Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e51dc1c-d4fb-3612-ba14-360365d33789.roa
File:                     4e51dc1c-d4fb-3612-ba14-360365d33789.roa (raw, json)
Hash identifier:          T1DitX+W0fFOTFHECHcxE8AIBtYnKXW1N7cB4xx9s4A=
Subject key identifier:   17:48:70:1F:59:F9:16:55:89:1F:18:7A:B1:D1:3C:7F:EA:CB:78:7A
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584D59EA82A83EAAA51B35B7E600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e51dc1c-d4fb-3612-ba14-360365d33789.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     394996
IP address blocks:        184.105.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:82:a8:3e:aa:a5:1b:35:b7:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=752fe5ea-4dc8-45c9-af20-4f1c4ee2cc9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:42:bd:db:11:20:6d:2f:ef:7c:e1:fb:07:4c:
                    d6:c9:1f:36:24:04:f2:0b:aa:3a:b0:0b:bb:99:55:
                    9e:ca:6d:e3:71:a8:37:a6:d7:fb:b8:fe:9d:43:a2:
                    80:2c:00:c3:7d:04:df:d7:b7:5c:54:11:83:32:c4:
                    43:f6:e0:9e:b1:63:16:30:c1:15:53:4a:7f:a8:04:
                    b4:0a:52:01:c7:b4:a3:18:b9:b3:f8:e5:99:e7:7e:
                    d7:44:50:56:30:d7:4e:e4:3c:57:b9:34:d2:0a:5b:
                    d9:8a:b6:bd:58:47:16:99:7e:0b:62:b5:7f:39:04:
                    17:33:4c:24:39:f7:cf:72:78:71:89:e2:cd:93:fd:
                    14:87:3e:b1:14:21:28:d6:94:4c:71:0e:05:13:a3:
                    df:8f:65:6d:86:55:38:38:06:38:b7:e2:f8:6d:c2:
                    00:f7:f7:36:53:b2:67:d3:fb:07:8c:f4:55:3d:fb:
                    81:3f:86:62:13:07:5f:4a:4e:11:a4:ec:50:8a:b1:
                    a5:89:a2:9d:4e:62:ce:af:c7:c2:a2:68:55:40:1a:
                    c5:d0:ae:f0:5a:20:d0:51:75:4b:2e:44:32:77:f1:
                    d5:90:65:ec:1c:b5:ce:c8:d1:b9:a6:fb:5f:5c:12:
                    e0:4f:25:8f:ec:8c:bd:74:ad:fe:78:94:79:21:8c:
                    eb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:48:70:1F:59:F9:16:55:89:1F:18:7A:B1:D1:3C:7F:EA:CB:78:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4e51dc1c-d4fb-3612-ba14-360365d33789.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:8c:94:01:5f:71:ea:79:9f:de:70:d6:9a:cb:f9:a6:db:e9:
         d0:46:9c:36:56:34:31:c8:f3:ed:c4:bb:6c:6f:14:53:b1:85:
         33:47:3b:42:d0:02:65:46:05:02:87:a4:49:28:ec:3e:8f:cb:
         5f:f3:d7:ba:99:27:5b:06:67:00:68:f2:e5:53:a7:f1:67:09:
         a5:42:aa:7b:97:1e:12:af:6a:91:24:cf:5c:94:e4:ea:44:59:
         de:a5:f1:9e:40:6a:85:da:65:6b:fa:17:7c:e7:cc:d0:f4:5c:
         b2:b3:2f:9f:6a:7d:2d:cd:b9:86:75:26:58:c1:9a:86:01:0b:
         21:b8:fd:27:e2:a1:37:a7:17:b7:8c:c7:27:62:99:b5:9b:fb:
         15:70:c7:5d:b0:e1:d5:12:03:4c:83:65:b5:19:d8:47:4f:de:
         20:14:76:33:eb:15:79:fa:d5:a4:ee:a5:f3:8e:6e:0e:4c:4a:
         97:1b:5f:75:70:c0:a1:70:6e:b1:82:73:de:19:01:d8:7f:39:
         8c:c9:0c:d4:3c:6d:d9:84:24:1e:5a:80:2a:e9:49:f5:f3:22:
         56:7e:4e:5c:a0:f1:b2:f7:14:c0:5c:a0:10:9d:0a:a5:bc:66:
         46:da:68:3f:8d:68:a0:32:96:a1:2e:f7:03:d0:92:7d:86:f7:
         b7:2c:59:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6oKoPqqlGzW35gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
NzUyZmU1ZWEtNGRjOC00NWM5LWFmMjAtNGYxYzRlZTJjYzlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUK92xEgbS/vfOH7B0zWyR82JATyC6o6sAu7
mVWeym3jcag3ptf7uP6dQ6KALADDfQTf17dcVBGDMsRD9uCesWMWMMEVU0p/qAS0
ClIBx7SjGLmz+OWZ537XRFBWMNdO5DxXuTTSClvZira9WEcWmX4LYrV/OQQXM0wk
OffPcnhxieLNk/0Uhz6xFCEo1pRMcQ4FE6Pfj2VthlU4OAY4t+L4bcIA9/c2U7Jn
0/sHjPRVPfuBP4ZiEwdfSk4RpOxQirGliaKdTmLOr8fComhVQBrF0K7wWiDQUXVL
LkQyd/HVkGXsHLXOyNG5pvtfXBLgTyWP7Iy9dK3+eJR5IYzrJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBdIcB9Z+RZViR8YerHRPH/qy3h6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGU1MWRjMWMtZDRmYi0z
NjEyLWJhMTQtMzYwMzY1ZDMzNzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuGmdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACeMlAFfcep5n95w1prL+abb6dBGnDZWNDHI8+3Eu2xvFFOxhTNHO0LQ
AmVGBQKHpEko7D6Py1/z17qZJ1sGZwBo8uVTp/FnCaVCqnuXHhKvapEkz1yU5OpE
Wd6l8Z5AaoXaZWv6F3znzND0XLKzL59qfS3NuYZ1JljBmoYBCyG4/SfioTenF7eM
xydimbWb+xVwx12w4dUSA0yDZbUZ2EdP3iAUdjPrFXn61aTupfOObg5MSpcbX3Vw
wKFwbrGCc94ZAdh/OYzJDNQ8bdmEJB5agCrpSfXzIlZ+Tlyg8bL3FMBcoBCdCqW8
ZkbaaD+NaKAylqEu9wPQkn2G97csWXQ=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:18:24 2026 by rpki-client