Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/f7d7fec0-4cf3-3995-aaa9-9c8de13d6e0a.roa
File:                     f7d7fec0-4cf3-3995-aaa9-9c8de13d6e0a.roa (raw, json)
Hash identifier:          S41gQVATxJq3y5Oy8D3S9Cjc9w3UULnIhQGK+r9d44I=
Subject key identifier:   E4:4D:09:45:9B:02:F7:4E:72:FB:51:8F:86:55:5D:41:C5:C1:84:01
Certificate issuer:       /CN=2831c461-e175-4265-a0ea-565d8e6179b8
Certificate serial:       010D0C9F4328584CB121B54D9DF54A852FA79EB4
Authority key identifier: 3D:B4:F3:7A:AD:92:73:74:28:A7:E5:4D:84:23:F3:D4:9F:9F:85:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/f7d7fec0-4cf3-3995-aaa9-9c8de13d6e0a.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     36610
IP address blocks:        208.77.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:b5:4d:9d:f5:4a:85:2f:a7:9e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2831c461-e175-4265-a0ea-565d8e6179b8
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=a36649b4-ea2e-4813-8f8c-1fba04a602b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e4:f5:62:8a:d9:91:ee:1f:9b:89:ba:8d:8c:
                    97:7f:c3:24:7f:1e:bd:14:10:64:47:71:42:b0:1a:
                    ca:5d:6c:79:2d:ef:91:a6:9d:10:3c:61:dc:2c:5c:
                    1d:85:af:03:4c:bf:e7:3f:da:e5:ab:26:ff:92:79:
                    06:c6:3a:c9:0f:d6:b6:d9:45:77:f6:d8:99:37:81:
                    b9:2c:0f:39:49:b9:84:a9:a4:19:f5:79:99:ff:f6:
                    98:c5:0e:e4:45:95:03:19:b8:9f:44:1e:92:78:28:
                    32:b8:8d:e0:5e:ac:2e:0e:f9:d1:63:25:fb:39:c0:
                    3a:4d:45:01:b9:6f:13:62:a2:56:8b:e6:c1:ff:27:
                    9c:37:25:92:7a:35:09:72:2d:f1:85:2a:5c:b1:63:
                    70:b9:02:da:7a:e2:29:c4:9a:d1:cf:50:31:9b:e4:
                    f0:4f:21:24:78:fb:21:08:2e:ba:25:bb:ad:ce:66:
                    66:87:03:68:f5:4f:d4:9e:ff:7b:1b:86:05:31:e1:
                    13:27:b5:6b:0d:aa:7f:64:ba:29:f0:c4:47:b4:9c:
                    32:04:08:e4:fa:ae:d4:41:49:1c:3b:45:e1:f9:ae:
                    76:74:8b:49:bd:c0:34:28:64:9d:31:c3:8e:ef:ee:
                    54:ee:11:06:26:3a:5f:e3:6a:d4:72:b2:03:16:79:
                    86:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4D:09:45:9B:02:F7:4E:72:FB:51:8F:86:55:5D:41:C5:C1:84:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/f7d7fec0-4cf3-3995-aaa9-9c8de13d6e0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.crl

            X509v3 Authority Key Identifier:
                keyid:3D:B4:F3:7A:AD:92:73:74:28:A7:E5:4D:84:23:F3:D4:9F:9F:85:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.77.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:79:1f:d4:1a:12:65:51:13:a5:a9:b9:15:28:44:ea:4c:02:
