Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/0a2b3147-e37c-3ae6-94c9-1e40b7bbc8bc.roa
File:                     0a2b3147-e37c-3ae6-94c9-1e40b7bbc8bc.roa (raw, json)
Hash identifier:          67R0vBalBQSbo9gB/2/MA8snZeJokuPVqrX4vsI5/ks=
Subject key identifier:   78:83:C6:0B:5B:BD:B7:96:76:54:67:E2:7F:93:0B:7C:7C:F1:89:7E
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584D5F982E174F977E4DD6426000
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/0a2b3147-e37c-3ae6-94c9-1e40b7bbc8bc.roa
Signing time:             Thu 02 Apr 2026 13:50:00 +0000
ROA not before:           Thu 02 Apr 2026 13:50:00 +0000
ROA not after:            Wed 01 Jul 2026 13:50:00 +0000
asID:                     31898
IP address blocks:        108.174.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:98:2e:17:4f:97:7e:4d:d6:42:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Apr  2 13:50:00 2026 GMT
            Not After : Jul  1 13:50:00 2026 GMT
        Subject: CN=9a85915e-41b1-4e1c-bbac-cb6b5e5dd287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:cf:90:a0:f5:2c:fc:e4:30:18:e7:bf:1d:89:
                    27:c6:e4:b6:26:e0:dc:33:e5:b5:ff:fd:49:0e:f3:
                    33:f0:a2:bb:6c:0c:c9:8e:67:1e:0b:20:3f:5d:f7:
                    04:65:d5:13:d5:76:2b:e4:26:f5:61:20:66:31:55:
                    11:c2:a8:91:6b:36:14:56:b4:80:30:57:86:b7:c8:
                    d3:11:25:b8:20:93:b2:5e:32:10:25:48:c7:ba:9d:
                    ce:ac:b8:50:13:5f:bf:56:08:78:6a:0f:0a:bb:ab:
                    4c:30:2b:6b:9a:7d:52:1d:7b:ba:de:27:a2:b3:8d:
                    f8:df:40:de:df:2d:7e:c7:25:a6:7b:ea:ce:79:e7:
                    ad:6f:46:67:a3:1c:6a:7b:eb:98:73:5c:d1:24:e0:
                    32:51:d3:12:f8:01:1c:f0:00:35:d7:38:4f:12:7d:
                    1f:d4:36:39:57:b9:fe:c6:86:ab:23:fa:54:a0:fa:
                    09:45:63:50:81:af:cf:db:ea:2f:4a:a5:06:b8:5c:
                    45:fd:b1:67:70:63:96:33:b5:23:68:67:b8:2c:54:
                    00:62:ca:d1:c3:e7:c8:98:24:76:8c:a7:d1:9c:ff:
                    94:04:0f:55:50:a8:9c:20:9b:d2:e3:60:9c:6a:f1:
                    2a:2c:58:30:9a:5b:8d:85:b6:55:73:65:c1:30:65:
                    bf:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:83:C6:0B:5B:BD:B7:96:76:54:67:E2:7F:93:0B:7C:7C:F1:89:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/0a2b3147-e37c-3ae6-94c9-1e40b7bbc8bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.174.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:b0:11:03:06:82:71:15:6e:6b:9e:13:80:f0:38:c0:95:7a:
         49:f9:fe:a3:84:8c:7d:15:6b:fa:f0:7b:5b:6c:fa:19:f3:b4:
