Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/ddf92426-c74a-3529-91b2-c28db4d5675c.roa
File:                     ddf92426-c74a-3529-91b2-c28db4d5675c.roa (raw, json)
Hash identifier:          E2rucmvTIuetiWkH0Of2Z4l5Faxh+GldG+oj/Hprf+g=
Subject key identifier:   B5:AE:A2:7B:83:F3:14:D3:D0:93:83:2B:6A:85:6B:7C:22:17:C6:DB
Certificate issuer:       /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
Certificate serial:       010D0C9F4328584E0D0961998F7E2B2F878CEBC0
Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/ddf92426-c74a-3529-91b2-c28db4d5675c.roa
Signing time:             Wed 03 Jun 2026 16:52:55 +0000
ROA not before:           Wed 03 Jun 2026 16:52:55 +0000
ROA not after:            Tue 01 Sep 2026 16:52:55 +0000
asID:                     203113
IP address blocks:        192.137.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:09:61:99:8f:7e:2b:2f:87:8c:eb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
        Validity
            Not Before: Jun  3 16:52:55 2026 GMT
            Not After : Sep  1 16:52:55 2026 GMT
        Subject: CN=ef2c981c-6c1a-436f-8236-86533639f279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:93:8f:4c:1e:59:6a:08:cf:6d:06:ea:4c:b3:
                    d1:37:e7:31:8a:bd:b1:75:b5:cd:e6:bc:8b:4e:6d:
                    42:82:9a:44:0a:95:7a:b1:87:ca:09:41:e2:bb:53:
                    ec:aa:57:c9:f6:2b:12:e8:f1:6e:26:48:a9:05:47:
                    0a:1d:2b:c8:9a:49:73:49:08:dc:46:c1:d2:e8:a3:
                    70:66:45:c6:a9:5a:8d:c7:fe:1c:81:41:16:17:f8:
                    b3:bd:35:07:01:25:5a:25:23:2a:01:06:2b:cf:c3:
                    81:32:ec:7a:5b:f2:85:1e:cd:4c:25:77:0f:61:a7:
                    f9:fa:60:ee:62:94:41:a3:00:39:d8:45:22:e1:92:
                    27:c5:b4:fa:61:f3:3b:fa:65:95:e3:24:2e:1c:4b:
                    37:83:e8:b2:c6:e6:f2:ad:cd:8f:13:df:ef:b7:27:
                    c3:57:e6:c0:08:a9:be:90:91:45:ce:8a:a2:6e:ff:
                    7b:78:46:69:31:87:7e:3a:48:00:96:b4:50:89:db:
                    eb:17:8d:e6:3d:d6:46:37:f2:63:bb:41:3f:83:97:
                    bc:3e:8e:c1:8f:19:58:1f:bf:2e:66:25:d2:9c:fc:
                    9b:6c:d7:c8:28:f2:68:52:80:a8:9a:15:33:58:3d:
                    ee:47:a9:e4:e6:29:9f:dc:6e:dc:41:ae:7a:14:5c:
                    c5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AE:A2:7B:83:F3:14:D3:D0:93:83:2B:6A:85:6B:7C:22:17:C6:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/ddf92426-c74a-3529-91b2-c28db4d5675c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl

            X509v3 Authority Key Identifier:
                keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.137.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:04:21:2b:03:5a:f4:4f:95:3c:9e:b7:9d:15:6a:4f:07:bf:
