Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/01337169-31ee-387d-8eba-282de11dbb50.roa
File:                     01337169-31ee-387d-8eba-282de11dbb50.roa (raw, json)
Hash identifier:          fCFcaJfmdaQmbY1dzr3YuWI6qiVwzilNNnsNN39eSNo=
Subject key identifier:   8B:0C:C7:EF:17:86:96:50:8F:EB:C7:28:8E:F7:DB:8C:98:3E:E9:E2
Certificate issuer:       /CN=3cd40041-6571-4f30-b76a-4746a4c2d957
Certificate serial:       010D0C9F4328584D7A052E07A46B26ED1188F600
Authority key identifier: 0B:77:48:C1:9B:9E:5A:CB:51:2F:96:9C:33:C0:B6:C8:82:DB:0E:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/01337169-31ee-387d-8eba-282de11dbb50.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     14315
IP address blocks:        205.207.255.0/24 maxlen: 24
                          2620:13e:5000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:2e:07:a4:6b:26:ed:11:88:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cd40041-6571-4f30-b76a-4746a4c2d957
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=6d1c46d5-7c27-445a-be4b-05b0cab8ce78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0c:14:ed:cd:91:a1:54:c9:65:17:25:91:c5:
                    d6:1e:67:55:a1:37:bb:ed:b2:bd:2c:66:8e:f9:5f:
                    c3:d0:31:8a:28:59:20:9b:69:4b:32:4d:f9:ac:69:
                    f3:d7:08:2a:67:31:b9:27:1b:a7:f9:76:78:7b:38:
                    02:83:58:64:c5:be:e9:7f:e5:51:29:ee:82:50:37:
                    cb:e0:b6:a4:24:86:3d:99:1b:29:a5:b5:56:a8:6a:
                    aa:8e:f1:eb:e1:85:39:f8:a0:b8:a6:74:b3:9b:9e:
                    02:8c:18:43:e3:43:1f:6e:8b:85:1c:2a:cf:1a:3b:
                    85:21:c9:92:57:2e:5c:94:dc:c4:fc:a3:8d:70:d5:
                    a7:47:de:16:f4:f6:ca:63:db:fa:43:6a:37:15:51:
                    ff:a4:b7:57:76:a4:7b:62:9a:e8:ed:a9:e4:89:45:
                    ce:bd:03:f0:6e:18:03:38:cf:5f:49:a4:36:7b:bf:
                    2b:74:97:04:3a:8e:5a:e8:66:ff:cc:c2:31:81:22:
                    be:64:26:93:1b:32:8f:78:8e:95:f2:1d:fd:8d:9e:
                    18:0c:e2:48:21:a5:30:a0:8d:97:f7:ce:d4:6b:86:
                    54:01:dc:fe:14:1c:1f:16:01:06:c4:1e:da:f5:46:
                    a9:70:01:92:e5:c5:cb:5d:a3:fa:74:c8:2d:3d:be:
                    cd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0C:C7:EF:17:86:96:50:8F:EB:C7:28:8E:F7:DB:8C:98:3E:E9:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/01337169-31ee-387d-8eba-282de11dbb50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957/3cd40041-6571-4f30-b76a-4746a4c2d957.crl

            X509v3 Authority Key Identifier:
                keyid:0B:77:48:C1:9B:9E:5A:CB:51:2F:96:9C:33:C0:B6:C8:82:DB:0E:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3cd40041-6571-4f30-b76a-4746a4c2d957.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.207.255.0/24
