Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8b023409-61ad-3e7c-a6f4-7ea5cb8925bb.roa
File:                     8b023409-61ad-3e7c-a6f4-7ea5cb8925bb.roa (raw, json)
Hash identifier:          mBhs3atrtQTSlKwQnR2U9TOBtPNwo4pDj16Ff0Piqn8=
Subject key identifier:   AD:DE:E1:4F:FF:86:3B:0C:00:3A:A8:C0:64:D0:50:68:34:55:46:54
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584D07ACFEECAFBD826E88AA7180
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8b023409-61ad-3e7c-a6f4-7ea5cb8925bb.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        108.179.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:fe:ec:af:bd:82:6e:88:aa:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=580f3ac2-b956-453f-b9db-f4da1b13b061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4c:1a:3c:40:19:63:66:41:4d:de:70:14:ac:
                    cd:81:2d:7d:f6:c5:21:14:4a:3e:9a:d7:4f:7a:40:
                    48:42:98:b4:80:cd:89:dc:39:0b:16:b8:30:28:e5:
                    bd:21:c5:f3:e5:a6:4f:f4:f8:a0:81:57:bd:63:2a:
                    29:b0:1f:26:38:24:d1:dd:c5:b5:50:97:a7:76:af:
                    4b:75:27:d7:e3:84:18:76:aa:9c:f3:74:8a:c9:48:
                    4b:b3:dc:42:ef:51:7b:3b:0d:40:da:17:d9:8d:16:
                    a6:87:97:85:b3:8c:cd:9e:9d:fd:48:66:4e:dc:da:
                    34:54:14:36:9b:07:d0:b5:56:e9:f6:2f:b8:69:d2:
                    93:ad:60:c6:89:cf:41:9d:52:8e:6e:3c:be:98:84:
                    ed:9e:48:03:15:20:2f:c6:a0:8b:42:4f:92:19:7e:
                    0e:c3:e8:71:a9:fa:cd:69:3c:b2:2a:87:fc:2f:de:
                    28:7e:55:3e:f7:5a:88:87:71:c1:34:37:d6:d8:34:
                    08:e7:f7:2b:e9:98:22:e9:43:51:0e:52:2d:14:e8:
                    1f:b8:5b:21:04:b5:d0:0d:37:e4:f7:ce:af:57:ac:
                    68:3c:1c:1b:f6:32:56:d5:76:e5:44:cb:ff:d2:6d:
                    be:4a:ae:cf:25:8f:16:56:e2:05:40:c2:ec:a9:fa:
                    f4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:DE:E1:4F:FF:86:3B:0C:00:3A:A8:C0:64:D0:50:68:34:55:46:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8b023409-61ad-3e7c-a6f4-7ea5cb8925bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.179.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:f4:c3:61:92:cb:31:94:35:d1:df:7a:30:67:0f:73:68:fe:
         75:99:ea:af:08:1b:00:e5:02:c6:e2:4b:3e:87:31:b9:8e:50:
         9d:3e:e0:93:a9:ae:92:69:18:28:f4:86:fc:93:c7:3e:d1:80:
         2a:6a:37:78:e2:b3:02:af:da:72:08:5d:3f:90:25:b0:12:80:
         03:26:87:98:69:11:22:77:d6:a9:c3:ec:b8:7e:24:db:cb:b4:
         3a:10:fa:d2:47:7e:ca:57:d4:99:80:72:89:96:ce:67:1b:a0:
         c6:d7:a5:42:ac:a4:26:a0:cb:b4:17:b8:30:1a:20:6d:01:36:
         99:33:bf:b0:29:61:ed:bc:a3:c9:b7:41:3d:ec:ae:56:4a:31:
         84:dc:3c:53:75:11:7e:8f:01:e7:80:15:b8:2c:64:15:c9:88:
         84:ea:62:a4:31:0f:16:ea:18:39:ec:95:78:6a:dc:23:a0:99:
         46:2c:bf:57:95:56:46:cf:99:2c:27:5d:fd:2b:90:8d:bb:97:
         e4:51:9a:cb:ac:27:f0:ed:63:8a:82:87:57:25:46:90:08:38:
         28:14:27:f6:84:cc:ee:4e:fc:8e:ba:d1:50:1e:10:90:ff:62:
         32:c8:10:99:82:bb:27:a1:d4:50:48:9e:bf:75:27:9a:69:91:
         8a:79:f1:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrP7sr72CboiqcYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0
N2ExMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk
NTgwZjNhYzItYjk1Ni00NTNmLWI5ZGItZjRkYTFiMTNiMDYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0waPEAZY2ZBTd5wFKzNgS199sUhFEo+mtdP
ekBIQpi0gM2J3DkLFrgwKOW9IcXz5aZP9PiggVe9YyopsB8mOCTR3cW1UJendq9L
dSfX44QYdqqc83SKyUhLs9xC71F7Ow1A2hfZjRamh5eFs4zNnp39SGZO3No0VBQ2
mwfQtVbp9i+4adKTrWDGic9BnVKObjy+mITtnkgDFSAvxqCLQk+SGX4Ow+hxqfrN
aTyyKof8L94oflU+91qIh3HBNDfW2DQI5/cr6Zgi6UNRDlItFOgfuFshBLXQDTfk
986vV6xoPBwb9jJW1XblRMv/0m2+Sq7PJY8WVuIFQMLsqfr0vQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK3e4U//hjsMADqowGTQUGg0VUZUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1
ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvOGIwMjM0MDktNjFhZC0z
ZTdjLWE2ZjQtN2VhNWNiODkyNWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz
OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1
NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk
OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbLOYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAL0w2GSyzGUNdHfejBnD3No/nWZ6q8IGwDlAsbiSz6HMbmOUJ0+4JOp
rpJpGCj0hvyTxz7RgCpqN3jiswKv2nIIXT+QJbASgAMmh5hpESJ31qnD7Lh+JNvL
tDoQ+tJHfspX1JmAcomWzmcboMbXpUKspCagy7QXuDAaIG0BNpkzv7ApYe28o8m3
QT3srlZKMYTcPFN1EX6PAeeAFbgsZBXJiITqYqQxDxbqGDnslXhq3COgmUYsv1eV
VkbPmSwnXf0rkI27l+RRmsusJ/DtY4qCh1clRpAIOCgUJ/aEzO5O/I660VAeEJD/
YjLIEJmCuyeh1FBInr91J5ppkYp58aQ=
-----END CERTIFICATE-----
Generated at Thu Mar 19 15:22:25 2026 by rpki-client