         99:a4:1e:69:2c:c5:73:fa:ec:a4:ee:7e:54:ca:29:87:cb:b0:
         44:69:9e:88:e1:91:79:ef:0f:f9:25:b5:a5:3b:9d:3a:40:f9:
         a4:5a:23:94:68:a7:bb:f2:cd:ea:f2:be:6b:4c:d4:e6:9e:88:
         23:e0:bd:2e:d3:bd:67:34:88:02:ea:92:fb:67:44:1a:fe:38:
         0a:15:b6:fd:83:d6:18:06:c6:33:d5:b8:fe:91:03:f4:9a:6f:
         a9:e0:10:5f:ad:6e:73:a9:52:23:e3:28:12:9f:bd:52:fa:68:
         fc:fa:24:3e:d2:e8:59:f0:2d:b3:b9:08:b1:3e:5b:d9:e7:98:
         16:38:01:0e:e9:d5:0b:98:61:8b:f2:f3:90:52:52:05:ac:37:
         af:51:16:e4:2b:fb:42:ce:50:57:1c:0c:83:45:17:b0:d0:ce:
         12:c6:e2:9f:0a:8a:82:2f:1b:0c:31:0d:95:d1:2d:12:0d:42:
         9a:79:30:fd:4b:2d:6e:c2:c7:29:15:41:13:ab:48:a6:9e:25:
         b6:7f:23:85:0b:d0:52:65:1c:88:65:47:3f:a4:c6:be:7d:92:
         d4:22:2c:fa:cc:b0:a7:d3:3e:82:6a:06:72:1b:06:cf:8f:47:
         98:6f:9a:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4NCWGZj34rL4eM68AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWFlMDg3M2ItODU0MS00ZDZlLWI5MWMtMzZkYmJiZTUx
MDQzMB4XDTI2MDYwMzE2NTI1NVoXDTI2MDkwMTE2NTI1NVowLzEtMCsGA1UEAxMk
ZWYyYzk4MWMtNmMxYS00MzZmLTgyMzYtODY1MzM2MzlmMjc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZOPTB5ZagjPbQbqTLPRN+cxir2xdbXN5ryL
Tm1CgppECpV6sYfKCUHiu1PsqlfJ9isS6PFuJkipBUcKHSvImklzSQjcRsHS6KNw
ZkXGqVqNx/4cgUEWF/izvTUHASVaJSMqAQYrz8OBMux6W/KFHs1MJXcPYaf5+mDu
YpRBowA52EUi4ZInxbT6YfM7+mWV4yQuHEs3g+iyxubyrc2PE9/vtyfDV+bACKm+
kJFFzoqibv97eEZpMYd+OkgAlrRQidvrF43mPdZGN/Jju0E/g5e8Po7BjxlYH78u
ZiXSnPybbNfIKPJoUoComhUzWD3uR6nk5imf3G7cQa56FFzF+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLWuonuD8xTT0JODK2qFa3wiF8bbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUw
ODczYi04NTQxLTRkNmUtYjkxYy0zNmRiYmJlNTEwNDMvZGRmOTI0MjYtYzc0YS0z
NTI5LTkxYjItYzI4ZGI0ZDU2NzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWFlMDg3M2ItODU0MS00ZDZlLWI5
MWMtMzZkYmJiZTUxMDQzLzlhZTA4NzNiLTg1NDEtNGQ2ZS1iOTFjLTM2ZGJiYmU1
MTA0My5jcmwwHwYDVR0jBBgwFoAUWwqyXF4s4cEXnbXgEwh62rvNi20wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85YWUwODczYi04NTQxLTRkNmUtYjkxYy0zNmRi
YmJlNTEwNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIl4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAIEISsDWvRPlTyet50Vak8Hv5mkHmksxXP67KTuflTKKYfLsERpnojh
kXnvD/kltaU7nTpA+aRaI5Rop7vyzeryvmtM1OaeiCPgvS7TvWc0iALqkvtnRBr+
OAoVtv2D1hgGxjPVuP6RA/Sab6ngEF+tbnOpUiPjKBKfvVL6aPz6JD7S6FnwLbO5
CLE+W9nnmBY4AQ7p1QuYYYvy85BSUgWsN69RFuQr+0LOUFccDINFF7DQzhLG4p8K
ioIvGwwxDZXRLRINQpp5MP1LLW7CxykVQROrSKaeJbZ/I4UL0FJlHIhlRz+kxr59
ktQiLPrMsKfTPoJqBnIbBs+PR5hvmgo=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:34:56 2026 by rpki-client