Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0483fbc3-32be-3bbe-8b50-8cf492bc0a44.roa
File:                     0483fbc3-32be-3bbe-8b50-8cf492bc0a44.roa (raw, json)
Hash identifier:          Z8GGXo2gs+R4jZpsY5s2eVQEtI+coU8LrSdqnnG6lZc=
Subject key identifier:   C4:15:DF:9C:22:52:CB:50:5A:E3:5F:06:85:94:9E:8D:EF:B9:A5:62
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584D6EDA5E8C1FE441D578C11B28
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0483fbc3-32be-3bbe-8b50-8cf492bc0a44.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     19437
IP address blocks:        131.153.129.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:5e:8c:1f:e4:41:d5:78:c1:1b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=513e4a9d-0692-486e-87b1-c5bbc6e0fe09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6a:cb:5d:67:d9:f9:0e:4e:74:8d:57:59:3e:
                    c1:89:f6:7c:a4:08:5f:2f:2d:45:cd:92:03:38:87:
                    06:28:68:60:fc:a0:3b:86:c4:05:31:1d:b1:30:69:
                    61:26:67:ec:38:4f:c9:01:2c:0a:15:b8:3d:86:74:
                    93:e6:9c:88:aa:23:49:75:7c:3f:fa:e8:89:fd:87:
                    4d:86:90:f0:80:31:d4:02:96:80:18:b1:ac:f2:12:
                    93:59:57:90:4c:7d:b5:82:aa:e5:f1:17:d1:61:9f:
                    b5:89:87:ff:71:9e:84:1c:18:f1:c9:97:58:df:1d:
                    c7:06:00:12:51:f5:5a:6c:5f:9a:78:40:e0:9b:ed:
                    27:15:82:93:2d:11:ea:02:df:43:2e:54:33:7d:b6:
                    0f:35:94:ba:a7:a9:bf:cb:02:4c:25:1c:51:cc:9b:
                    50:f4:72:6c:6b:4f:53:ee:20:05:2f:16:20:c2:3c:
                    97:3d:e6:bb:f5:53:5a:a3:c8:56:58:8c:3c:8a:62:
                    9f:68:e4:e2:d4:1a:0e:41:50:cc:b2:f8:f0:a3:ff:
                    ed:40:33:6d:e9:12:3d:ed:7b:d3:ba:a7:84:f7:16:
                    88:48:3d:d4:11:99:9d:33:0d:b3:33:2a:3e:f8:02:
                    e5:d2:6b:7f:fa:d5:63:12:5e:65:19:6d:d4:71:77:
                    57:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:15:DF:9C:22:52:CB:50:5A:E3:5F:06:85:94:9E:8D:EF:B9:A5:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0483fbc3-32be-3bbe-8b50-8cf492bc0a44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:31:af:56:de:4f:16:29:6d:2d:7f:07:ae:18:50:2d:90:0f:
         b5:e8:8f:41:60:17:35:ec:cd:a7:74:5e:8b:25:2a:db:61:1b:
         0a:3a:19:21:b4:98:7b:e9:fa:a4:4b:fe:7b:4d:55:cc:23:88:
         c4:42:57:4f:3c:3a:44:2f:66:76:45:35:a0:93:b8:6b:f1:11:
         6e:9b:2a:fb:71:63:0f:f7:92:2e:3f:bb:05:3b:71:a7:00:5e:
         06:77:70:6c:36:7a:69:4c:42:17:c6:1a:c0:7f:50:1d:98:12:
         3f:87:f0:a1:19:29:7f:e4:22:ac:23:0c:d0:e8:34:cd:90:aa:
         1f:a7:a4:d4:d1:9f:da:c9:7b:31:58:34:6a:bd:ed:a6:80:5d:
         04:bd:99:00:f0:47:2d:e4:da:4f:0b:54:47:9e:e6:29:b7:dd:
         28:27:5c:6d:3d:3f:44:ef:80:2a:cc:97:80:22:cc:9f:1b:71:
         fe:9a:e2:3d:85:67:f0:64:a3:9f:cb:b3:25:ee:15:28:70:a4:
         2e:80:7a:51:6e:73:ec:22:34:22:5e:35:d1:93:b6:a6:c9:cd:
         bd:bb:ef:ed:ed:64:68:c7:d1:d7:1c:20:02:2a:c9:57:bf:e9:
         74:97:6b:9d:4e:f1:01:e4:bd:23:47:37:73:02:cf:0a:ea:61:
         77:d4:61:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2l6MH+RB1XjBGygwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk
NTEzZTRhOWQtMDY5Mi00ODZlLTg3YjEtYzViYmM2ZTBmZTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2rLXWfZ+Q5OdI1XWT7BifZ8pAhfLy1FzZID
OIcGKGhg/KA7hsQFMR2xMGlhJmfsOE/JASwKFbg9hnST5pyIqiNJdXw/+uiJ/YdN
hpDwgDHUApaAGLGs8hKTWVeQTH21gqrl8RfRYZ+1iYf/cZ6EHBjxyZdY3x3HBgAS
UfVabF+aeEDgm+0nFYKTLRHqAt9DLlQzfbYPNZS6p6m/ywJMJRxRzJtQ9HJsa09T
7iAFLxYgwjyXPea79VNao8hWWIw8imKfaOTi1BoOQVDMsvjwo//tQDNt6RI97XvT
uqeE9xaISD3UEZmdMw2zMyo++ALl0mt/+tVjEl5lGW3UcXdX1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMQV35wiUstQWuNfBoWUno3vuaViMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMDQ4M2ZiYzMtMzJiZS0z
YmJlLThiNTAtOGNmNDkyYmMwYTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5mBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADwxr1beTxYpbS1/B64YUC2QD7Xoj0FgFzXszad0XoslKtthGwo6GSG0
mHvp+qRL/ntNVcwjiMRCV088OkQvZnZFNaCTuGvxEW6bKvtxYw/3ki4/uwU7cacA
XgZ3cGw2emlMQhfGGsB/UB2YEj+H8KEZKX/kIqwjDNDoNM2Qqh+npNTRn9rJezFY
NGq97aaAXQS9mQDwRy3k2k8LVEee5im33SgnXG09P0TvgCrMl4AizJ8bcf6a4j2F
Z/Bko5/LsyXuFShwpC6AelFuc+wiNCJeNdGTtqbJzb277+3tZGjH0dccIAIqyVe/
6XSXa51O8QHkvSNHN3MCzwrqYXfUYcQ=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:01:21 2026 by rpki-client