Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/15d723b0-2ac4-355b-9b80-4009a2416282.roa
File:                     15d723b0-2ac4-355b-9b80-4009a2416282.roa (raw, json)
Hash identifier:          Dlz/i/jIRcYdMiAziSo6snZqHCca+emln2BXPRddvuE=
Subject key identifier:   7A:AF:DC:FC:03:2C:D0:7C:27:FC:32:E9:18:B7:0A:57:7A:34:22:69
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584D703FD4207454F13B3025E600
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/15d723b0-2ac4-355b-9b80-4009a2416282.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     19437
IP address blocks:        131.153.176.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:d4:20:74:54:f1:3b:30:25:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=475eb6a4-810e-48a0-adc0-be968210ad87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4c:e9:20:5f:3f:17:8b:a3:2b:8b:24:d0:74:
                    a9:7f:26:ae:70:a3:7f:86:c3:df:7d:66:7e:1e:df:
                    f6:a4:93:2e:05:6c:00:f3:56:bd:b9:5c:e0:41:46:
                    b0:1c:17:5c:fa:78:6a:27:8e:d1:5a:62:29:7c:f8:
                    95:e6:a6:66:ab:27:ea:4d:86:78:86:29:d4:9d:67:
                    68:35:8d:06:c4:21:31:98:b7:07:cd:72:07:9b:d7:
                    83:37:35:d6:eb:58:f2:5b:3d:df:84:97:e3:a7:69:
                    4e:63:af:4e:f5:98:49:0c:dc:c4:38:8d:5e:4a:0f:
                    19:19:0f:db:84:55:67:77:e3:82:8f:d4:85:1e:ca:
                    c9:79:c6:45:af:af:4d:f7:2c:3c:f3:13:e9:cb:cb:
                    d7:08:ae:48:47:8d:b1:4d:3e:c1:1c:89:6d:c7:cb:
                    80:50:07:c0:26:fc:5f:3d:83:d6:b8:02:27:36:54:
                    ee:41:67:2c:ec:69:10:4a:dd:2a:1b:19:13:a1:f8:
                    e1:2d:fa:5c:53:0a:5a:4f:31:f7:2e:4e:8c:35:ab:
                    85:43:eb:c0:00:fe:ce:59:12:81:28:91:f2:b3:14:
                    0a:4a:cc:62:15:69:27:00:08:e1:9b:99:4c:90:06:
                    33:35:54:da:46:96:a2:bf:ba:b7:bc:6b:ba:c7:20:
                    6b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:AF:DC:FC:03:2C:D0:7C:27:FC:32:E9:18:B7:0A:57:7A:34:22:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/15d723b0-2ac4-355b-9b80-4009a2416282.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:44:b0:ad:b2:67:91:00:36:45:65:62:db:fc:56:cd:e6:5e:
         98:ef:70:ea:5c:43:ea:4a:d2:58:0d:a9:05:81:92:23:f5:78:
         73:df:04:75:2d:75:01:31:67:cf:9b:70:21:51:cf:19:ee:b6:
         f9:1a:8c:07:be:fb:30:18:53:ca:73:44:98:b6:d7:14:79:9b:
         84:50:93:d8:10:6f:bb:ae:9c:1b:f3:7a:40:7f:d7:a2:32:d0:
         26:4e:30:13:9e:97:09:23:f6:bb:29:58:d8:8c:a5:8e:f9:a1:
         77:85:73:bc:31:97:65:b5:3f:ae:9a:7f:27:1c:b8:45:44:24:
         d6:c8:06:f5:4d:ce:70:c4:b7:d4:3d:ce:1c:4f:2f:a7:ad:fd:
         96:69:2e:b6:6c:e8:65:09:3c:ef:0b:b4:46:29:90:79:6e:dc:
         19:28:53:2e:5c:8a:0e:bc:6c:aa:5a:6a:60:9d:3b:51:71:e1:
         81:3a:e3:82:f9:d4:d6:32:9f:41:1d:e9:5e:8d:bb:79:00:df:
         5f:c8:52:18:d4:2a:40:7a:1f:f4:3b:6c:25:0c:67:a9:2f:65:
         48:52:a5:5e:4f:68:03:ea:f5:df:0d:01:4a:16:58:47:38:3f:
         e4:af:50:d6:2c:2a:e3:b2:dc:1a:df:83:26:89:9c:33:81:1b:
         30:dd:3d:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP9QgdFTxOzAl5gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk
NDc1ZWI2YTQtODEwZS00OGEwLWFkYzAtYmU5NjgyMTBhZDg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUzpIF8/F4ujK4sk0HSpfyaucKN/hsPffWZ+
Ht/2pJMuBWwA81a9uVzgQUawHBdc+nhqJ47RWmIpfPiV5qZmqyfqTYZ4hinUnWdo
NY0GxCExmLcHzXIHm9eDNzXW61jyWz3fhJfjp2lOY69O9ZhJDNzEOI1eSg8ZGQ/b
hFVnd+OCj9SFHsrJecZFr69N9yw88xPpy8vXCK5IR42xTT7BHIltx8uAUAfAJvxf
PYPWuAInNlTuQWcs7GkQSt0qGxkTofjhLfpcUwpaTzH3Lk6MNauFQ+vAAP7OWRKB
KJHysxQKSsxiFWknAAjhm5lMkAYzNVTaRpaiv7q3vGu6xyBr4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHqv3PwDLNB8J/wy6Ri3Cld6NCJpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMTVkNzIzYjAtMmFjNC0z
NTViLTliODAtNDAwOWEyNDE2MjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEg5mwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHVEsK2yZ5EANkVlYtv8Vs3mXpjvcOpcQ+pK0lgNqQWBkiP1eHPfBHUt
dQExZ8+bcCFRzxnutvkajAe++zAYU8pzRJi21xR5m4RQk9gQb7uunBvzekB/16Iy
0CZOMBOelwkj9rspWNiMpY75oXeFc7wxl2W1P66afyccuEVEJNbIBvVNznDEt9Q9
zhxPL6et/ZZpLrZs6GUJPO8LtEYpkHlu3BkoUy5cig68bKpaamCdO1Fx4YE644L5
1NYyn0Ed6V6Nu3kA31/IUhjUKkB6H/Q7bCUMZ6kvZUhSpV5PaAPq9d8NAUoWWEc4
P+SvUNYsKuOy3BrfgyaJnDOBGzDdPRY=
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:39:24 2026 by rpki-client