Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3836105c-1ccf-3277-909b-3220537c6f32.roa
File:                     3836105c-1ccf-3277-909b-3220537c6f32.roa (raw, json)
Hash identifier:          UIcs58xRv3RqYBoBpdRGSzD1Bc7q6Gw1ZrnSXvHB5MM=
Subject key identifier:   15:D4:BD:BF:69:CA:8E:37:65:7D:D2:78:BE:96:95:71:AF:A4:AF:A1
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584E131983F73AC99846F1D88C00
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3836105c-1ccf-3277-909b-3220537c6f32.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     54994
IP address blocks:        157.185.143.0/24 maxlen: 24
                          157.185.146.0/24 maxlen: 24
                          157.185.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:83:f7:3a:c9:98:46:f1:d8:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=19c180fb-b8d1-491e-8386-9734c450ed1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c6:6a:b2:a3:35:3a:12:ec:bc:2e:ad:ef:fb:
                    9c:31:6d:91:4a:0d:56:87:e0:bd:7e:2f:c6:8d:0b:
                    20:f4:6c:3c:85:62:77:9f:95:c7:52:df:ac:d3:28:
                    bd:22:33:ed:e8:36:89:87:34:76:7b:44:ea:ef:4d:
                    74:aa:bd:2b:38:f0:4e:ba:64:b7:b4:a6:3c:84:27:
                    63:d4:d7:62:04:80:31:5f:89:ec:2a:ad:f8:f8:44:
                    a7:a8:87:b3:c3:e5:86:7d:5f:69:91:ed:a6:16:c7:
                    80:9f:6e:f0:b3:a4:68:e8:0d:94:ac:9f:ab:33:b1:
                    6f:e0:30:d7:47:85:d7:b3:fc:2d:a9:05:d4:ee:ab:
                    8b:d6:25:22:64:2d:d9:c4:65:52:33:75:92:19:94:
                    5c:cf:87:54:0e:03:27:ed:f0:1d:4c:65:26:aa:f8:
                    3d:eb:f1:59:44:07:af:82:48:37:8c:3e:2e:f2:c4:
                    11:53:f7:18:7d:9e:84:98:9c:0f:79:57:e9:57:5e:
                    71:48:27:f8:69:9a:99:a8:75:4e:4d:fc:cf:64:f8:
                    3a:d6:c3:01:46:7f:dc:95:1a:c5:dd:7e:e8:cc:95:
                    b5:46:df:f0:cd:56:73:dd:43:47:5e:b0:23:fb:15:
                    a1:f1:fe:51:13:19:0b:75:af:c3:ef:85:5e:cd:79:
                    ae:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D4:BD:BF:69:CA:8E:37:65:7D:D2:78:BE:96:95:71:AF:A4:AF:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3836105c-1ccf-3277-909b-3220537c6f32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.185.143.0/24
                  157.185.146.0/24
                  157.185.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:75:4a:aa:4b:37:db:a5:7d:ad:dd:8d:c0:24:f7:a5:fe:f6:
         f9:7a:74:80:6a:18:f4:d8:46:0b:c7:8b:56:93:24:c6:25:78:
         56:cf:47:41:cd:f9:24:3b:9d:2c:83:a0:3b:22:9d:d7:e3:a0:
         93:1f:0a:20:aa:9c:a0:9b:2f:c7:f9:1b:e9:21:54:60:c7:05:
         b9:bc:2b:36:aa:d6:16:d6:3d:25:b2:fb:5c:20:0f:9a:fd:1d:
         dc:04:db:6e:7c:15:52:d0:69:fb:21:7b:c0:d6:98:9c:c2:95:
         a5:6f:f2:8c:7e:2e:c5:f2:42:58:04:f6:94:38:0e:94:ba:7b:
         a0:68:7f:c9:c8:70:4d:ec:b1:03:0b:ae:94:54:91:91:73:5a:
         93:89:73:a5:1f:e6:a6:92:ae:25:16:6f:1a:92:73:2b:3b:ac:
         ea:dd:ad:22:39:62:09:99:30:e7:b5:15:3a:61:ed:b1:a3:67:
         7f:24:88:b7:1c:e1:f5:db:e6:9d:49:32:4c:5d:ae:f9:ce:0e:
         85:55:ea:99:64:f7:3d:26:9c:12:06:2b:f0:a0:38:9a:10:fd:
         0d:be:54:68:78:00:49:b6:25:6d:81:7c:ba:62:0b:73:3b:1d:
         21:50:ef:e8:0b:26:51:96:96:93:06:e3:5e:d1:85:d4:9c:9d:
         a8:2a:97:27
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE4TGYP3OsmYRvHYjAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy
ZDFiMB4XDTI2MDYwNTIxMDAxMloXDTI2MDkwMzIxMDAxMlowLzEtMCsGA1UEAxMk
MTljMTgwZmItYjhkMS00OTFlLTgzODYtOTczNGM0NTBlZDFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8ZqsqM1OhLsvC6t7/ucMW2RSg1Wh+C9fi/G
jQsg9Gw8hWJ3n5XHUt+s0yi9IjPt6DaJhzR2e0Tq7010qr0rOPBOumS3tKY8hCdj
1NdiBIAxX4nsKq34+ESnqIezw+WGfV9pke2mFseAn27ws6Ro6A2UrJ+rM7Fv4DDX
R4XXs/wtqQXU7quL1iUiZC3ZxGVSM3WSGZRcz4dUDgMn7fAdTGUmqvg96/FZRAev
gkg3jD4u8sQRU/cYfZ6EmJwPeVfpV15xSCf4aZqZqHVOTfzPZPg61sMBRn/clRrF
3X7ozJW1Rt/wzVZz3UNHXrAj+xWh8f5RExkLda/D74VezXmuEQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFBXUvb9pyo43ZX3SeL6WlXGvpK+hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi
YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvMzgzNjEwNWMtMWNjZi0z
Mjc3LTkwOWItMzIyMDUzN2M2ZjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj
N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw
MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw
YWY5MDJkMWIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAnbmPAwQA
nbmSAwQAnbm6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAD91SqpLN9ulfa3djcAk96X+9vl6dIBqGPTYRgvH
i1aTJMYleFbPR0HN+SQ7nSyDoDsindfjoJMfCiCqnKCbL8f5G+khVGDHBbm8Kzaq
1hbWPSWy+1wgD5r9HdwE2258FVLQafshe8DWmJzClaVv8ox+LsXyQlgE9pQ4DpS6
e6Bof8nIcE3ssQMLrpRUkZFzWpOJc6Uf5qaSriUWbxqScys7rOrdrSI5YgmZMOe1
FTph7bGjZ38kiLcc4fXb5p1JMkxdrvnODoVV6plk9z0mnBIGK/CgOJoQ/Q2+VGh4
AEm2JW2BfLpiC3M7HSFQ7+gLJlGWlpMG417RhdScnagqlyc=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:50:41 2026 by rpki-client