Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ef37b5e7-b2bd-3b07-a4b2-0ff6d7c2f107.roa
File:                     ef37b5e7-b2bd-3b07-a4b2-0ff6d7c2f107.roa (raw, json)
Hash identifier:          8U+AS0eNn5rvZ+xF22EinfOLdk9pXVUVM2lFBMYypyY=
Subject key identifier:   B5:E8:AD:AD:EE:6F:FC:54:CA:50:3E:B3:61:72:5B:4D:61:B0:2D:F8
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584D6EDA5EA7C7F75613C4E81BC0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ef37b5e7-b2bd-3b07-a4b2-0ff6d7c2f107.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     12189
IP address blocks:        131.153.104.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:5e:a7:c7:f7:56:13:c4:e8:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=f1f29964-e607-4627-b98f-658d4e6268bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:31:7b:5a:cc:41:f6:5f:7f:46:13:32:7e:dc:
                    b1:9c:8b:b9:f8:dd:5b:8e:0d:7b:9c:e9:0d:dc:be:
                    f0:70:a8:53:ff:bf:3f:a5:46:a0:8d:eb:75:f6:be:
                    ea:4b:30:79:01:17:65:d4:97:0d:40:98:f1:16:38:
                    b7:4e:60:4f:f8:cb:75:e0:72:5b:3f:c7:a9:f6:a2:
                    21:bf:1c:c4:58:e5:5a:c3:10:60:84:7c:b0:73:8a:
                    c4:ea:1f:5c:61:25:ec:b8:32:40:f4:6b:cb:f9:fb:
                    02:c7:51:32:55:e4:0c:0d:01:c5:14:d8:4b:86:b0:
                    a4:cc:58:55:5f:39:1e:fc:94:40:0e:68:d6:19:c7:
                    50:bd:11:08:8c:bd:60:d4:72:12:76:5e:f8:56:de:
                    93:64:37:c4:2c:bf:d6:6c:3f:8c:50:ee:3d:f5:fc:
                    10:f5:53:78:03:1b:3e:e5:d8:86:d6:e2:99:ea:e0:
                    04:67:06:94:45:47:22:ad:d0:99:ac:aa:b6:75:87:
                    ef:ba:e7:a6:b0:53:5d:e6:e5:58:c1:f6:71:54:d2:
                    ac:9c:ab:2d:5c:9f:b6:10:4b:32:e6:c2:8f:a2:c2:
                    a7:0d:2e:c2:ac:61:3f:42:a2:17:24:63:28:e6:46:
                    2b:bf:eb:c9:f3:99:9a:06:86:db:ea:d1:7d:df:d5:
                    2a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E8:AD:AD:EE:6F:FC:54:CA:50:3E:B3:61:72:5B:4D:61:B0:2D:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ef37b5e7-b2bd-3b07-a4b2-0ff6d7c2f107.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:ba:ed:0d:56:cd:68:d3:2c:f4:be:5d:65:8f:f9:ec:b7:3c:
         68:b7:b8:af:b2:17:02:d8:41:3e:84:01:b2:7e:2b:46:ed:ae:
         ea:fa:4b:cb:a8:71:6b:42:10:26:d0:35:7b:86:e9:7f:59:bd:
         1e:86:b5:8e:65:bd:56:6a:f0:49:1e:0c:94:73:74:95:c1:34:
         d3:cf:ab:f9:79:b8:cc:eb:04:48:ea:5c:89:99:5f:ec:39:50:
         5c:9a:31:25:03:ab:50:97:16:9c:4b:b1:e5:32:9c:4c:4f:2d:
         29:f0:79:93:2c:03:dc:77:a4:c1:fc:b1:00:7c:6b:82:a2:7f:
         1e:a7:8c:56:69:2c:3e:06:77:18:a3:23:7f:73:c3:85:36:7a:
         60:3c:b3:82:8e:2e:a3:25:25:fa:85:03:5b:43:0c:e2:a7:54:
         f7:cd:f4:05:54:0d:32:7d:18:17:44:3f:25:76:98:d8:e1:2c:
         8a:21:25:3c:e6:7a:08:22:c1:e8:aa:1c:2b:0c:9e:e0:41:3d:
         6c:f3:ed:2e:b8:62:bc:75:6b:13:66:32:47:63:aa:81:6e:d6:
         b6:60:4a:31:82:8b:3c:00:5c:f6:82:fd:09:7c:9d:a4:d5:b6:
         db:81:42:86:20:da:6a:e7:07:87:92:f2:b5:b8:f6:70:33:69:
         8e:cd:93:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2l6nx/dWE8ToG8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk
ZjFmMjk5NjQtZTYwNy00NjI3LWI5OGYtNjU4ZDRlNjI2OGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzF7WsxB9l9/RhMyftyxnIu5+N1bjg17nOkN
3L7wcKhT/78/pUagjet19r7qSzB5ARdl1JcNQJjxFji3TmBP+Mt14HJbP8ep9qIh
vxzEWOVawxBghHywc4rE6h9cYSXsuDJA9GvL+fsCx1EyVeQMDQHFFNhLhrCkzFhV
Xzke/JRADmjWGcdQvREIjL1g1HISdl74Vt6TZDfELL/WbD+MUO499fwQ9VN4Axs+
5diG1uKZ6uAEZwaURUcirdCZrKq2dYfvuuemsFNd5uVYwfZxVNKsnKstXJ+2EEsy
5sKPosKnDS7CrGE/QqIXJGMo5kYrv+vJ85maBobb6tF939UqeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLXora3ub/xUylA+s2FyW01hsC34MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZWYzN2I1ZTctYjJiZC0z
YjA3LWE0YjItMGZmNmQ3YzJmMTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5loMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFy67Q1WzWjTLPS+XWWP+ey3PGi3uK+yFwLYQT6EAbJ+K0btrur6S8uo
cWtCECbQNXuG6X9ZvR6GtY5lvVZq8EkeDJRzdJXBNNPPq/l5uMzrBEjqXImZX+w5
UFyaMSUDq1CXFpxLseUynExPLSnweZMsA9x3pMH8sQB8a4Kifx6njFZpLD4Gdxij
I39zw4U2emA8s4KOLqMlJfqFA1tDDOKnVPfN9AVUDTJ9GBdEPyV2mNjhLIohJTzm
eggiweiqHCsMnuBBPWzz7S64Yrx1axNmMkdjqoFu1rZgSjGCizwAXPaC/Ql8naTV
ttuBQoYg2mrnB4eS8rW49nAzaY7Nk+I=
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:35:40 2026 by rpki-client