Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/adec3dfa-bcf6-319b-aa1e-1a17c3feaae9.roa
File:                     adec3dfa-bcf6-319b-aa1e-1a17c3feaae9.roa (raw, json)
Hash identifier:          oSF23b8VYsoMLxq1gRILkfrNHuEBSYw/HmSMFUAYvUI=
Subject key identifier:   28:17:8D:5D:63:47:5B:1E:E4:0D:39:F0:40:B3:7D:00:10:F9:44:97
Certificate issuer:       /CN=7a66e7fb-89d9-467a-83cb-031bb17ccfbe
Certificate serial:       010D0C9F4328584D5234FA73E17B0F11EF29AC00
Authority key identifier: 9A:ED:B1:FF:91:E4:42:89:3D:78:4D:56:EF:CB:03:06:EB:CE:E9:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/adec3dfa-bcf6-319b-aa1e-1a17c3feaae9.roa
Signing time:             Sat 28 Mar 2026 18:44:36 +0000
ROA not before:           Sat 28 Mar 2026 18:44:36 +0000
ROA not after:            Tue 12 May 2026 20:55:31 +0000
asID:                     399939
IP address blocks:        131.219.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:34:fa:73:e1:7b:0f:11:ef:29:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a66e7fb-89d9-467a-83cb-031bb17ccfbe
        Validity
            Not Before: Mar 28 18:44:36 2026 GMT
            Not After : May 12 20:55:31 2026 GMT
        Subject: CN=5b7808d4-120e-4075-9d58-44f80645a237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:17:81:63:68:fd:bf:be:77:8c:2d:a5:aa:fd:
                    88:98:58:5e:d7:05:b6:4b:b4:d9:57:d0:0b:ee:4f:
                    ca:74:06:1b:82:ce:fe:3b:36:7f:7a:bd:c9:ca:03:
                    10:75:75:76:cd:17:4c:60:5c:97:f8:31:cc:dd:f1:
                    ec:42:42:78:18:23:55:b4:6e:4f:8e:7a:0d:50:35:
                    93:a0:b6:2c:b1:f0:fc:35:40:27:5b:2e:97:20:23:
                    b7:e9:35:cb:45:09:8d:60:5a:4d:ef:a0:87:06:94:
                    35:46:56:8f:90:a1:db:d9:f3:38:62:5b:09:41:71:
                    9c:91:14:ad:67:e9:59:f7:0e:e4:2a:35:c8:0e:e9:
                    42:35:02:d7:70:54:74:3c:26:d7:5b:c2:d5:da:57:
                    57:84:9c:38:c6:ce:4c:b3:3b:23:01:d2:e7:01:af:
                    1d:3c:cd:7a:13:db:55:6e:40:41:09:ff:7e:46:e4:
                    8a:52:a3:27:ac:3b:1b:dd:69:e4:41:75:31:99:b5:
                    01:e2:3f:f3:be:33:65:be:30:b6:68:1f:2c:a8:d1:
                    f1:f5:0a:b6:d8:12:b2:e5:14:06:c0:5f:d8:b9:52:
                    ab:3d:f8:89:8a:32:d7:40:85:82:44:50:df:47:84:
                    1f:3f:98:b3:ab:bf:cc:c0:6f:db:f9:52:bd:48:fd:
                    19:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:17:8D:5D:63:47:5B:1E:E4:0D:39:F0:40:B3:7D:00:10:F9:44:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/adec3dfa-bcf6-319b-aa1e-1a17c3feaae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.crl

            X509v3 Authority Key Identifier:
