Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8dd43141-ba8b-3af3-a7de-55bcd30512aa.roa
File:                     8dd43141-ba8b-3af3-a7de-55bcd30512aa.roa (raw, json)
Hash identifier:          c+62XhzMkvwSSe/t6hFwElYTGEo3a0OgQ43VJA0BOtM=
Subject key identifier:   19:92:ED:B0:BE:0F:56:14:9E:35:D2:BA:48:C4:3B:4C:B7:02:26:73
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584D71B7541AB90260010DA70CE0
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8dd43141-ba8b-3af3-a7de-55bcd30512aa.roa
Signing time:             Thu 09 Apr 2026 01:37:18 +0000
ROA not before:           Thu 09 Apr 2026 01:37:18 +0000
ROA not after:            Wed 08 Jul 2026 01:37:18 +0000
asID:                     54994
IP address blocks:        153.43.133.0/24 maxlen: 24
                          153.43.134.0/24 maxlen: 24
                          153.43.135.0/24 maxlen: 24
                          153.43.136.0/24 maxlen: 24
                          153.43.137.0/24 maxlen: 24
                          153.43.138.0/24 maxlen: 24
                          153.43.139.0/24 maxlen: 24
                          153.43.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:b7:54:1a:b9:02:60:01:0d:a7:0c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Apr  9 01:37:18 2026 GMT
            Not After : Jul  8 01:37:18 2026 GMT
        Subject: CN=8546ab90-aa21-414e-bd30-a8af12892891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:84:69:11:5f:3b:f8:01:ce:9a:7b:81:8c:bf:
                    57:6e:4f:31:ab:2c:ab:99:4c:99:08:5a:98:92:94:
                    9f:c1:65:ea:3b:c9:09:53:dc:ed:9c:d3:2e:7f:89:
                    b4:62:09:70:d3:a6:e9:4f:f4:10:c9:23:44:b4:b6:
                    ae:27:cc:91:54:c3:e9:c2:7a:ac:25:3e:2f:85:e8:
                    75:7d:eb:35:6c:da:b4:f1:b0:3a:0e:75:c8:ed:8b:
                    af:50:f6:a3:04:05:9e:13:83:c6:4d:f3:3b:ff:7f:
                    b5:ab:6f:a3:d2:c7:df:82:c0:e4:96:3a:e7:15:f1:
                    86:c4:10:bd:26:42:68:95:26:a5:b1:e5:f6:ad:2a:
                    f9:96:dd:6c:6d:6d:d9:7c:52:b1:8b:7f:f1:4c:a1:
                    d4:05:4a:b9:13:be:cc:f2:12:f7:2c:48:e0:b3:62:
                    e6:04:80:c2:e8:92:c5:cc:db:db:ff:2f:77:b1:3f:
                    41:eb:f8:63:a6:c2:c7:ba:98:cd:0f:28:10:63:4e:
                    19:1c:b6:11:fe:a4:0d:68:b1:54:19:cc:f7:7a:29:
                    86:75:7f:5c:aa:e6:02:e9:39:35:f4:3a:83:29:19:
                    7f:e8:c4:0b:42:1e:1e:a2:a5:d9:31:60:81:6f:d4:
                    b6:a5:d7:71:c6:06:f8:6a:f7:df:73:1a:09:29:d6:
                    56:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:92:ED:B0:BE:0F:56:14:9E:35:D2:BA:48:C4:3B:4C:B7:02:26:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/8dd43141-ba8b-3af3-a7de-55bcd30512aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.43.133.0-153.43.140.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:a0:e8:24:59:15:52:d9:6c:8b:b2:ea:ec:ec:fc:c3:7d:d3:
         6c:d9:b4:a2:b6:e4:41:00:e8:7b:52:5f:88:0d:ce:75:08:74:
         6d:80:e7:d0:d0:59:27:82:b3:fd:57:9b:fb:f7:7f:0a:03:56:
         40:4a:92:ef:5d:0b:9c:f1:1f:ba:a2:16:8e:72:2b:8e:08:d5:
         16:84:3e:2c:fb:7c:4b:23:b0:7c:02:5a:30:3e:44:bc:f6:58:
         a3:e4:39:06:97:2f:46:1a:04:11:d6:61:13:d8:bc:fc:1f:37:
         75:cd:3f:c0:15:50:06:9e:ad:cd:78:41:e4:b4:b6:6f:b8:4e:
         4f:98:06:16:8e:c6:d7:65:f5:43:67:39:68:c4:3f:4e:35:6e:
         a1:33:3b:75:10:c7:a9:15:3d:30:b7:cd:af:a4:4f:4d:87:79:
         28:49:17:01:df:1c:1f:2d:45:6b:d4:d1:32:16:ac:5e:c2:b0:
         1f:3e:9f:5b:42:4b:cb:9c:d5:f9:e6:e8:8a:09:e7:c8:4a:b1:
         9c:8f:15:99:55:c1:c9:b6:f9:88:d1:4a:2e:fc:84:f4:cf:be:
         40:fa:a1:8f:12:96:8a:e6:f7:e6:67:8b:3a:9b:f6:e9:68:22:
         da:6d:78:00:0c:43:7a:be:32:7b:f3:38:d1:50:ac:3a:27:d5:
         d3:da:dd:76
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE1xt1QauQJgAQ2nDOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy
ZDFiMB4XDTI2MDQwOTAxMzcxOFoXDTI2MDcwODAxMzcxOFowLzEtMCsGA1UEAxMk
ODU0NmFiOTAtYWEyMS00MTRlLWJkMzAtYThhZjEyODkyODkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4RpEV87+AHOmnuBjL9Xbk8xqyyrmUyZCFqY
kpSfwWXqO8kJU9ztnNMuf4m0Yglw06bpT/QQySNEtLauJ8yRVMPpwnqsJT4vheh1
fes1bNq08bA6DnXI7YuvUPajBAWeE4PGTfM7/3+1q2+j0sffgsDkljrnFfGGxBC9
JkJolSalseX2rSr5lt1sbW3ZfFKxi3/xTKHUBUq5E77M8hL3LEjgs2LmBIDC6JLF
zNvb/y93sT9B6/hjpsLHupjNDygQY04ZHLYR/qQNaLFUGcz3eimGdX9cquYC6Tk1
9DqDKRl/6MQLQh4eoqXZMWCBb9S2pddxxgb4avffcxoJKdZWSwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFBmS7bC+D1YUnjXSukjEO0y3AiZzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi
YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvOGRkNDMxNDEtYmE4Yi0z
YWYzLWE3ZGUtNTViY2QzMDUxMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj
N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw
MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw
YWY5MDJkMWIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACZK4UD
BACZK4wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAfaDoJFkVUtlsi7Lq7Oz8w33TbNm0orbkQQDoe1JfiA3O
dQh0bYDn0NBZJ4Kz/Veb+/d/CgNWQEqS710LnPEfuqIWjnIrjgjVFoQ+LPt8SyOw
fAJaMD5EvPZYo+Q5BpcvRhoEEdZhE9i8/B83dc0/wBVQBp6tzXhB5LS2b7hOT5gG
Fo7G12X1Q2c5aMQ/TjVuoTM7dRDHqRU9MLfNr6RPTYd5KEkXAd8cHy1Fa9TRMhas
XsKwHz6fW0JLy5zV+eboignnyEqxnI8VmVXBybb5iNFKLvyE9M++QPqhjxKWiub3
5meLOpv26Wgi2m14AAxDer4ye/M40VCsOifV09rddg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:53:40 2026 by rpki-client