Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a0155e39-69f6-3fa2-87cc-c4ab230cbb72.roa
File:                     a0155e39-69f6-3fa2-87cc-c4ab230cbb72.roa (raw, json)
Hash identifier:          S9Fw15aHii/gduJweTiSDyCBWajKzl7xiTPOpcNq7xw=
Subject key identifier:   78:A1:07:90:36:97:8D:96:79:61:3A:43:FF:5F:E6:FA:55:F5:8F:31
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584D24E0EEDE10D8208580D8EB00
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a0155e39-69f6-3fa2-87cc-c4ab230cbb72.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     36040
IP address blocks:        208.117.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:ee:de:10:d8:20:85:80:d8:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=7795c814-6179-441c-a9f4-65b4463ce0e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d2:0a:ca:33:e4:93:54:4c:7b:e9:f2:54:ce:
                    db:65:93:fb:92:fc:b9:f4:ba:e5:f7:0b:7c:9e:71:
                    88:2c:56:53:57:c0:93:35:1c:b1:36:7a:93:97:9d:
                    11:53:e2:79:c7:7e:12:b6:df:39:05:d2:13:48:f1:
                    5e:1f:6d:4e:a7:00:1b:8e:af:92:41:5c:b8:38:c9:
                    b4:03:2f:7f:e7:ef:b1:12:17:2a:d3:5c:14:cf:9a:
                    e7:a6:47:60:d9:76:96:2a:1e:c5:e8:e5:c7:da:ce:
                    1a:2b:61:eb:63:6a:66:6f:1f:66:cb:9e:eb:92:03:
                    91:db:98:39:20:c1:74:31:a6:99:ef:34:f2:36:0a:
                    d2:39:ac:cc:7e:0e:36:91:6f:7c:84:c3:f0:db:9f:
                    77:80:d2:72:3c:ab:da:3d:01:aa:d4:11:a5:a6:49:
                    03:46:12:23:09:4d:cf:28:87:20:72:90:56:29:23:
                    e1:5e:79:0f:a0:ab:a1:0b:5e:bd:d0:67:9a:67:38:
                    c6:4d:db:53:c6:a1:1e:f6:f6:b6:1c:99:f7:23:b0:
                    5c:f7:36:dc:f5:57:da:bf:1f:56:31:b0:50:d1:fc:
                    60:a1:68:4c:70:8f:86:32:5f:dd:f6:72:70:e4:f4:
                    ba:5b:4f:d5:f9:a4:05:0c:9e:8b:ae:25:48:9c:35:
                    a5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A1:07:90:36:97:8D:96:79:61:3A:43:FF:5F:E6:FA:55:F5:8F:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a0155e39-69f6-3fa2-87cc-c4ab230cbb72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:3d:d4:08:df:87:17:34:35:e0:4d:12:f9:c3:8b:3f:3a:00:
         f9:61:fc:d0:a3:d4:1c:dc:8d:3e:20:5b:42:b1:30:74:67:39:
         e1:31:c8:9f:92:10:19:7b:9e:a0:0c:17:5c:06:64:ed:58:f0:
         ca:c5:89:20:35:0d:70:28:21:94:dd:e7:25:48:10:4a:88:94:
         94:4b:81:3b:b3:00:99:35:f9:f9:e1:3e:63:ca:2c:37:5d:3f:
         53:4f:71:d1:d6:bd:eb:dd:24:82:72:dd:75:29:25:2d:bf:09:
         39:c7:ee:9c:aa:5c:88:c5:e9:0d:85:ec:8c:a0:66:5f:2a:6c:
         64:fd:73:57:98:e8:f1:89:b6:56:40:75:25:ff:91:e9:91:35:
         fb:44:b6:b4:e4:4b:c5:9b:0e:5f:ae:f4:1b:98:df:8b:15:04:
         a1:08:90:51:3e:9f:58:4e:a6:86:b2:3c:28:35:0e:c6:96:fd:
         05:52:ed:5b:b7:fa:46:fd:23:7a:c7:69:96:82:e7:b7:b9:ba:
         68:19:9e:ab:5d:3c:bd:40:cf:a9:77:34:8a:23:09:51:26:20:
         49:0b:21:9c:19:8a:cb:78:fe:85:b5:88:ff:31:a3:3a:10:50:
         37:62:b0:90:30:05:dd:72:7c:66:57:ef:a7:78:40:52:cf:93:
         24:dd:aa:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4O7eENgghYDY6wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
Nzc5NWM4MTQtNjE3OS00NDFjLWE5ZjQtNjViNDQ2M2NlMGU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NIKyjPkk1RMe+nyVM7bZZP7kvy59Lrl9wt8
nnGILFZTV8CTNRyxNnqTl50RU+J5x34Stt85BdITSPFeH21OpwAbjq+SQVy4OMm0
Ay9/5++xEhcq01wUz5rnpkdg2XaWKh7F6OXH2s4aK2HrY2pmbx9my57rkgOR25g5
IMF0MaaZ7zTyNgrSOazMfg42kW98hMPw2593gNJyPKvaPQGq1BGlpkkDRhIjCU3P
KIcgcpBWKSPhXnkPoKuhC1690GeaZzjGTdtTxqEe9va2HJn3I7Bc9zbc9Vfavx9W
MbBQ0fxgoWhMcI+GMl/d9nJw5PS6W0/V+aQFDJ6LriVInDWl9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHihB5A2l42WeWE6Q/9f5vpV9Y8xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvYTAxNTVlMzktNjlmNi0z
ZmEyLTg3Y2MtYzRhYjIzMGNiYjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HXiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHg91Ajfhxc0NeBNEvnDiz86APlh/NCj1BzcjT4gW0KxMHRnOeExyJ+S
EBl7nqAMF1wGZO1Y8MrFiSA1DXAoIZTd5yVIEEqIlJRLgTuzAJk1+fnhPmPKLDdd
P1NPcdHWvevdJIJy3XUpJS2/CTnH7pyqXIjF6Q2F7IygZl8qbGT9c1eY6PGJtlZA
dSX/kemRNftEtrTkS8WbDl+u9BuY34sVBKEIkFE+n1hOpoayPCg1DsaW/QVS7Vu3
+kb9I3rHaZaC57e5umgZnqtdPL1Az6l3NIojCVEmIEkLIZwZist4/oW1iP8xozoQ
UDdisJAwBd1yfGZX76d4QFLPkyTdqoA=
-----END CERTIFICATE-----
Generated at Thu Mar 19 01:56:10 2026 by rpki-client