Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d498f1ad-6550-3118-8da5-441323aa3937.roa
File:                     d498f1ad-6550-3118-8da5-441323aa3937.roa (raw, json)
Hash identifier:          lwxTRa15KWJU7hl/d6+APcyFMWj2KTsqVJyLA+nfang=
Subject key identifier:   30:12:60:EC:10:39:E4:68:5D:B9:0E:D3:4A:84:B1:D9:BE:75:3F:B8
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584D6EDA5C6D7DBB35446FF8E480
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d498f1ad-6550-3118-8da5-441323aa3937.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     20454
IP address blocks:        131.153.37.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:5c:6d:7d:bb:35:44:6f:f8:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=20cf60de-0fed-4732-b7db-4f2b7ed8c6b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:67:d0:b8:5c:99:6a:9d:4f:09:62:47:3a:e2:
                    40:82:85:cf:d1:9a:ee:07:e3:bd:e1:eb:bf:03:82:
                    d1:cf:4e:c0:4f:b2:83:40:fe:09:27:27:1a:9a:2a:
                    08:ca:10:52:42:66:be:52:29:cd:e1:01:fe:54:02:
                    17:7a:b4:b6:6e:0f:a4:f2:73:b9:1b:46:12:06:ad:
                    bb:e5:a3:9e:df:4b:ec:a8:8a:b1:8f:75:ce:55:62:
                    9e:1f:b8:8e:73:b2:7a:c2:3a:e0:fd:54:14:3c:4c:
                    b0:4b:5f:a8:3a:d2:26:c2:9a:e4:af:36:41:4b:49:
                    fc:95:5c:f4:a7:2e:f0:63:8f:1c:f3:6e:85:ad:bc:
                    88:fc:69:0c:6a:20:33:40:a2:7b:57:d2:2f:74:c0:
                    e6:78:d8:49:82:56:be:76:0c:5d:f9:80:9a:40:00:
                    16:3c:7b:8a:91:5b:4c:8d:ef:e0:e7:e0:aa:cd:33:
                    e0:5b:63:d9:ad:9f:5d:86:70:21:43:4d:08:c3:af:
                    fc:31:33:d1:ee:9a:11:39:20:55:ef:ca:6c:84:9a:
                    bf:71:3a:a2:67:57:f0:5d:fd:f3:e1:ec:5f:7a:b6:
                    41:8c:a6:01:eb:59:ae:0b:b3:d3:92:45:36:7f:fd:
                    09:3a:ba:a7:ef:c4:7b:54:18:a8:7a:b2:b2:ed:5d:
                    30:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:12:60:EC:10:39:E4:68:5D:B9:0E:D3:4A:84:B1:D9:BE:75:3F:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d498f1ad-6550-3118-8da5-441323aa3937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:b8:40:e9:66:f5:aa:2c:bd:58:0e:6c:31:d0:88:e9:24:66:
         f7:b0:60:d1:40:d1:d2:07:b9:47:78:cd:a1:d8:4e:19:7f:6a:
         04:21:f2:25:98:e1:f7:da:25:d6:4b:98:22:52:bd:b6:81:31:
         67:d2:a7:a6:66:54:9a:07:db:19:58:f7:6a:8a:32:09:56:6a:
         15:55:20:d0:1d:28:38:51:3b:cf:bc:02:cb:71:49:8f:41:23:
         89:c3:f7:0e:8c:0e:26:2a:c7:a4:09:62:17:85:c4:30:02:0e:
         fb:3e:91:0d:86:69:21:0b:3d:be:42:17:83:17:7f:a7:bb:98:
         8d:e5:3e:38:ab:e2:28:73:88:2c:fe:d0:f8:22:ab:cf:cb:2f:
         93:5a:39:28:00:b0:4c:5a:d0:fe:ee:d4:f5:90:f6:cc:6b:04:
         77:a0:9a:4b:01:92:04:e7:53:be:f9:3a:b8:0d:a5:1c:3f:61:
         3d:e1:bc:e8:40:20:99:ca:7b:23:1c:9e:5b:a8:3f:ba:f0:eb:
         e1:72:a2:77:cc:99:6d:1e:97:3c:29:8c:21:a5:df:fb:ff:3b:
         f5:93:8d:fc:eb:ea:95:4b:02:6a:ba:92:74:d2:c1:9c:42:05:
         2c:4f:bd:85:03:b6:2f:35:f4:1a:5b:f4:fe:ec:1a:fd:8f:39:
         37:61:5f:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2lxtfbs1RG/45IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk
MjBjZjYwZGUtMGZlZC00NzMyLWI3ZGItNGYyYjdlZDhjNmIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9mfQuFyZap1PCWJHOuJAgoXP0ZruB+O94eu/
A4LRz07AT7KDQP4JJycamioIyhBSQma+UinN4QH+VAIXerS2bg+k8nO5G0YSBq27
5aOe30vsqIqxj3XOVWKeH7iOc7J6wjrg/VQUPEywS1+oOtImwprkrzZBS0n8lVz0
py7wY48c826FrbyI/GkMaiAzQKJ7V9IvdMDmeNhJgla+dgxd+YCaQAAWPHuKkVtM
je/g5+CqzTPgW2PZrZ9dhnAhQ00Iw6/8MTPR7poROSBV78pshJq/cTqiZ1fwXf3z
4exferZBjKYB61muC7PTkkU2f/0JOrqn78R7VBioerKy7V0wNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDASYOwQOeRoXbkO00qEsdm+dT+4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZDQ5OGYxYWQtNjU1MC0z
MTE4LThkYTUtNDQxMzIzYWEzOTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5klMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIS4QOlm9aosvVgObDHQiOkkZvewYNFA0dIHuUd4zaHYThl/agQh8iWY
4ffaJdZLmCJSvbaBMWfSp6ZmVJoH2xlY92qKMglWahVVINAdKDhRO8+8AstxSY9B
I4nD9w6MDiYqx6QJYheFxDACDvs+kQ2GaSELPb5CF4MXf6e7mI3lPjir4ihziCz+
0Pgiq8/LL5NaOSgAsExa0P7u1PWQ9sxrBHegmksBkgTnU775OrgNpRw/YT3hvOhA
IJnKeyMcnluoP7rw6+FyonfMmW0elzwpjCGl3/v/O/WTjfzr6pVLAmq6knTSwZxC
BSxPvYUDti819Bpb9P7sGv2POTdhX4E=
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:46:49 2026 by rpki-client