Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/7021ab6a-6e3a-39c4-8a00-51e6e77a0aab.roa
File:                     7021ab6a-6e3a-39c4-8a00-51e6e77a0aab.roa (raw, json)
Hash identifier:          9uqRKmPCYKLVYF8gYtV4uyVcqrLqP/RUqj3hGNKGMFs=
Subject key identifier:   AA:20:6C:E6:B9:57:DC:1D:07:17:13:2B:A2:6E:34:6D:8B:00:4F:E7
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F4328584D6AAA74494689713E61B65A40
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/7021ab6a-6e3a-39c4-8a00-51e6e77a0aab.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     16509
IP address blocks:        65.37.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:74:49:46:89:71:3e:61:b6:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=23dca8f5-8dcd-47dc-bc16-fed949df013c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:62:6e:a6:6b:75:a6:cd:0e:98:9c:3d:e2:ae:
                    a1:bf:43:7c:10:1f:3a:e0:f9:73:9e:ab:df:46:66:
                    c6:ff:aa:6b:ef:b6:2d:4e:c2:37:5c:94:f3:77:f8:
                    d9:fd:d7:db:cd:23:ce:66:7e:e4:da:40:70:c5:52:
                    36:2d:86:0a:9a:ed:09:49:5b:b4:84:c0:ec:fd:99:
                    51:58:33:a4:8a:2c:7b:a3:f9:0b:a3:c3:e9:56:96:
                    b5:34:c2:a7:b5:63:ce:c1:32:f5:93:ae:be:25:5e:
                    8d:6a:a9:09:95:4e:da:59:a3:46:9e:cb:d0:77:61:
                    64:c4:fe:ed:ad:06:e5:cb:a5:d6:f6:f9:25:e4:73:
                    49:f0:1f:b8:d8:91:c0:3b:4e:a1:c0:2b:c4:71:e4:
                    06:1f:f2:5b:d3:22:c8:46:44:c8:2d:04:f1:46:64:
                    bb:e6:d5:40:2c:06:01:44:64:5a:b7:37:bc:4e:e3:
                    2f:48:de:74:54:4f:da:76:84:d1:f8:d4:c1:b3:a1:
                    59:98:f2:20:d3:14:f0:1a:98:8f:83:bc:62:da:0d:
                    fa:8f:c3:9c:db:f5:0f:e0:64:92:50:bf:a1:d6:c8:
                    12:69:f8:a6:1b:64:57:9e:40:86:b7:32:ed:ce:0c:
                    a1:34:81:d3:27:07:35:e3:90:1c:a1:ab:b1:b8:e8:
                    6e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:20:6C:E6:B9:57:DC:1D:07:17:13:2B:A2:6E:34:6D:8B:00:4F:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/7021ab6a-6e3a-39c4-8a00-51e6e77a0aab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.37.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:6d:fc:5a:29:d0:44:cf:e7:87:ca:5a:f3:25:0a:f0:58:45:
         d7:e2:40:e2:fa:67:3b:f7:01:76:48:39:6b:42:df:39:2b:6d:
         36:ec:4a:6f:03:2c:a0:af:2b:0c:9a:42:79:c8:ad:a0:be:2f:
         88:20:65:c1:d3:cc:d7:4f:99:4e:3b:6d:18:38:95:26:6c:29:
         d0:59:7c:00:33:75:95:bf:51:50:14:be:73:68:ab:0f:06:2a:
         d0:61:cc:16:a8:c2:96:12:09:b1:c9:af:54:0a:a3:fe:d3:39:
         83:15:8c:71:3c:d3:b1:f8:9b:98:3d:4c:39:f1:80:39:34:33:
         64:f7:49:94:3d:9a:68:77:92:d7:ef:2e:b7:5a:e3:48:04:f2:
         b1:9e:4d:0f:64:8d:e5:3c:68:92:0c:61:3c:6a:cb:d8:2b:62:
         eb:75:0e:75:9e:3b:37:29:1b:f8:d5:1e:55:ee:03:1e:68:fe:
         4b:fe:2e:14:fc:ec:b9:a5:9f:c3:6c:8f:ca:57:d6:3e:d3:5d:
         07:f6:1a:23:0d:1f:e0:8e:0b:e6:b9:d2:f9:97:95:df:d1:4f:
         af:c8:68:ee:48:56:2e:96:14:26:9e:68:e0:87:a3:8f:c1:e4:
         e5:a2:eb:2e:d8:79:87:4d:2c:ab:13:a4:af:46:86:3a:fd:fe:
         e4:9b:84:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqnRJRolxPmG2WkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDNiZGY1YjAtNzMzYi00ODFiLWFkY2ItZmI4NDU5Yjcw
MjhiMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk
MjNkY2E4ZjUtOGRjZC00N2RjLWJjMTYtZmVkOTQ5ZGYwMTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWJupmt1ps0OmJw94q6hv0N8EB864Plznqvf
RmbG/6pr77YtTsI3XJTzd/jZ/dfbzSPOZn7k2kBwxVI2LYYKmu0JSVu0hMDs/ZlR
WDOkiix7o/kLo8PpVpa1NMKntWPOwTL1k66+JV6NaqkJlU7aWaNGnsvQd2FkxP7t
rQbly6XW9vkl5HNJ8B+42JHAO06hwCvEceQGH/Jb0yLIRkTILQTxRmS75tVALAYB
RGRatze8TuMvSN50VE/adoTR+NTBs6FZmPIg0xTwGpiPg7xi2g36j8Oc2/UP4GSS
UL+h1sgSafimG2RXnkCGtzLtzgyhNIHTJwc145AcoauxuOhu2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKogbOa5V9wdBxcTK6JuNG2LAE/nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Jk
ZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0NTliNzAyOGIvNzAyMWFiNmEtNmUzYS0z
OWM0LThhMDAtNTFlNmU3N2EwYWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNiZGY1YjAtNzMzYi00ODFiLWFk
Y2ItZmI4NDU5YjcwMjhiLzAzYmRmNWIwLTczM2ItNDgxYi1hZGNiLWZiODQ1OWI3
MDI4Yi5jcmwwHwYDVR0jBBgwFoAUinDlsmggvWjTpCbKkoLuqgn9P8gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2JkZjViMC03MzNiLTQ4MWItYWRjYi1mYjg0
NTliNzAyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQSXwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACtt/Fop0ETP54fKWvMlCvBYRdfiQOL6Zzv3AXZIOWtC3zkrbTbsSm8D
LKCvKwyaQnnIraC+L4ggZcHTzNdPmU47bRg4lSZsKdBZfAAzdZW/UVAUvnNoqw8G
KtBhzBaowpYSCbHJr1QKo/7TOYMVjHE807H4m5g9TDnxgDk0M2T3SZQ9mmh3ktfv
Lrda40gE8rGeTQ9kjeU8aJIMYTxqy9grYut1DnWeOzcpG/jVHlXuAx5o/kv+LhT8
7Lmln8Nsj8pX1j7TXQf2GiMNH+COC+a50vmXld/RT6/IaO5IVi6WFCaeaOCHo4/B
5OWi6y7YeYdNLKsTpK9Ghjr9/uSbhMk=
-----END CERTIFICATE-----
Generated at Tue Apr 7 13:29:53 2026 by rpki-client