Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f2b6fe77-e2ce-3811-a906-c7a2450bc728.roa
File:                     f2b6fe77-e2ce-3811-a906-c7a2450bc728.roa (raw, json)
Hash identifier:          uTnEf6tnmeQ3+v/d/sgdDjWMQ/11L4FClxRpF2s6H1g=
Subject key identifier:   84:19:79:EF:BF:AB:60:B4:17:51:7F:DC:0B:3C:76:81:F3:AE:19:A2
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584E92A4A49086560036702FE740
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f2b6fe77-e2ce-3811-a906-c7a2450bc728.roa
Signing time:             Tue 21 Jul 2026 13:28:16 +0000
ROA not before:           Tue 21 Jul 2026 13:28:16 +0000
ROA not after:            Mon 19 Oct 2026 13:28:16 +0000
asID:                     54994
IP address blocks:        153.43.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:a4:a4:90:86:56:00:36:70:2f:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Jul 21 13:28:16 2026 GMT
            Not After : Oct 19 13:28:16 2026 GMT
        Subject: CN=548f1978-9fa8-4a72-bf42-54735cc787d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a2:6b:b1:e5:10:04:46:de:8d:88:2f:9e:54:
                    41:ee:66:23:a3:10:52:84:91:a5:95:0d:22:d7:74:
                    3a:85:06:ef:f5:96:10:e3:33:5c:ad:e0:2f:61:bc:
                    e6:0a:3e:c8:61:0f:e1:57:f2:db:14:14:f5:3b:3c:
                    40:de:1a:18:e0:46:0c:67:b3:dc:5f:59:b3:b4:e1:
                    38:f9:09:83:7d:08:67:fb:97:95:48:4c:24:2b:bc:
                    ac:a5:34:71:77:fe:ce:fd:18:9b:04:16:79:7d:eb:
                    fa:43:9a:54:f1:be:6d:f2:76:ce:35:d3:72:a7:08:
                    7c:52:c8:84:58:0c:5e:6c:c6:78:92:7f:46:9b:b2:
                    6a:bb:03:24:b8:8a:7d:a4:f2:f2:d5:c6:a5:34:06:
                    87:a3:a8:75:bc:52:78:b8:62:b2:94:5e:fa:fc:73:
                    38:f5:28:d5:81:30:43:79:6c:6d:e2:fe:2e:e3:c6:
                    aa:8c:61:4a:f5:f0:73:bd:23:a8:d2:9e:1a:07:1d:
                    25:b4:9d:91:62:b0:0d:20:f5:43:a9:b0:dc:53:53:
                    38:18:ae:76:b8:fe:8d:64:62:90:f6:e4:85:5d:82:
                    69:7d:72:40:6a:ad:39:4c:5a:d2:09:ed:b4:06:ae:
                    79:5e:74:9e:fd:84:e4:5e:ce:9e:f6:32:54:ae:88:
                    1c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:19:79:EF:BF:AB:60:B4:17:51:7F:DC:0B:3C:76:81:F3:AE:19:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f2b6fe77-e2ce-3811-a906-c7a2450bc728.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.43.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:fc:4b:e3:d6:51:ac:17:0f:1a:44:32:30:f9:f9:66:48:6f:
