Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/1ec33240-72b3-33e3-ae93-d2d186fee877.roa
File:                     1ec33240-72b3-33e3-ae93-d2d186fee877.roa (raw, json)
Hash identifier:          ISV6rgCFxDGcM8QZOWfwqn91B0+6TrGtlL0spzdmqoQ=
Subject key identifier:   C5:0C:D7:6E:DE:30:17:5B:97:74:68:59:18:30:93:E3:36:3D:4F:A2
Certificate issuer:       /CN=0153231e-bade-4c05-b3fd-55b65671daae
Certificate serial:       010D0C9F4328584E15E431C94AD743BDF82E6440
Authority key identifier: B9:A6:5D:CA:07:55:7E:11:15:64:29:15:E9:88:AC:27:C6:71:22:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/1ec33240-72b3-33e3-ae93-d2d186fee877.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     395153
IP address blocks:        107.182.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:31:c9:4a:d7:43:bd:f8:2e:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0153231e-bade-4c05-b3fd-55b65671daae
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=584d9284-5b1a-4763-b2f1-68142252cc3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:29:ec:f7:5b:02:73:79:32:33:15:d7:d0:3f:
                    45:05:05:fb:e4:d8:54:09:95:f7:f8:ea:af:35:e9:
                    a2:89:0f:d2:53:08:f4:45:e5:c3:fe:be:f5:9e:ae:
                    ef:44:9b:71:fb:0c:b6:34:c8:a5:19:cc:bd:37:dd:
                    08:35:2f:46:d3:ac:3f:d7:49:6c:de:83:93:0a:29:
                    f2:ef:a5:d8:f9:a2:ee:f2:70:08:c7:59:f3:00:3a:
                    c2:e1:89:4b:ec:55:dd:33:64:11:57:82:8c:68:c0:
                    47:75:66:05:f8:ac:67:ba:ea:e0:12:30:75:00:5c:
                    fb:15:a2:e3:8b:63:7c:f3:97:3d:0e:2f:01:6b:0e:
                    70:32:d1:a4:d3:ad:51:f1:d1:8b:2f:02:c3:3b:f7:
                    18:89:95:b0:cc:18:63:5e:31:1c:55:c6:32:fd:e7:
                    bb:40:0a:5e:60:18:03:a4:14:e9:03:eb:93:29:08:
                    90:a6:5b:24:61:e2:1d:9f:ac:fe:de:db:39:7a:80:
                    ea:4b:f2:0c:00:43:46:0c:55:ca:2b:48:7a:93:c0:
                    3e:d2:de:2d:36:de:77:1a:84:a7:49:59:74:3a:4a:
                    c4:f7:2a:b6:92:7b:90:c1:c1:96:d7:ba:f1:89:d0:
                    00:ab:a1:12:ff:f9:77:d5:dd:25:6a:8d:04:cf:53:
                    71:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0C:D7:6E:DE:30:17:5B:97:74:68:59:18:30:93:E3:36:3D:4F:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/1ec33240-72b3-33e3-ae93-d2d186fee877.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae/0153231e-bade-4c05-b3fd-55b65671daae.crl

            X509v3 Authority Key Identifier:
                keyid:B9:A6:5D:CA:07:55:7E:11:15:64:29:15:E9:88:AC:27:C6:71:22:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0153231e-bade-4c05-b3fd-55b65671daae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.182.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:a2:ac:3d:f8:6f:de:d2:0a:6f:21:81:a8:e4:d2:53:f0:5f:
