Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a91395db-8f35-3e47-962d-19b64b128e81.roa
File:                     a91395db-8f35-3e47-962d-19b64b128e81.roa (raw, json)
Hash identifier:          +/hQeLiZ+RFw7ku85IFjMJUkx8sucYXqRdEcWdTurCM=
Subject key identifier:   B6:D1:41:E1:D8:AE:66:2C:64:FA:18:6D:FE:7A:02:E3:72:B6:01:4D
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F4328584D55BA38A16709A2DA7DA81A80
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a91395db-8f35-3e47-962d-19b64b128e81.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     55440
IP address blocks:        149.20.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:38:a1:67:09:a2:da:7d:a8:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=015fa955-410e-4c06-b0a8-35232daebec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:be:61:0a:bd:8a:29:df:f9:0e:0b:67:3a:80:
                    f7:e5:5e:86:57:4b:93:58:e5:b9:45:6a:9d:fd:1a:
                    a1:96:fc:a2:c7:d0:25:9a:ff:89:08:4e:9e:de:41:
                    16:91:c7:8b:09:a7:b1:24:50:f7:b5:9d:54:d2:50:
                    26:df:31:ae:6e:28:c6:02:e6:47:5f:2c:c6:6c:51:
                    fb:d6:e7:55:69:87:81:28:81:70:23:48:14:c6:46:
                    8d:2c:64:54:6f:7c:7f:b4:c4:14:96:02:ba:de:05:
                    3e:8d:53:3d:cc:f6:e5:60:48:e9:c7:ae:d1:47:59:
                    c6:db:1c:7e:97:2a:51:ad:4c:77:cb:6f:01:14:b5:
                    1c:02:ee:79:ed:cb:75:ca:4e:34:d2:ab:1a:a7:79:
                    f2:1e:2c:69:29:e5:6f:8b:75:d8:83:1b:a8:a8:41:
                    8c:9b:f9:70:16:d5:aa:a6:71:df:6b:bd:9a:0b:9a:
                    1c:00:6e:1f:39:61:ba:5d:90:9f:76:50:a2:7f:8d:
                    52:13:60:91:42:48:aa:b2:d5:09:58:47:6e:66:b1:
                    8c:06:3e:b3:d1:da:09:cc:ee:a3:aa:b5:c9:55:f3:
                    32:19:c1:20:f2:a4:69:66:14:d6:6f:ac:e9:85:9b:
                    d4:99:a2:f5:87:6f:fc:17:6b:d5:a1:4b:c8:a7:9b:
                    64:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D1:41:E1:D8:AE:66:2C:64:FA:18:6D:FE:7A:02:E3:72:B6:01:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/a91395db-8f35-3e47-962d-19b64b128e81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:c8:64:6f:8d:15:b6:c9:ab:cd:d2:eb:1f:7e:07:43:b4:8e:
         7c:c2:33:d1:74:a3:a1:9b:a2:65:27:d8:2c:6a:77:06:f4:5a:
         55:3a:8c:5c:43:2b:3b:90:52:73:28:23:81:df:46:74:9a:81:
         89:34:fa:52:b5:de:bc:c0:08:b3:77:01:d3:9e:33:a8:ac:fd:
         bc:e9:4d:0a:dd:44:8f:68:78:61:d1:ea:75:b9:e6:93:ff:fc:
         c6:0b:ac:20:9f:1b:5f:57:85:56:b3:f0:18:29:bc:42:6c:ea:
         af:77:d4:e7:f7:2c:d4:76:2d:3d:d3:fa:f4:58:33:3c:48:25:
         b8:cb:0d:1f:3e:3a:9b:c1:58:7e:83:f4:77:1f:c1:9a:af:dc:
         6a:1c:54:9a:d9:9a:d1:49:7a:f5:e4:f8:38:1b:59:cb:a0:64:
         2d:24:89:c3:58:1d:c0:33:76:9e:ea:d2:d7:d5:e0:83:54:9c:
         e4:9b:d2:64:ea:78:04:d9:41:bb:e6:98:84:01:6c:62:59:6d:
         2f:c4:ad:39:0c:8e:fe:1d:45:a7:e9:1c:b5:6e:72:a1:55:d4:
         b5:36:68:43:2f:0d:ee:ef:23:37:14:ed:b6:b1:76:3c:df:9c:
         67:39:44:a2:7b:24:69:f1:16:89:ae:c2:28:24:25:86:b6:b2:
         1b:a0:f8:5d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VujihZwmi2n2oGoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4
NTEwMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
MDE1ZmE5NTUtNDEwZS00YzA2LWIwYTgtMzUyMzJkYWViZWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4L5hCr2KKd/5DgtnOoD35V6GV0uTWOW5RWqd
/Rqhlvyix9Almv+JCE6e3kEWkceLCaexJFD3tZ1U0lAm3zGubijGAuZHXyzGbFH7
1udVaYeBKIFwI0gUxkaNLGRUb3x/tMQUlgK63gU+jVM9zPblYEjpx67RR1nG2xx+
lypRrUx3y28BFLUcAu557ct1yk400qsap3nyHixpKeVvi3XYgxuoqEGMm/lwFtWq
pnHfa72aC5ocAG4fOWG6XZCfdlCif41SE2CRQkiqstUJWEduZrGMBj6z0doJzO6j
qrXJVfMyGcEg8qRpZhTWb6zphZvUmaL1h2/8F2vVoUvIp5tkQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLbRQeHYrmYsZPoYbf56AuNytgFNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi
ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvYTkxMzk1ZGItOGYzNS0z
ZTQ3LTk2MmQtMTliNjRiMTI4ZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi
Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy
ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh
MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRQLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJfIZG+NFbbJq83S6x9+B0O0jnzCM9F0o6GbomUn2Cxqdwb0WlU6jFxD
KzuQUnMoI4HfRnSagYk0+lK13rzACLN3AdOeM6is/bzpTQrdRI9oeGHR6nW55pP/
/MYLrCCfG19XhVaz8BgpvEJs6q931Of3LNR2LT3T+vRYMzxIJbjLDR8+OpvBWH6D
9HcfwZqv3GocVJrZmtFJevXk+DgbWcugZC0kicNYHcAzdp7q0tfV4INUnOSb0mTq
eATZQbvmmIQBbGJZbS/ErTkMjv4dRafpHLVucqFV1LU2aEMvDe7vIzcU7baxdjzf
nGc5RKJ7JGnxFomuwigkJYa2shug+F0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 02:01:15 2026 by rpki-client