                IPv6:
                  2620:13e:5000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:8d:80:68:66:44:19:b2:a0:ae:ee:26:aa:90:c1:e8:91:90:
         87:ab:41:25:46:68:e5:24:63:59:3d:2e:57:5e:c9:c1:e0:5a:
         a0:24:ed:d6:26:d7:4d:67:f7:3e:ab:67:ec:f2:80:0c:8e:53:
         d6:8e:c6:e4:cd:21:6b:bd:b4:fc:2e:42:cc:7d:0e:ac:5a:05:
         f4:d2:62:c6:5d:87:09:41:c1:e4:a6:a8:2c:22:6f:6b:ef:da:
         64:da:49:80:84:4d:ef:b4:1d:a2:b3:39:48:0d:cb:0e:71:9b:
         dc:88:f9:8c:0c:30:6f:73:96:7a:13:69:4f:a5:0a:ed:36:38:
         74:09:fa:aa:e6:93:a2:5d:81:be:a6:10:9c:31:fc:8f:96:dc:
         28:86:66:85:7e:a7:1c:17:9a:4c:a1:fe:83:0a:8e:d8:82:69:
         e8:86:9b:f7:24:8d:34:7d:54:0c:12:57:33:d1:3c:36:9e:37:
         b7:26:04:b2:e5:cd:c5:20:1b:1a:f6:06:f1:76:b2:82:2e:64:
         ff:9f:cb:70:5c:bd:1d:35:92:17:4d:13:6d:14:1b:ab:84:a2:
         2c:e1:51:55:d7:01:31:86:47:55:e3:53:3e:d8:3a:f7:71:0e:
         a6:91:a4:14:9f:b1:13:f2:c0:c5:70:96:a7:78:5e:1b:c3:0b:
         9e:6a:3c:cc
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE16BS4HpGsm7RGI9gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2NkNDAwNDEtNjU3MS00ZjMwLWI3NmEtNDc0NmE0YzJk
OTU3MB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk
NmQxYzQ2ZDUtN2MyNy00NDVhLWJlNGItMDViMGNhYjhjZTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgwU7c2RoVTJZRclkcXWHmdVoTe77bK9LGaO
+V/D0DGKKFkgm2lLMk35rGnz1wgqZzG5Jxun+XZ4ezgCg1hkxb7pf+VRKe6CUDfL
4LakJIY9mRsppbVWqGqqjvHr4YU5+KC4pnSzm54CjBhD40MfbouFHCrPGjuFIcmS
Vy5clNzE/KONcNWnR94W9PbKY9v6Q2o3FVH/pLdXdqR7Ypro7ankiUXOvQPwbhgD
OM9fSaQ2e78rdJcEOo5a6Gb/zMIxgSK+ZCaTGzKPeI6V8h39jZ4YDOJIIaUwoI2X
987Ua4ZUAdz+FBwfFgEGxB7a9UapcAGS5cXLXaP6dMgtPb7NtQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFIsMx+8XhpZQj+vHKI7324yYPuniMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zY2Q0
MDA0MS02NTcxLTRmMzAtYjc2YS00NzQ2YTRjMmQ5NTcvMDEzMzcxNjktMzFlZS0z
ODdkLThlYmEtMjgyZGUxMWRiYjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2NkNDAwNDEtNjU3MS00ZjMwLWI3
NmEtNDc0NmE0YzJkOTU3LzNjZDQwMDQxLTY1NzEtNGYzMC1iNzZhLTQ3NDZhNGMy
ZDk1Ny5jcmwwHwYDVR0jBBgwFoAUC3dIwZueWstRL5acM8C2yILbDiEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zY2Q0MDA0MS02NTcxLTRmMzAtYjc2YS00NzQ2
YTRjMmQ5NTcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAzc//MA8E
AgACMAkDBwQmIAE+UAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPI2AaGZEGbKgru4mqpDB6JGQh6tBJUZo
5SRjWT0uV17JweBaoCTt1ibXTWf3Pqtn7PKADI5T1o7G5M0ha720/C5CzH0OrFoF
9NJixl2HCUHB5KaoLCJva+/aZNpJgIRN77QdorM5SA3LDnGb3Ij5jAwwb3OWehNp
T6UK7TY4dAn6quaTol2BvqYQnDH8j5bcKIZmhX6nHBeaTKH+gwqO2IJp6Iab9ySN
NH1UDBJXM9E8Np43tyYEsuXNxSAbGvYG8Xaygi5k/5/LcFy9HTWSF00TbRQbq4Si
LOFRVdcBMYZHVeNTPtg693EOppGkFJ+xE/LAxXCWp3heG8MLnmo8zA==
-----END CERTIFICATE-----
Generated at Sat Apr 18 05:37:34 2026 by rpki-client