Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2982ab7f-d5ab-36ff-812b-91118ee4d9c0.roa
File:                     2982ab7f-d5ab-36ff-812b-91118ee4d9c0.roa (raw, json)
Hash identifier:          w/5wHdpD8qy+XxzxI25F9tBPxFTwkiwv4mvImY0Hqi0=
Subject key identifier:   A0:1F:77:A8:9A:79:EE:5D:C0:15:46:D3:B5:AD:78:04:97:98:80:C5
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584E147EED128F67AEA37E32E380
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2982ab7f-d5ab-36ff-812b-91118ee4d9c0.roa
Signing time:             Sat 06 Jun 2026 09:00:12 +0000
ROA not before:           Sat 06 Jun 2026 09:00:12 +0000
ROA not after:            Fri 04 Sep 2026 09:00:12 +0000
asID:                     54994
IP address blocks:        153.43.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:14:7e:ed:12:8f:67:ae:a3:7e:32:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Jun  6 09:00:12 2026 GMT
            Not After : Sep  4 09:00:12 2026 GMT
        Subject: CN=f8677209-3f1c-41ba-bd9c-882e14128160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:96:44:99:0f:0a:5f:0a:39:4b:92:12:01:92:
                    ad:bc:33:b9:f0:ee:c3:1e:e4:cf:0b:06:10:65:d6:
                    76:d9:46:48:fa:73:cd:5f:fb:3c:1f:94:cd:ad:fa:
                    d9:9f:29:ba:ee:3a:2e:9e:b1:7b:7d:69:ad:b2:4d:
                    75:f9:72:9c:04:c5:68:13:83:22:da:80:c9:ee:74:
                    ab:a5:9a:00:85:e6:8b:c6:e1:2a:cd:09:59:a2:e0:
                    79:33:07:36:00:45:45:ce:5c:41:3b:49:63:39:51:
                    c9:81:c8:a3:35:0d:fc:1a:50:12:c0:1d:a1:91:c1:
                    c3:a5:52:8e:08:cf:29:fb:cb:c0:23:e3:b8:ee:c3:
                    bb:be:ea:97:0c:e3:d3:84:12:35:15:67:65:4a:73:
                    ae:b3:10:b1:38:21:0a:40:66:5d:b1:5f:05:44:66:
                    06:c5:6d:40:42:75:61:18:f0:7c:19:16:2e:8c:58:
                    17:c8:b9:33:7a:27:b0:f1:2d:4d:5a:5a:83:fd:95:
                    f3:df:0d:b6:db:ec:dc:2d:dd:7f:78:82:bd:42:3f:
                    95:aa:46:f7:8f:b1:5f:86:66:40:30:5f:fa:d5:4e:
                    88:81:47:31:1b:f8:f7:55:2f:d8:b6:49:ec:09:c1:
                    5a:53:e4:f1:85:a3:c7:9b:0d:58:8d:7a:34:b5:70:
                    2f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1F:77:A8:9A:79:EE:5D:C0:15:46:D3:B5:AD:78:04:97:98:80:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/2982ab7f-d5ab-36ff-812b-91118ee4d9c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.43.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:96:b5:88:49:34:f9:01:ad:74:09:2d:7f:e0:95:fe:9b:77:
         8a:b1:93:24:ab:16:4f:0a:0c:8c:67:46:9b:98:b3:19:5e:56:
         c7:47:0b:c0:e8:5c:6d:38:7f:e1:fe:1d:ad:a9:b4:82:d6:0f:
         4f:23:12:04:6f:91:71:05:44:20:ae:31:c8:0b:67:d6:45:7d:
         58:a6:21:ff:d8:02:ed:57:18:9b:93:59:94:58:0f:07:92:60:
         c8:a5:32:db:08:54:ef:a7:5d:71:08:5d:13:1c:18:de:97:d3:
         e2:1e:53:d2:d2:be:1c:92:1a:00:fd:5e:28:58:1f:46:d6:7d:
         92:c9:49:f7:5e:89:69:05:a6:87:38:99:53:62:9e:72:a5:b1:
         bc:e0:e0:5d:c0:bf:0a:4f:f2:87:bc:8a:c5:d6:43:c9:2e:6b:
         41:ed:b5:89:80:67:42:bf:fc:4f:77:0d:2f:24:f5:14:20:e3:
         e7:2e:9f:d5:e3:82:e5:f3:a6:48:3d:4b:64:1c:4e:fd:e3:f8:
         0b:0a:d8:2e:03:d6:9b:95:ec:69:7e:66:3b:0f:42:f7:e1:84:
         8e:b7:a6:28:84:f3:7f:36:33:48:e6:7f:18:88:43:3b:dd:64:
         a5:34:51:9e:c6:1e:d2:c0:60:a4:cb:4a:bf:45:00:14:fc:b2:
         fe:43:65:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Ufu0Sj2euo34y44AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy
ZDFiMB4XDTI2MDYwNjA5MDAxMloXDTI2MDkwNDA5MDAxMlowLzEtMCsGA1UEAxMk
Zjg2NzcyMDktM2YxYy00MWJhLWJkOWMtODgyZTE0MTI4MTYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZZEmQ8KXwo5S5ISAZKtvDO58O7DHuTPCwYQ
ZdZ22UZI+nPNX/s8H5TNrfrZnym67jounrF7fWmtsk11+XKcBMVoE4Mi2oDJ7nSr
pZoAheaLxuEqzQlZouB5Mwc2AEVFzlxBO0ljOVHJgcijNQ38GlASwB2hkcHDpVKO
CM8p+8vAI+O47sO7vuqXDOPThBI1FWdlSnOusxCxOCEKQGZdsV8FRGYGxW1AQnVh
GPB8GRYujFgXyLkzeiew8S1NWlqD/ZXz3w222+zcLd1/eIK9Qj+Vqkb3j7FfhmZA
MF/61U6IgUcxG/j3VS/YtknsCcFaU+TxhaPHmw1YjXo0tXAvVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKAfd6iaee5dwBVG07WteASXmIDFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi
YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMjk4MmFiN2YtZDVhYi0z
NmZmLTgxMmItOTExMThlZTRkOWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj
N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw
MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw
YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmStJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFSWtYhJNPkBrXQJLX/glf6bd4qxkySrFk8KDIxnRpuYsxleVsdHC8Do
XG04f+H+Ha2ptILWD08jEgRvkXEFRCCuMcgLZ9ZFfVimIf/YAu1XGJuTWZRYDweS
YMilMtsIVO+nXXEIXRMcGN6X0+IeU9LSvhySGgD9XihYH0bWfZLJSfdeiWkFpoc4
mVNinnKlsbzg4F3AvwpP8oe8isXWQ8kua0HttYmAZ0K//E93DS8k9RQg4+cun9Xj
guXzpkg9S2QcTv3j+AsK2C4D1puV7Gl+ZjsPQvfhhI63piiE8382M0jmfxiIQzvd
ZKU0UZ7GHtLAYKTLSr9FABT8sv5DZfo=
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:04:57 2026 by rpki-client