         98:12:c3:cf:d3:24:c8:d9:55:71:82:5d:6b:85:5c:98:b1:98:
         78:3a:b7:82:57:9d:f7:2a:f3:01:b5:4c:65:7c:64:f0:5f:1c:
         57:ac:14:0a:15:4c:29:b9:16:dd:d9:a2:cb:2a:70:e5:32:db:
         ac:63:75:d1:38:b0:e8:f1:81:f1:c9:f1:c0:7a:d3:be:cc:26:
         c8:c1:03:2b:1b:81:9b:48:cf:65:17:7f:f8:5f:15:ac:e2:3d:
         4e:a0:df:1c:de:30:6c:8c:ac:82:cb:2c:1c:2a:db:c6:bb:9f:
         fc:6a:17:72:83:a8:d5:46:fb:82:ad:31:bd:34:c7:b5:34:f2:
         81:a3:18:ed:c0:e9:b6:f4:13:09:dc:60:6f:57:67:8d:ea:de:
         2d:5d:49:d2:f9:ce:41:84:a6:4f:55:11:d3:dd:f4:b6:ca:75:
         68:e7:46:57:0d:70:29:ba:cd:76:0e:24:b6:f8:e4:f6:e9:be:
         46:15:c2:6f:d5:4f:24:ca:10:2e:74:cb:eb:8d:33:5a:63:b5:
         4c:16:d8:36:84:50:1a:5b:7b:99:17:fc:09:59:87:ca:df:ac:
         2a:e7:10:50:c6:0a:1c:09:2c:bf:70:cb:86:42:7d:10:a4:fc:
         72:05:d2:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIbVNnfVKhS+nnrQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgzMWM0NjEtZTE3NS00MjY1LWEwZWEtNTY1ZDhlNjE3
OWI4MB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk
YTM2NjQ5YjQtZWEyZS00ODEzLThmOGMtMWZiYTA0YTYwMmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+T1YorZke4fm4m6jYyXf8Mkfx69FBBkR3FC
sBrKXWx5Le+Rpp0QPGHcLFwdha8DTL/nP9rlqyb/knkGxjrJD9a22UV39tiZN4G5
LA85SbmEqaQZ9XmZ//aYxQ7kRZUDGbifRB6SeCgyuI3gXqwuDvnRYyX7OcA6TUUB
uW8TYqJWi+bB/yecNyWSejUJci3xhSpcsWNwuQLaeuIpxJrRz1Axm+TwTyEkePsh
CC66JbutzmZmhwNo9U/Unv97G4YFMeETJ7VrDap/ZLop8MRHtJwyBAjk+q7UQUkc
O0Xh+a52dItJvcA0KGSdMcOO7+5U7hEGJjpf42rUcrIDFnmGQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFORNCUWbAvdOcvtRj4ZVXUHFwYQBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yODMx
YzQ2MS1lMTc1LTQyNjUtYTBlYS01NjVkOGU2MTc5YjgvZjdkN2ZlYzAtNGNmMy0z
OTk1LWFhYTktOWM4ZGUxM2Q2ZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjgzMWM0NjEtZTE3NS00MjY1LWEw
ZWEtNTY1ZDhlNjE3OWI4LzI4MzFjNDYxLWUxNzUtNDI2NS1hMGVhLTU2NWQ4ZTYx
NzliOC5jcmwwHwYDVR0jBBgwFoAUPbTzeq2Sc3Qop+VNhCPz1J+fhe8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8yODMxYzQ2MS1lMTc1LTQyNjUtYTBlYS01NjVk
OGU2MTc5YjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0E14MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACF5H9QaEmVRE6WpuRUoROpMApgSw8/TJMjZVXGCXWuFXJixmHg6t4JX
nfcq8wG1TGV8ZPBfHFesFAoVTCm5Ft3ZossqcOUy26xjddE4sOjxgfHJ8cB6077M
JsjBAysbgZtIz2UXf/hfFaziPU6g3xzeMGyMrILLLBwq28a7n/xqF3KDqNVG+4Kt
Mb00x7U08oGjGO3A6bb0EwncYG9XZ43q3i1dSdL5zkGEpk9VEdPd9LbKdWjnRlcN
cCm6zXYOJLb45PbpvkYVwm/VTyTKEC50y+uNM1pjtUwW2DaEUBpbe5kX/AlZh8rf
rCrnEFDGChwJLL9wy4ZCfRCk/HIF0lA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:30 2026 by rpki-client