         23:d6:f3:06:68:b6:f6:1d:38:6d:58:69:f8:b3:37:90:9c:73:
         33:aa:7d:87:28:dc:4d:87:d7:d8:81:0e:97:aa:ee:1d:fc:3d:
         95:aa:72:78:c7:46:7a:f3:4c:37:1d:77:78:2e:37:c8:b4:28:
         d1:b5:20:80:d2:b8:76:86:cc:e2:fb:80:98:8b:9a:9f:3f:1e:
         07:bd:e8:a6:66:14:50:c4:a9:ce:83:a3:3d:c5:3b:72:0e:74:
         1f:35:44:be:23:13:94:92:57:5e:5a:ba:84:58:30:d1:2d:d1:
         a5:64:ca:e0:bb:6c:c2:17:74:11:4f:3a:9b:1d:42:10:19:c2:
         31:2c:bf:80:31:04:8f:ce:3d:3f:72:28:d6:80:f4:e2:3e:7a:
         fd:01:3b:cd:c9:38:2f:0a:c9:9a:59:3d:b8:d9:e0:51:59:88:
         b8:13:1d:60:0b:4b:5c:fc:e2:b0:f1:26:37:28:08:20:f0:ab:
         1b:5c:62:78:db:ed:44:92:cf:d2:de:bc:45:47:20:74:a9:2b:
         33:e9:5b:12:39:23:60:50:82:46:a8:2f:9a:df:6f:c5:35:db:
         58:8f:92:33:ad:73:3d:3b:5a:b0:82:ee:19:88:c1:3f:0c:9b:
         67:f0:66:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6SpKSQhlYANnAv50AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDFkYmMwZDctNGVjZi00YjliLTljN2ItOTIwMGFmOTAy
ZDFiMB4XDTI2MDcyMTEzMjgxNloXDTI2MTAxOTEzMjgxNlowLzEtMCsGA1UEAxMk
NTQ4ZjE5NzgtOWZhOC00YTcyLWJmNDItNTQ3MzVjYzc4N2QyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6JrseUQBEbejYgvnlRB7mYjoxBShJGllQ0i
13Q6hQbv9ZYQ4zNcreAvYbzmCj7IYQ/hV/LbFBT1OzxA3hoY4EYMZ7PcX1mztOE4
+QmDfQhn+5eVSEwkK7yspTRxd/7O/RibBBZ5fev6Q5pU8b5t8nbONdNypwh8UsiE
WAxebMZ4kn9Gm7JquwMkuIp9pPLy1calNAaHo6h1vFJ4uGKylF76/HM49SjVgTBD
eWxt4v4u48aqjGFK9fBzvSOo0p4aBx0ltJ2RYrANIPVDqbDcU1M4GK52uP6NZGKQ
9uSFXYJpfXJAaq05TFrSCe20Bq55XnSe/YTkXs6e9jJUrogcAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIQZee+/q2C0F1F/3As8doHzrhmiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MWRi
YzBkNy00ZWNmLTRiOWItOWM3Yi05MjAwYWY5MDJkMWIvZjJiNmZlNzctZTJjZS0z
ODExLWE5MDYtYzdhMjQ1MGJjNzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDFkYmMwZDctNGVjZi00YjliLTlj
N2ItOTIwMGFmOTAyZDFiLzQxZGJjMGQ3LTRlY2YtNGI5Yi05YzdiLTkyMDBhZjkw
MmQxYi5jcmwwHwYDVR0jBBgwFoAUr+2KlmaX9JrFjYUWRsptXpsJ0LcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS80MWRiYzBkNy00ZWNmLTRiOWItOWM3Yi05MjAw
YWY5MDJkMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmSv8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABn8S+PWUawXDxpEMjD5+WZIbyPW8wZotvYdOG1YafizN5CcczOqfYco
3E2H19iBDpeq7h38PZWqcnjHRnrzTDcdd3guN8i0KNG1IIDSuHaGzOL7gJiLmp8/
Hge96KZmFFDEqc6Doz3FO3IOdB81RL4jE5SSV15auoRYMNEt0aVkyuC7bMIXdBFP
OpsdQhAZwjEsv4AxBI/OPT9yKNaA9OI+ev0BO83JOC8KyZpZPbjZ4FFZiLgTHWAL
S1z84rDxJjcoCCDwqxtcYnjb7USSz9LevEVHIHSpKzPpWxI5I2BQgkaoL5rfb8U1
21iPkjOtcz07WrCC7hmIwT8Mm2fwZqw=
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:39:36 2026 by rpki-client