                keyid:9A:ED:B1:FF:91:E4:42:89:3D:78:4D:56:EF:CB:03:06:EB:CE:E9:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.219.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:0a:43:68:2c:dc:de:74:2a:00:0d:ef:ae:4a:40:54:eb:2f:
         26:d4:6c:c9:70:83:79:59:f5:e9:bd:e6:46:76:a6:90:2f:82:
         a2:6c:a5:57:e0:50:76:78:5d:7a:51:7a:ea:a2:56:91:ea:53:
         f1:86:8d:03:67:47:a0:30:65:3c:93:c1:1e:c2:93:68:9d:bd:
         b0:5a:0f:6d:46:7b:af:de:25:55:3a:49:c4:d8:be:c6:aa:b7:
         b3:b6:0a:14:1a:13:cd:4b:bf:38:84:97:21:8e:8a:e0:d1:5f:
         8c:77:74:db:fd:c4:a6:7a:84:75:6e:21:f1:32:09:5e:44:2e:
         c2:6f:2a:2d:8a:aa:7a:b1:b1:05:d4:70:03:1b:2a:c4:2d:69:
         14:40:e6:60:df:f4:82:68:29:f7:51:d4:85:70:7b:44:48:2e:
         44:db:c0:40:00:3c:99:8a:21:e2:b1:27:86:8b:d4:3f:92:f2:
         f0:dc:10:b6:77:8f:4a:fd:17:56:8d:c4:63:38:d0:27:af:17:
         23:58:eb:7b:bb:fa:2b:fa:5f:39:54:18:33:9b:26:73:83:6d:
         b3:27:81:ec:53:6d:9c:d0:e6:c9:7f:47:c8:a3:20:82:b5:ca:
         9f:8f:68:9a:73:51:25:87:e6:ab:ce:10:a7:7f:ce:68:07:f1:
         f1:35:bf:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SNPpz4XsPEe8prAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2E2NmU3ZmItODlkOS00NjdhLTgzY2ItMDMxYmIxN2Nj
ZmJlMB4XDTI2MDMyODE4NDQzNloXDTI2MDUxMjIwNTUzMVowLzEtMCsGA1UEAxMk
NWI3ODA4ZDQtMTIwZS00MDc1LTlkNTgtNDRmODA2NDVhMjM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixeBY2j9v753jC2lqv2ImFhe1wW2S7TZV9AL
7k/KdAYbgs7+OzZ/er3JygMQdXV2zRdMYFyX+DHM3fHsQkJ4GCNVtG5PjnoNUDWT
oLYssfD8NUAnWy6XICO36TXLRQmNYFpN76CHBpQ1RlaPkKHb2fM4YlsJQXGckRSt
Z+lZ9w7kKjXIDulCNQLXcFR0PCbXW8LV2ldXhJw4xs5MszsjAdLnAa8dPM16E9tV
bkBBCf9+RuSKUqMnrDsb3WnkQXUxmbUB4j/zvjNlvjC2aB8sqNHx9Qq22BKy5RQG
wF/YuVKrPfiJijLXQIWCRFDfR4QfP5izq7/MwG/b+VK9SP0ZvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCgXjV1jR1se5A058ECzfQAQ+USXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83YTY2
ZTdmYi04OWQ5LTQ2N2EtODNjYi0wMzFiYjE3Y2NmYmUvYWRlYzNkZmEtYmNmNi0z
MTliLWFhMWUtMWExN2MzZmVhYWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvN2E2NmU3ZmItODlkOS00NjdhLTgz
Y2ItMDMxYmIxN2NjZmJlLzdhNjZlN2ZiLTg5ZDktNDY3YS04M2NiLTAzMWJiMTdj
Y2ZiZS5jcmwwHwYDVR0jBBgwFoAUmu2x/5HkQok9eE1W78sDBuvO6b0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS83YTY2ZTdmYi04OWQ5LTQ2N2EtODNjYi0wMzFi
YjE3Y2NmYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg9uaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABcKQ2gs3N50KgAN765KQFTrLybUbMlwg3lZ9em95kZ2ppAvgqJspVfg
UHZ4XXpReuqiVpHqU/GGjQNnR6AwZTyTwR7Ck2idvbBaD21Ge6/eJVU6ScTYvsaq
t7O2ChQaE81LvziElyGOiuDRX4x3dNv9xKZ6hHVuIfEyCV5ELsJvKi2KqnqxsQXU
cAMbKsQtaRRA5mDf9IJoKfdR1IVwe0RILkTbwEAAPJmKIeKxJ4aL1D+S8vDcELZ3
j0r9F1aNxGM40CevFyNY63u7+iv6XzlUGDObJnODbbMngexTbZzQ5sl/R8ijIIK1
yp+PaJpzUSWH5qvOEKd/zmgH8fE1v7E=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:04:56 2026 by rpki-client