm0bIsYE
Ls7944MtTsjyNWkuKBWJKLWMiwP03xrtrc4MAnCvbRMy8tccFs/1CBMU9nPl4FuN
/xI+NsbXxSNZCrLYoXMVCDX11YJmPpk+DSS0ZM4biuwZgFahljQboyGs4P1Wak2n
HjrP+5iNs5hKuILmUt/NJhWdkmbRBJT/fA/iwtV5p1q752Hbr0BvopdWol4tPCfH
fIjRaRv3LYMoLV1SYw3bHSA9iIBhN/F3uB7ShL9GvUTzlIMSkNvNDzLMTvyRsa9b
/6AwPeUglTzUNzaveMYuK37yc7QXcpYdF12Pjk9+vCjFuqCe+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG3Cccomje3Q1kUM646Sb/T3oYzGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi
ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvODhlMWMyM2YtMzI3MS0z
MmY3LTg4ZDEtMjRiOTM5NjhiNGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi
Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy
ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh
MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJi8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADLjoqSs+ZntN7d1Rg84PQ0HfA5V+aVaFxvwsJDAmQhue5Ry6afFUdkj
64oA3Ya3AHByP2mYfQcuKIWbArLUqRwwLyh2nA6wytla/u6FkO/iYdPSOfq88cRv
AInXqeXIjDS06qq0I40tgpRfPfaJQKeeEiuxndBFKhyhtv+L0OqOvXUGylaAViNT
qANof2my/j0a2q67LiBI68AFLo/XSgx7pzwvSsTGDJ9/prqX5KNSRsjUhsX5AR1c
R2o4728kFZPc0HMt2r3Qb9nkayRcBRKh+M2BLycAug9gADoQLy9gIPVMlY29g3YP
V1d204RvXQrVCATpStkEva/mqrtMjSc=
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:26:51 2026 by rpki-client