         76:5d:c0:d7:e2:eb:0b:ad:84:f9:a5:7e:c1:38:93:63:87:54:
         8c:79:70:b4:a8:d0:57:23:b9:a1:78:1d:8b:d2:cc:87:23:53:
         03:0f:23:b9:0a:a6:d4:8f:16:e9:b1:33:bf:52:96:0b:81:82:
         6d:37:3f:5e:e5:ac:69:e2:08:d7:35:60:d9:73:c4:05:c8:d4:
         b2:d0:ff:46:02:7a:43:d1:6c:cc:17:64:25:2f:39:24:ab:c7:
         49:7f:94:6f:25:21:4b:bc:b8:b3:f0:1e:ea:3d:bb:bf:08:74:
         15:ae:e3:9d:e2:9e:dc:9d:4f:1b:fc:28:2b:f0:f7:dc:6b:c6:
         e5:65:b0:62:5b:b0:91:29:38:d0:15:41:4d:e5:fe:c6:05:70:
         ee:2b:8e:b2:68:2c:b7:d1:fa:09:5c:e7:85:1e:16:45:a2:06:
         91:bd:d7:15:bf:e0:28:57:54:7f:00:22:96:44:32:e7:f0:bb:
         11:42:3c:72:6a:49:20:69:0e:cb:b5:77:a8:ed:0d:36:b3:6e:
         3f:cb:b1:1b:ef:2f:11:cc:49:39:a0:f7:53:05:08:84:74:e8:
         93:67:a0:f6:4d:97:8f:02:8d:e4:6d:9c:f7:4a:ba:a6:66:40:
         3d:f4:bc:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4V5DHJStdDvfguZEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDE1MzIzMWUtYmFkZS00YzA1LWIzZmQtNTViNjU2NzFk
YWFlMB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk
NTg0ZDkyODQtNWIxYS00NzYzLWIyZjEtNjgxNDIyNTJjYzNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSns91sCc3kyMxXX0D9FBQX75NhUCZX3+Oqv
NemiiQ/SUwj0ReXD/r71nq7vRJtx+wy2NMilGcy9N90INS9G06w/10ls3oOTCiny
76XY+aLu8nAIx1nzADrC4YlL7FXdM2QRV4KMaMBHdWYF+KxnuurgEjB1AFz7FaLj
i2N885c9Di8Baw5wMtGk061R8dGLLwLDO/cYiZWwzBhjXjEcVcYy/ee7QApeYBgD
pBTpA+uTKQiQplskYeIdn6z+3ts5eoDqS/IMAENGDFXKK0h6k8A+0t4tNt53GoSn
SVl0OkrE9yq2knuQwcGW17rxidAAq6ES//l31d0lao0Ez1NxcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMUM127eMBdbl3RoWRgwk+M2PU+iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wMTUz
MjMxZS1iYWRlLTRjMDUtYjNmZC01NWI2NTY3MWRhYWUvMWVjMzMyNDAtNzJiMy0z
M2UzLWFlOTMtZDJkMTg2ZmVlODc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDE1MzIzMWUtYmFkZS00YzA1LWIz
ZmQtNTViNjU2NzFkYWFlLzAxNTMyMzFlLWJhZGUtNGMwNS1iM2ZkLTU1YjY1Njcx
ZGFhZS5jcmwwHwYDVR0jBBgwFoAUuaZdygdVfhEVZCkV6YisJ8ZxImgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8wMTUzMjMxZS1iYWRlLTRjMDUtYjNmZC01NWI2
NTY3MWRhYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa7YFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJairD34b97SCm8hgajk0lPwX3ZdwNfi6wuthPmlfsE4k2OHVIx5cLSo
0FcjuaF4HYvSzIcjUwMPI7kKptSPFumxM79SlguBgm03P17lrGniCNc1YNlzxAXI
1LLQ/0YCekPRbMwXZCUvOSSrx0l/lG8lIUu8uLPwHuo9u78IdBWu453intydTxv8
KCvw99xrxuVlsGJbsJEpONAVQU3l/sYFcO4rjrJoLLfR+glc54UeFkWiBpG91xW/
4ChXVH8AIpZEMufwuxFCPHJqSSBpDsu1d6jtDTazbj/LsRvvLxHMSTmg91MFCIR0
6JNnoPZNl48CjeRtnPdKuqZmQD30vFo=
-----END CERTIFICATE-----
Generated at Tue Jun 9 08:31:09 2026 by rpki-client