Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/81f9e85c-2f6d-362c-b5f0-6cab02a654c9.roa
File:                     81f9e85c-2f6d-362c-b5f0-6cab02a654c9.roa (raw, json)
Hash identifier:          OFwtGe33AJGAyEfKfQSoPrbG8XtGdAvptg4IZCZYqzE=
Subject key identifier:   7E:09:35:5A:94:1E:0A:FC:52:54:33:EE:BA:94:E1:51:1F:E8:42:4E
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F4328584D24E0E7DEFB10DEDA22D38B80
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/81f9e85c-2f6d-362c-b5f0-6cab02a654c9.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     32381
IP address blocks:        207.126.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:e7:de:fb:10:de:da:22:d3:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=47234ab1-3e7c-45f1-acdd-04d211cd2a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:43:eb:cf:bf:e6:2f:3a:0d:c9:05:b5:c7:a7:
                    72:d3:8a:67:5e:d4:77:ee:85:e5:cd:ef:c1:07:88:
                    58:da:13:7e:b4:27:10:f9:cd:c1:f5:92:c7:c0:48:
                    af:70:05:82:80:8a:8e:43:2c:26:fb:04:7c:79:69:
                    32:05:40:85:45:2e:44:4a:a4:29:a8:ed:d2:51:e7:
                    4e:ae:9b:25:0a:4b:b5:89:de:bb:35:58:90:33:5d:
                    bb:d6:5d:0f:9a:56:be:d6:50:5f:78:1e:8a:38:67:
                    46:47:e3:4f:3a:ed:4e:4c:b7:ba:89:60:2b:73:ed:
                    9b:9a:2a:5c:8b:6f:7b:d6:45:4d:eb:fe:2b:c1:25:
                    5b:48:f9:a9:e2:3f:0e:89:68:e1:0b:1b:b5:4f:5e:
                    7f:e6:c1:27:40:47:7f:82:bf:c6:0b:60:06:ad:36:
                    a2:46:40:4e:da:a5:16:5b:eb:d2:c1:b5:e5:9c:a4:
                    ef:fc:22:fd:12:b5:e4:7d:80:52:21:0d:2a:bc:1b:
                    b0:cf:21:cd:c6:dc:ce:d9:c8:9f:79:2e:cb:4d:02:
                    e6:57:7a:bf:f9:bf:63:49:2f:d4:42:5f:d0:f2:35:
                    d8:5b:f0:3f:66:c6:d6:b1:d5:03:65:46:53:77:c5:
                    02:6b:0f:2f:f4:6e:3e:a4:37:7f:07:52:a9:6b:25:
                    78:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:09:35:5A:94:1E:0A:FC:52:54:33:EE:BA:94:E1:51:1F:E8:42:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/81f9e85c-2f6d-362c-b5f0-6cab02a654c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:03:a6:0a:f1:de:e0:77:bc:8b:c6:c0:88:36:21:db:32:d6:
         34:21:5b:c2:72:62:9a:0b:9f:5a:03:ed:ae:7b:c4:0d:76:f1:
         b7:f5:c4:20:68:bf:41:da:eb:35:aa:f4:59:cc:93:eb:80:c0:
         0c:f6:b5:58:50:e8:96:89:56:0d:e3:e2:50:c5:93:a3:3f:3d:
         27:20:04:ed:9a:75:1c:b1:5c:06:cc:e9:20:dc:67:88:45:b6:
         5f:08:b5:90:4f:80:af:7b:8c:89:42:61:b4:13:db:90:1d:36:
         03:72:54:4d:76:88:ac:42:d2:09:9f:71:c6:b4:6c:55:c7:6d:
         ba:60:3d:04:9a:cc:ef:1a:55:1c:a7:79:68:05:0e:2a:44:94:
         93:60:d3:18:6a:79:7e:d1:5e:7d:61:05:a5:d5:04:5c:d7:93:
         0e:73:8c:8d:a8:e3:d2:e7:c9:59:c5:35:32:59:67:6a:7d:ad:
         96:dd:97:8e:15:dc:96:4e:c7:63:bd:38:4c:23:84:d8:2a:92:
         14:0d:89:d9:08:fb:16:ce:ab:1d:cf:04:44:b6:5c:d6:b5:e8:
         86:c9:62:f7:2c:42:23:38:94:40:a2:14:e9:20:f4:b8:46:78:
         2d:cf:28:7a:b1:65:5d:26:6e:2d:65:2a:e0:a0:55:ea:40:76:
         b7:74:c8:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4Ofe+xDe2iLTi4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmUyN2M0YzAtNTI5ZS00YzlkLWJiNjktZGVkYjA3YmJm
ZjYxMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
NDcyMzRhYjEtM2U3Yy00NWYxLWFjZGQtMDRkMjExY2QyYTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEPrz7/mLzoNyQW1x6dy04pnXtR37oXlze/B
B4hY2hN+tCcQ+c3B9ZLHwEivcAWCgIqOQywm+wR8eWkyBUCFRS5ESqQpqO3SUedO
rpslCku1id67NViQM1271l0Pmla+1lBfeB6KOGdGR+NPOu1OTLe6iWArc+2bmipc
i2971kVN6/4rwSVbSPmp4j8OiWjhCxu1T15/5sEnQEd/gr/GC2AGrTaiRkBO2qUW
W+vSwbXlnKTv/CL9ErXkfYBSIQ0qvBuwzyHNxtzO2cifeS7LTQLmV3q/+b9jSS/U
Ql/Q8jXYW/A/ZsbWsdUDZUZTd8UCaw8v9G4+pDd/B1KpayV4IwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH4JNVqUHgr8UlQz7rqU4VEf6EJOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3
YzRjMC01MjllLTRjOWQtYmI2OS1kZWRiMDdiYmZmNjEvODFmOWU4NWMtMmY2ZC0z
NjJjLWI1ZjAtNmNhYjAyYTY1NGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmUyN2M0YzAtNTI5ZS00YzlkLWJi
NjktZGVkYjA3YmJmZjYxL2JlMjdjNGMwLTUyOWUtNGM5ZC1iYjY5LWRlZGIwN2Ji
ZmY2MS5jcmwwHwYDVR0jBBgwFoAUU5KbZMgjMWU/oBu15jJ72IhWwpcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iZTI3YzRjMC01MjllLTRjOWQtYmI2OS1kZWRi
MDdiYmZmNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz36QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACUDpgrx3uB3vIvGwIg2Idsy1jQhW8JyYpoLn1oD7a57xA128bf1xCBo
v0Ha6zWq9FnMk+uAwAz2tVhQ6JaJVg3j4lDFk6M/PScgBO2adRyxXAbM6SDcZ4hF
tl8ItZBPgK97jIlCYbQT25AdNgNyVE12iKxC0gmfcca0bFXHbbpgPQSazO8aVRyn
eWgFDipElJNg0xhqeX7RXn1hBaXVBFzXkw5zjI2o49LnyVnFNTJZZ2p9rZbdl44V
3JZOx2O9OEwjhNgqkhQNidkI+xbOqx3PBES2XNa16IbJYvcsQiM4lECiFOkg9LhG
eC3PKHqxZV0mbi1lKuCgVepAdrd0yKo=
-----END CERTIFICATE-----
Generated at Wed Mar 18 23:18:59 2026 by rpki-client