         9a:96:f7:b1:38:e8:17:ae:cf:cc:fd:5d:8b:20:21:60:4f:6d:
         54:99:87:ff:fe:66:33:74:a8:f5:b4:b4:da:e6:b5:6c:10:71:
         8f:a9:3c:65:7d:cb:ae:a3:8d:6d:55:26:d0:28:c7:27:85:ee:
         8f:d4:72:37:17:b7:77:3c:3c:8a:1e:cf:3b:83:31:84:90:47:
         fd:f1:0d:04:54:03:c7:b4:0d:19:a1:26:db:9b:3f:02:a7:0d:
         fd:84:60:82:1e:39:b4:b3:0b:f3:4b:b8:88:fd:43:61:96:4a:
         69:ba:f6:ed:66:35:6b:c6:f0:d1:fc:e6:8b:cc:8b:bd:bc:67:
         aa:a9:e9:8a:30:4a:c7:da:5c:ce:53:30:7f:31:4a:f1:5f:8e:
         52:00:63:3e:5b:4b:86:bb:51:8f:31:af:34:ea:82:41:3a:0b:
         b6:1e:c8:cb:b9:5c:10:ca:c9:fb:fd:87:1b:ba:45:87:55:53:
         eb:53:b0:0f:f2:88:aa:f9:90:a7:2f:66:e6:46:24:6a:a0:fa:
         18:ab:1b:a0:24:cc:20:99:a6:39:96:bf:35:bc:1a:37:8a:34:
         49:8c:6c:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1fmC4XT5d+TdZCYAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODM1MTUyYzItMmVkOC00MTUxLThmODItYWM5NDA3MzM1
YjJjMB4XDTI2MDQwMjEzNTAwMFoXDTI2MDcwMTEzNTAwMFowLzEtMCsGA1UEAxMk
OWE4NTkxNWUtNDFiMS00ZTFjLWJiYWMtY2I2YjVlNWRkMjg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9M+QoPUs/OQwGOe/HYknxuS2JuDcM+W1//1J
DvMz8KK7bAzJjmceCyA/XfcEZdUT1XYr5Cb1YSBmMVURwqiRazYUVrSAMFeGt8jT
ESW4IJOyXjIQJUjHup3OrLhQE1+/Vgh4ag8Ku6tMMCtrmn1SHXu63ieis43430De
3y1+xyWme+rOeeetb0Znoxxqe+uYc1zRJOAyUdMS+AEc8AA11zhPEn0f1DY5V7n+
xoarI/pUoPoJRWNQga/P2+ovSqUGuFxF/bFncGOWM7UjaGe4LFQAYsrRw+fImCR2
jKfRnP+UBA9VUKicIJvS42CcavEqLFgwmluNhbZVc2XBMGW/AwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHiDxgtbvbeWdlRn4n+TC3x88Yl+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84MzUx
NTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0MDczMzViMmMvMGEyYjMxNDctZTM3Yy0z
YWU2LTk0YzktMWU0MGI3YmJjOGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODM1MTUyYzItMmVkOC00MTUxLThm
ODItYWM5NDA3MzM1YjJjLzgzNTE1MmMyLTJlZDgtNDE1MS04ZjgyLWFjOTQwNzMz
NWIyYy5jcmwwHwYDVR0jBBgwFoAUip902Uy3YwUwNo8P7EWat+Zpdd4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy84MzUxNTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0
MDczMzViMmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbK6QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEmwEQMGgnEVbmueE4DwOMCVekn5/qOEjH0Va/rwe1ts+hnztJqW97E4
6Beuz8z9XYsgIWBPbVSZh//+ZjN0qPW0tNrmtWwQcY+pPGV9y66jjW1VJtAoxyeF
7o/UcjcXt3c8PIoezzuDMYSQR/3xDQRUA8e0DRmhJtubPwKnDf2EYIIeObSzC/NL
uIj9Q2GWSmm69u1mNWvG8NH85ovMi728Z6qp6YowSsfaXM5TMH8xSvFfjlIAYz5b
S4a7UY8xrzTqgkE6C7YeyMu5XBDKyfv9hxu6RYdVU+tTsA/yiKr5kKcvZuZGJGqg
+hirG6AkzCCZpjmWvzW8GjeKNEmMbOk=
-----END CERTIFICATE-----
Generated at Mon Apr 13 14:34:56 2026 by rpki-client